43501 matches found
CVE-2026-80555
CVE-2026-80555 affects the Linux kernel on s390 architecture, specifically the vfio_ccw subsystem. The root cause is a memory leak that occurs when cp_init() fails: the existing cleanup in ccwchain_handle_ccw() only frees the currently-processed CCW segment, leaking other segments allocated as pa...
CVE-2026-80555 s390/vfio_ccw: Free all memory if cp_init() fails
In the Linux kernel, the following vulnerability has been resolved: s390/vfioccw: Free all memory if cpinit fails The routine cpfree is called to unpin/free any memory once an I/O is completed successfully, or if cpprefetch fails. But if cpinit fails, and cp-initialized is not enabled, the same...
CVE-2026-80555 s390/vfio_ccw: Free all memory if cp_init() fails
In the Linux kernel, the following vulnerability has been resolved: s390/vfioccw: Free all memory if cpinit fails The routine cpfree is called to unpin/free any memory once an I/O is completed successfully, or if cpprefetch fails. But if cpinit fails, and cp-initialized is not enabled, the same...
CVE-2026-80539
CVE-2026-80539 affects the Linux kernel 's drm/amdgpu driver. In amdgpu_cs_pass1(), a user submission carrying multiple AMDGPU_CHUNK_ID_FENCE chunks causes amdgpu_cs_p1_user_fence() to run more than once. Because p->uf_bo is a single-slot field, each subsequent call overwrites it with a newly ...
nwn-exploit
Exploit Neverwinter Nights: Enhanced Edition Questa repository contiene una PoC per sfruttare Neverwinter Nights: Enhanced Editions. Questo articolo del blog descrive le vulnerabilità e lo sfruttamento. Versione di Windows: 10.0.19045.2965 Neverwinter Night Enhanced Editions: versione vulnerabile...
Security update for the Linux Kernel
The SUSE Linux Enterprise 11 SP4 kernel was updated to fix various security issues: The following security issues were fixed: CVE-2023-53995: net: ipv4: fix one memleak in inetdelifa bsc1255616. CVE-2026-23204: net: add skbheaderpointercareful helper bsc1258340. CVE-2026-52986: netfilter:...
Security update for the Linux Kernel (Live Patch 84 for SUSE Linux Enterprise 12 SP5)
This update for the SUSE Linux Enterprise Kernel 4.12.14-122.317 fixes various security issues: The following security issues were fixed: CVE-2023-53995: net: ipv4: fix one memleak in inetdelifa bsc1269284. CVE-2025-40204,CVE-2026-53224,CVE-2026-53246: sctp: validate cached peer INIT chunk length...
CVE-2016-6415-BenignCertain-Monitor
CVE-2016-6415-BenignCertain-Monitor Reimplementazione del benigncertain-monitor di VirtueSecurity. Non ha tutte le stesse opzioni di payload dell'originale, ma sostituisce il binario bc-id con una migliore prova di concetto di Ross Bradley che può essere ampliata se necessario. Crediti: Monitor...
Mongobleed-Detector-CVE-2025-14847
MongoBleed Scanner Uno scanner di vulnerabilità professionale per CVE-2025-14847 MongoBleed: vulnerabilità di perdita di memoria di MongoDB. root@kitploit: +================================================================+ | MongoBleed Scanner v1.3.0 | | CVE-2025-14847 - MongoDB Memory Leak...
CVE-2025-14177
CVE-2025-14177 — Perdita di memoria heap in PHP getimagesize Solo per test di penetrazione autorizzati e ricerca sulla sicurezza. Vulnerabilità...
CVE-2025-14847
CVE-2025-14847 – Exploit di perdita di memoria non autenticata di MongoDB Panoramica Un exploit proof‑of‑concept PoC per la vulnerabilità di decompressione zlib di MongoDB che consente a utenti malintenzionati non autenticati di leggere la memoria sensibile del server. Il PoC è implementato in...
CVE-2025-14847
CVE-2025-14847 MongoBleed 📜 Beschreibung Dieses Skript wurde entwickelt, um die Schwachstelle zur Offenlegung von Heap-Speicher namens CVE-2025-14847 „MongoBleed“ in MongoDB Server auszunutzen. Durch das Senden speziell präparierter zlib-komprimierter OPMSG-Pakete mit einer überhöhten Dokumentlän...
cve-2025-14847
MongoBleed: CVE-2025-14847 – Strumento di Rilevamento delle Perdite di Memoria MongoBleed è uno strumento di audit di sicurezza ad alte prestazioni progettato per rilevare e dimostrare CVE-2025-14847. Questa vulnerabilità consente a un attaccante remoto non autenticato di divulgare frammenti di...
kernel: Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count
A flaw was found in the Linux kernel's synaptics-rmi4 input driver. The rmif3amapgpios function incorrectly allocates memory for the gpiokeymap, making it smaller than required. This allows a device reporting a specific gpiocount value to trigger an out-of-bounds read, leading to information...
Linux Distros Unpatched Vulnerability : CVE-2026-79771
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Nokogiri versions before 1.19.3 contain a memory leak in the XSLT Stylesheet transform method when processing Ruby strings containing null bytes. Attackers can...
Linux Distros Unpatched Vulnerability : CVE-2026-80588
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mptcp: reclaim forward-allocated memory on RX path errors After commit 9db5b3cec4ec mptcp: borrow forward memory from subflow, errors in the receive path prior ...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098801)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098801 advisory. In the Linux kernel, the following vulnerability has been resolved: net: lan743x: Fix memleak issue when GSO enabled Always map the skb to the LS descriptor...
PT-2026-82204
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak exists in the Multipath TCP MPTCP receive path. Following a specific commit that allowed borrowing forward memory from subflows, errors occurring in the receive path before...
SUSE SLES15 Security Update : kernel (Live Patch 29 for SUSE Linux Enterprise 15 SP5) (SUSE-SU-2026:3739-1)
The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3739-1 advisory. This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.116 fixes various security issues: The following security issues were fixed:...
SUSE SLES15 Security Update : kernel (Live Patch 36 for SUSE Linux Enterprise 15 SP5) (SUSE-SU-2026:3724-1)
The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3724-1 advisory. This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.141 fixes various security issues: The following security issues were fixed:...