2286 matches found
The vulnerability of Microsoft Office packages and 365 Apps for Enterprise lies in the use of memory after it is freed, allowing an attacker to execute arbitrary code.
The vulnerability of Microsoft Office packages and 365 Apps for Enterprise lies in the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
uafuzz
UAFuzz: التوجيه الموجه على مستوى البرنامج الثنائي للثغرات من نوع الاستخدام بعد التحرير الاختبار العشوائي الموجه للصندوق الرمادي DGF مثل AFLGo يهدف إلى إجراء اختبار إجهاد على مواقع الهدف المحتملة الحساسة المحددة مسبقًا، مع تطبيقات في سياقات أمنية مختلفة: 1 إعادة إنتاج الثغرات، 2 اختبار التصحيحات، ...
blackbox-fuzzing
Fuzzing en boîte noire d'appareils IoT avec le routeur TL-WR902AC comme exemple Ceci est la version HTML de mon mémoire qui peut être téléchargé en PDF ici. Introduction Le fuzzing est devenu « l'un des moyens les plus efficaces » de trouver des bugs dans les logiciels. C'est par cette affirmatio...
Internet-Explorer-UAF
لا يحتوي هذا المستودع على ملف README...
Linux Distros Unpatched Vulnerability : CVE-2026-43630
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - llama.cpp builds b5702 through b7653 contain an out-of-bounds read vulnerability in the recurrent memory state restore path that allows attackers with write...
CVE-2026-43630
llama.cpp builds b5702 through b7653 contain an out-of-bounds read vulnerability in the recurrent memory state restore path that allows attackers with write access to the slot save directory to read memory past the end of the allocated cells array. Attackers can craft a malicious slot file with a...
CVE-2026-70632
FFmpeg versions from 4.4 up to, but not including, 9.0 contain an out-of-bounds heap write vulnerability in the native GoPro CineForm HD CFHD decoder that allows remote attackers to corrupt heap memory by supplying a crafted AVI file during stream probing. The cfhddecode function fails to enforce...
CVE-2026-19108 MZ Automation libiec61850 URCB Revalidation reporting.c deleteDataSetValuesShadowBuffer use after free
A vulnerability was found in MZ Automation libiec61850 up to 1.6.1. The affected element is the function deleteDataSetValuesShadowBuffer of the file src/iec61850/server/mmsmapping/reporting.c of the component URCB Revalidation. The manipulation results in use after free. The attack needs to be...
Oracle Linux 7 / 8 : Unbreakable Enterprise kernel (ELSA-2026-500136)
The remote Oracle Linux 7 / 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-500136 advisory. - x86/bugs: Make Safe-RET robust against interrupt injection Borislav Petkov AMD Orabug: 39832992 CVE-2026-68480 - xfs: resample the data fork...
ROS-20260803-73-0011
The vulnerability of the ngxhttpssimodule module in NGINX Plus and NGINX Open Source HTTP servers relates to the possibility of using memory after it is freed. Exploiting this vulnerability allows a remote attacker to modify the memory contents of the working process or cause service failures...
PT-2026-66630
Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A crafted IEC 60870-5-104 I-frame with TypeID 104 C TS NA 1 and an inflated object count causes the TestCommand getFromBuffer function to read one byte past the...
CVE-2026-28896
The issue was addressed with improved memory handling. This issue is fixed in iOS 26.4 and iPadOS 26.4, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.4, tvOS 26.4, visionOS 26.4, watchOS 26.4. An attacker may be able to cause unexpected system termination or read kernel memory...
CVE-2026-64749
The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Tahoe 26.6, visionOS 26.6. An app may be able to cause unexpected system termination or corrupt kernel memory...
CVE-2026-64703
CVE-2026-64703 is a use-after-free memory issue that Apple fixed by improved memory management. The vulnerability could allow an application to cause a denial-of-service and is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6. The CVSS 3.1 vector is Network/Low/None for pr...
SUSE CVE-2026-21723
The alertmanager templates test endpoint /api/alertmanager/grafana/config/api/v1/templates/test can execute templates with no memory limits. Mass-executing templates in a short period causes OOM and crashes the Grafana service. The endpoint requires very low privileges and is exploitable with...
ROS-20260722-73-0025
The vulnerability of the Views component in Google Chrome and Microsoft Edge relates to the ability to utilize memory after it is freed. Exploiting this vulnerability could allow a remote attacker to bypass existing security measures...
The vulnerability of the Adobe Bridge file manager, related to writing beyond the buffer boundaries in memory, allows a hacker to execute arbitrary code.
The vulnerability of the Adobe Bridge file manager is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
ROS-20260722-73-0027
The vulnerability of the DOM components in Google Chrome and Microsoft Edge relates to the possibility of using memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
OESA-2026-3033 gpsd security update
gpsd is a service daemon that mediates access to a GPS sensor connected to the host computer by serial or USB interface, making its data on the location/course/velocity of the sensor available to be queried on TCP port 2947 of the host computer. With gpsd, multiple GPS client applications such as...
