3054 matches found
CVE-2017-16995
The latest version of Ubuntu Ubuntu 16.04 has a high-risk local privilege escalation vulnerability, numbered CVE-2017-16995. This vulnerability exists in the Linux kernel system that calls eBPF bpf2. When a user provides a malicious BPF program, the eBPF verifier module generates a calculation...
CVE-2012-6422
Exynos Exploit This is a POC for exploiting the /dev/exynos-mem vulnerability introduced in earlier samsung phones. It was done out of interest in kernel vulnerability research and as a part of a CTF challenge. The Exploit The vulnerability introduced in these phones is the permissions for the...
CentOS Linux 8.5 [TuxCare] Security Update: bpftool / kernel / kernel-core / kernel-cross-headers / etc Multiple Vulnerabilities (CENTOS8.5:CLSA-2024:1722977984)
The CentOS Linux 8.5 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.5:CLSA-2024:1722977984 advisory. - In the Linux kernel, the following vulnerability has been resolved: i2c: Fix a potential use after free Free the adap structure on...
CVE-2025-21479-FX5P
CVE-2025-21479 · OPPO Find X5 Pro PFEM00 temporary root RAM-only temp root for OPPO Find X5 Pro PFEM00 kernel 5.10.198-android12-9, ColorOS, locked bootloader via CVE-2025-21479 Adreno KGSL → KernelSU v3.3.0 LKM late-load. 中文：READMEzh.md Chain: KGSL physical R/W → disarm OEM guard, SELinux...
CVE-2026-63626
A flaw was found in Mongoose. An unauthenticated adjacent attacker can exploit this issue by sending a specially crafted Point-to-Point Protocol PPP packet containing an oversized length field during IPv6 Control Protocol IPv6CP negotiation. This lack of bounds validation causes out-of-bounds...
Astra Linux – Vulnerability in PHP 7.3
In PHP versions 7.3.x up to and including 7.3.31, 7.4.x below 7.4.25, and 8.0.x below 8.0.12, when running PHP FPM SAPI with the main FPM daemon process running as the root user and child worker processes running as lower-privileged users, it is possible for the child processes to access memory...
CVE-2026-79841
A buffer overflow vulnerability in HPE NonStop RDMA SERVICES NSK may lead to an out-of-bounds memory write , potentially resulting in memory corruption . This vulnerability impacts the RDMA SERVICES NSK T0941 component, specifically versions T0941L03^ABS and earlier . The potential impacts includ...
CVE-2026-79841 HPE NonStop RDMA SERVICES NSK - Out-of-bounds memory write vulnerability
A buffer overflow vulnerability in HPE NonStop RDMA SERVICES NSK may cause out-of-bounds memory write, which may result in memory corruption...
EUVD-2026-101822
A security vulnerability in HPE NonStop EXPAND may result in out-of-bounds memory read/write operations...
CVE-2026-76664 HPE NonStop EXPAND - Out-of-Bounds memory read/write
A security vulnerability in HPE NonStop EXPAND may result in out-of-bounds memory read/write operations...
CVE-2026-76066
IntentKit through 2.6.3 contains an authorization bypass vulnerability where the executor validates tool calls against the full tool registry rather than the per-request narrowed tool advertisement enforced by ToolBindingMiddleware, allowing owner-only state-changing tools such as wallet transfer...
CVE-2026-76066
The IntentKit software (through version 2.6.3 ) is vulnerable to an authorization bypass because the executor validates tool calls against the full tool registry instead of the narrowed tool advertisement enforced by ToolBindingMiddleware . This flaw allows unauthenticated or public callers in WE...
CVE-2026-102734
asteval is a Python expression evaluator designed for restricted execution. Prior to 1.0.9, in asteval/astutils.py, the default Interpreter with numpy enabled exposes a ctypes type and permits fromaddress memory access. safegetattr blocks the ctypes module but not reachable ctypes type objects,...
CVE-2026-78628
The Okta Credential Provider for Windows does not validate a serialized credential buffer before interpreting it as a Kerberos logon structure. The buffer size and packed string offsets are not checked. Processing a malformed buffer can cause the credential provider process to terminate...
CVE-2026-90349
A flaw was found in the Linux kernel's mt76 wireless driver, specifically within the mt7996tx function. When the mac80211 subsystem leaves the link unspecified, the driver substitutes a primary link ID that is then used without proper bounds checking to access internal arrays. This unchecked acce...
CVE-2026-102734
asteval is a Python expression evaluator designed for restricted execution. Prior to 1.0.9, in asteval/astutils.py, the default Interpreter with numpy enabled exposes a ctypes type and permits fromaddress memory access. safegetattr blocks the ctypes module but not reachable ctypes type objects,...
CVE-2026-102734
asteval is a Python expression evaluator designed for restricted execution. Prior to 1.0.9, in asteval/astutils.py, the default Interpreter with numpy enabled exposes a ctypes type and permits fromaddress memory access. safegetattr blocks the ctypes module but not reachable ctypes type objects,...
CVE-2026-109251
A flaw was found in FreeRDP. A malicious Remote Desktop Protocol RDP server can cause a Denial of Service DoS on a connecting client by supplying invalid geometry coordinates when video redirection is enabled. Because FreeRDP does not properly validate server-provided video coordinates, an intege...