Security update for strongswan

This update for strongswan fixes the following issues: CVE-2026-47895: Double-Free When Destroying Certain Cloned Identities bsc1266360. CVE-2026-78123: Undefined Memory Access When Handling PKCS7 Containers bsc1276533. CVE-2026-78124: Memory Leak When Processing Certificates in PKCS7 Containers...

EUVD-2026-75058

eprosima Fast DDS is a C++ implementation of the DDS Data Distribution Service standard of the OMG Object Management Group. Versions prior to 2.6.12, 2.14.6, 3.2.4, 3.3.1, and 3.4.2 have a remotely triggerable Out-of-Bounds Read while processing RTPS DATAFRAG submessages. An attacker can craft a...

CVE-2025-54939

LSQUIC 中 QUIC-LEAK（CVE-2025-54939）的 PoC 概述 此 PoC 展示了 CVE-2025-54939，即 LSQUIC QUIC 实现中的一个握手前内存耗尽（拒绝服务）漏洞。 该问题被命名为 QUIC-LEAK，最早由 Imperva 记录： https://www.imperva.com/blog/quic-leak-cve-2025-54939-new-high-risk-pre-handshake-remote-denial-of-service-in-lsquic-quic-implementation/ 漏洞 受影响版本 • LSQUIC...

EUVD-2026-74907

VLC media player copies an RTSP response line into a fixed buffer without guaranteeing termination and then treats that buffer as a C string. RtspReadLine in modules/access/rtsp/access.c calls strncpy with the full buffer length, which writes no terminator when the source line is at least as long...

SUSE-SU-2026:3595-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2022-4994: KVM: x86: wean fast IN from emulatorpioin bsc1273097. - CVE-2023-53995: net: ipv4: fix one memleak in inetdelifa bsc1255616. - CVE-2024-38542: RDMA/manaib...

CVE-2026-20805-POC

CVE-2026-20805 PoC Proof of concept for the information disclosure vulnerability in Microsoft's Desktop Window Manager dwm.exe. 📋 Vulnerability Summary ID: CVE-2026-20805 Product: Microsoft Windows Component: Desktop Window Manager dwm.exe CWE-ID: CWE-200 Exposure of Sensitive Information to an...

cve-2023-31346-poc

固件内存泄漏 这里的代码旨在演示客户机消息头和 CPUID 请求客户机消息中的内存泄漏。 先决条件 安装 rustup。 安装带有 SEV-SNP 主机支持的 Linux 内核。我使用的是带有我自己一些补丁的内核 https://github.com/Freax13/linux/tree/snp-host-v9-rfc-with-my-patches。 使用方法 1. 重新启动机器 2. 在 host 目录中运行 cargo make run run。 3. 在日志中观察固件初始化后 pAlignedPTReqPayload 泄漏起始值。 4. 在 host 目录中运行 cargo ma...

CVE-2018-17240_exploit

CVE-2018-17240exploit 针对 CVE-2018-17240（Netwave 摄像头内存泄漏）的 Bash 利用脚本 在存在漏洞的 Netwave 摄像头上运行此利用脚本， 以导出摄像头的网络配置和凭据。 凭据“可能的用户名”和“可能的密码”可用于登录到 Web 界面。 Usage : bash exploit.sh host port...

CVE-2026-18313

A flaw was found in libpcap, specifically within the rpcapd daemon. This vulnerability allows a remote attacker to cause a denial of service DoS by sending specially crafted RPCAPMSGUPDATEFILTERREQ or RPCAPMSGSTARTCAPREQ messages. The rpcapd daemon allocates memory for these messages but fails to...

CVE-2014-0160

CVE-2014-0160 Lab setup using Heartbleed to leak memory from webapps This repo focuses on building a container to create an environment that can easily exploit nginx using the Heartbleed technique, focusing on: Setting up the environment using Docker Server setup diagram Demo steps Server diagram...

PT-2026-88995

VLC media player copies an RTSP response line into a fixed buffer without guaranteeing termination and then treats that buffer as a C string. RtspReadLine in modules/access/rtsp/access.c calls strncpy with the full buffer length, which writes no terminator when the source line is at least as long...

UBUNTU-CVE-2026-86421

ImageMagick before 7.1.2-30 and 6.9.13-55 contains a memory leak in th...

CVE-2025-5777

CVE-2025-5777 Citrix NetScaler 内存泄漏利用工具 !WARNING 此脚本仅用于教育及研究目的 。未经明确授权 ，请勿将其用于任何系统。未经授权的访问或测试是非法且不道德的行为。使用此脚本前，请阅读完整的免责声明。 概述 本项目演示了在 Citrix NetScaler 设备中发现的一个内存泄漏漏洞（CVE-2025-5777）。该漏洞源于在解析格式错误的 POST 数据（特别是 login 参数）时，对未初始化内存处理不当。由于它与臭名昭著的 CVE-2023-4966（原始 CitrixBleed）高度相似，该漏洞被广泛称为 CitrixBleed 2...

CVE-2026-62437

A flaw was found in Xen. When a guest virtual machine is terminated, its device model DM can re-establish interrupt request IRQ tracking structures after the initial cleanup. This prevents some of these structures from being properly deallocated, leading to a memory leak. A local attacker with...

CVE-2026-70065

Missing release of memory after effective lifetime in Windows DHCP Server allows an unauthorized attacker to deny service over a network...

CVE-2026-69809

Missing release of memory after effective lifetime in Active Directory Domain Services allows an unauthorized attacker to deny service over a network...

CVE-2026-69781

Missing release of memory after effective lifetime in Windows DHCP Client allows an unauthorized attacker to deny service over an adjacent network...

CVE-2026-69405

Missing release of memory after effective lifetime in Windows DHCP Server allows an authorized attacker to deny service over an adjacent network...

EUVD-2026-73626

Missing release of memory after effective lifetime in Windows DHCP Client allows an unauthorized attacker to deny service over an adjacent network...

CVE-2026-69781

CVE-2026-69781 is a memory management flaw in the Windows DHCP Client , caused by a missing release of memory after its effective lifetime. An unauthorized attacker can exploit this to cause a denial of service over an adjacent network . The CVSS 3.1 score is 6.5 (MEDIUM) with a vector of AV:A/AC...