Security update for strongswan

This update for strongswan fixes the following issues: CVE-2026-47895: Double-Free When Destroying Certain Cloned Identities bsc1266360. CVE-2026-78123: Undefined Memory Access When Handling PKCS7 Containers bsc1276533. CVE-2026-78124: Memory Leak When Processing Certificates in PKCS7 Containers...

EUVD-2026-75058

eprosima Fast DDS is a C++ implementation of the DDS Data Distribution Service standard of the OMG Object Management Group. Versions prior to 2.6.12, 2.14.6, 3.2.4, 3.3.1, and 3.4.2 have a remotely triggerable Out-of-Bounds Read while processing RTPS DATAFRAG submessages. An attacker can craft a...

CVE-2025-54939

PoC for QUIC-LEAK CVE-2025-54939 in LSQUIC Overview This PoC highlights CVE-2025-54939, a pre-handshake memory exhaustion Denial of Service vulnerability in the LSQUIC QUIC implementation. The issue, named QUIC-LEAK, was first documented by Imperva:...

EUVD-2026-74907

VLC media player copies an RTSP response line into a fixed buffer without guaranteeing termination and then treats that buffer as a C string. RtspReadLine in modules/access/rtsp/access.c calls strncpy with the full buffer length, which writes no terminator when the source line is at least as long...

SUSE-SU-2026:3595-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2022-4994: KVM: x86: wean fast IN from emulatorpioin bsc1273097. - CVE-2023-53995: net: ipv4: fix one memleak in inetdelifa bsc1255616. - CVE-2024-38542: RDMA/manaib...

CVE-2026-20805-POC

CVE-2026-20805 PoC Proof of concept for the information disclosure vulnerability in Microsoft's Desktop Window Manager dwm.exe. 📋 Vulnerability Summary ID: CVE-2026-20805 Product: Microsoft Windows Component: Desktop Window Manager dwm.exe CWE-ID: CWE-200 Exposure of Sensitive Information to an...

cve-2023-31346-poc

固件内存泄漏 这里的代码旨在演示客户机消息头和 CPUID 请求客户机消息中的内存泄漏。 先决条件 安装 rustup。 安装带有 SEV-SNP 主机支持的 Linux 内核。我使用的是带有我自己一些补丁的内核 https://github.com/Freax13/linux/tree/snp-host-v9-rfc-with-my-patches。 使用方法 1. 重新启动机器 2. 在 host 目录中运行 cargo make run run。 3. 在日志中观察固件初始化后 pAlignedPTReqPayload 泄漏起始值。 4. 在 host 目录中运行 cargo ma...

CVE-2018-17240_exploit

CVE-2018-17240exploit 针对 CVE-2018-17240（Netwave 摄像头内存泄漏）的 Bash 利用脚本 在存在漏洞的 Netwave 摄像头上运行此利用脚本， 以导出摄像头的网络配置和凭据。 凭据“可能的用户名”和“可能的密码”可用于登录到 Web 界面。 Usage : bash exploit.sh host port...

CVE-2026-18313

A flaw was found in libpcap, specifically within the rpcapd daemon. This vulnerability allows a remote attacker to cause a denial of service DoS by sending specially crafted RPCAPMSGUPDATEFILTERREQ or RPCAPMSGSTARTCAPREQ messages. The rpcapd daemon allocates memory for these messages but fails to...

CVE-2014-0160

CVE-2014-0160 Lab setup using Heartbleed to leak memory from webapps This repo focuses on building a container to create an environment that can easily exploit nginx using the Heartbleed technique, focusing on: Setting up the environment using Docker Server setup diagram Demo steps Server diagram...

PT-2026-88995

VLC media player copies an RTSP response line into a fixed buffer without guaranteeing termination and then treats that buffer as a C string. RtspReadLine in modules/access/rtsp/access.c calls strncpy with the full buffer length, which writes no terminator when the source line is at least as long...

UBUNTU-CVE-2026-86421

ImageMagick before 7.1.2-30 and 6.9.13-55 contains a memory leak in th...

CVE-2025-5777

CVE-2025-5777 Citrix NetScaler Memory Leak Exploit !WARNING This script is intended for educational and research purposes only. Do not use it against systems without explicit permission. Unauthorized access or testing is illegal and unethical. Read the full DISCLAIMER before using this script...

CVE-2026-62437

A flaw was found in Xen. When a guest virtual machine is terminated, its device model DM can re-establish interrupt request IRQ tracking structures after the initial cleanup. This prevents some of these structures from being properly deallocated, leading to a memory leak. A local attacker with...

CVE-2026-70065

Missing release of memory after effective lifetime in Windows DHCP Server allows an unauthorized attacker to deny service over a network...

CVE-2026-69809

Missing release of memory after effective lifetime in Active Directory Domain Services allows an unauthorized attacker to deny service over a network...

CVE-2026-69781

Missing release of memory after effective lifetime in Windows DHCP Client allows an unauthorized attacker to deny service over an adjacent network...

CVE-2026-69405

Missing release of memory after effective lifetime in Windows DHCP Server allows an authorized attacker to deny service over an adjacent network...

EUVD-2026-73626

Missing release of memory after effective lifetime in Windows DHCP Client allows an unauthorized attacker to deny service over an adjacent network...

CVE-2026-69781

CVE-2026-69781 is a memory management flaw in the Windows DHCP Client , caused by a missing release of memory after its effective lifetime. An unauthorized attacker can exploit this to cause a denial of service over an adjacent network . The CVSS 3.1 score is 6.5 (MEDIUM) with a vector of AV:A/AC...