Lucene search
+L

59 matches found

Positive Technologies
Positive Technologies
•added 2026/04/21 12:00 a.m.•38 views

PT-2026-44251

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue exists in the ipmi module where the event message buffer response data size was checked too late during processing. Some Baseboard Management Controllers BMCs may return an emp...

7.7CVSS5.7AI score0.00162EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/04/09 12:00 a.m.•35 views

PT-2026-43971

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A lifetime bookkeeping error exists in the ucan driver within the CAN subsystem. USB drivers bind to USB interfaces, and device managed resources must have their lifetime tied to the...

5.5CVSS5.8AI score0.00162EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2026/03/17 12:00 a.m.•21 views

The vulnerability of the rtsock_msg_buffer() function in the operating system kernel of FreeBSD, which allows a hacker to cause a service failure

The vulnerability of the rtsockmsgbuffer function in the kernel of the FreeBSD operating system is related to writing beyond the buffer’s memory boundaries. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

7.8CVSS5.8AI score0.00452EPSS
SaveExploits2References3
Cvelist
Cvelist
•added 2026/03/09 12:25 p.m.•49 views

CVE-2026-3038 Local DoS and possible privilege escalation via routing sockets

The rtsockmsgbuffer function serializes routing information into a buffer. As a part of this, it copies sockaddr structures into a sockaddrstorage structure on the stack. It assumes that the source sockaddr length field had already been validated, but this is not necessarily the case, and it's...

0.00452EPSS
SaveExploits2References1
CVE
CVE
•added 2026/03/09 12:25 p.m.•136 views

CVE-2026-3038

The rtsock_msg_buffer() function in the FreeBSD kernel contains a stack buffer overflow vulnerability. The flaw occurs because the function fails to validate the source sockaddr length field before copying data into a sockaddr_storage structure on the stack. A malicious userspace program can craf...

7.5CVSS7.3AI score0.00452EPSS
SaveExploits2References1Affected Software1
Vulnrichment
Vulnrichment
•added 2026/03/09 12:25 p.m.•6 views

CVE-2026-3038 Local DoS and possible privilege escalation via routing sockets

The rtsockmsgbuffer function serializes routing information into a buffer. As a part of this, it copies sockaddr structures into a sockaddrstorage structure on the stack. It assumes that the source sockaddr length field had already been validated, but this is not necessarily the case, and it's...

7.3AI score0.00452EPSS
SaveExploits2References1
CNNVD
CNNVD
•added 2026/03/09 12:00 a.m.•20 views

FreeBSD 安全漏洞

FreeBSD is a Unix-like operating system developed by the FreeBSD Foundation. FreeBSD has a security vulnerability that stems from the rtsockmsgbuffer function not verifying the length field of the source sockaddr. This can lead to a stack buffer overflow, potentially causing a kernel crash...

7.5CVSS5.9AI score0.00452EPSS
SaveExploits2References1
FreeBSD Advisory
FreeBSD Advisory
•added 2026/02/24 12:00 a.m.•19 views

FreeBSD-SA-26:05.route

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-26:05.route Security Advisory The FreeBSD Project Topic: Local DoS and possible privilege escalation via routing sockets Category: core Module: route Announced:...

7.5CVSS7.5AI score0.00452EPSS
SaveExploits2
Packet Storm News
Packet Storm News
•added 2026/02/24 12:00 a.m.•18 views

FreeBSD Security Advisory - FreeBSD-SA-26:05.route

FreeBSD Security Advisory - The rtsockmsgbuffer function serializes routing information into a buffer. As a part of this, it copies sockaddr structures into a sockaddrstorage structure on the stack. It assumes that the source sockaddr length field had already been validated, but this is not...

6AI score0.00452EPSS
SaveExploits2
Vulnrichment
Vulnrichment
•added 2026/01/15 11:25 p.m.•10 views

CVE-2021-47793 Telegram Desktop 2.9.2 - Denial of Service (PoC)

Telegram Desktop 2.9.2 contains a denial of service vulnerability that allows attackers to crash the application by sending an oversized message payload. Attackers can generate a 9 million byte buffer and paste it into the messaging interface to trigger an application crash...

7.5CVSS6AI score0.00508EPSS
SaveExploits1References3
NVD
NVD
•added 2025/11/29 3:15 a.m.•15 views

CVE-2025-66216

AIS-catcher is a multi-platform AIS receiver. Prior to version 0.64, a heap buffer overflow vulnerability has been identified in the AIS::Message class of AIS-catcher. This vulnerability allows an attacker to write approximately 1KB of arbitrary data into a 128-byte buffer. This issue has been...

9.8CVSS0.00507EPSS
SaveExploits1References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•12 views

EUVD-2019-5298

Malware in sbrugna...

7.8CVSS7.3AI score0.00427EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•13 views

EUVD-2017-16850

Malware in sbrugna...

9.8CVSS8.1AI score0.02266EPSS
SaveExploits0References8
Cvelist
Cvelist
•added 2025/06/20 6:29 a.m.•30 views

CVE-2025-50054

Buffer overflow in OpenVPN ovpn-dco-win version 1.3.0 and earlier and version 2.5.8 and earlier allows a local user process to send a too large control message buffer to the kernel driver resulting in a system crash...

0.0024EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/06/15 12:00 a.m.•11 views

PT-2025-35967

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The dib7090p rw on apb function is susceptible to a null pointer dereference. This occurs when the msg parameter, controlled by the user, has a null buf and a zero len value. Insufficien...

7.6CVSS6.1AI score0.00176EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2025/06/15 12:00 a.m.•11 views

PT-2025-35966

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A null pointer dereference issue exists in the w7090p tuner write serpar and w7090p tuner read serpar functions within the w7090p driver. The issue occurs when the msg parameter,...

5.5CVSS6.2AI score0.00176EPSS
SaveExploits0
CNNVD
CNNVD
•added 2025/02/26 12:00 a.m.•9 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a memory leak in the tcpbpfsendmsg function when sk msg is full...

5.5CVSS5.5AI score0.00269EPSS
SaveExploits0References7
CVE
CVE
•added 2025/01/24 12:00 a.m.•76 views

CVE-2024-50694

The SunGrow WiNet-SV200 (versions 0.001.00.P027 and earlier) is vulnerable to a stack-based buffer overflow . The root cause is the failure of the underlying code to perform bounds checking on the buffer used to store messages when copying the timestamp read from an MQTT message . An attacker cou...

9.8CVSS7.3AI score0.00573EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2025/01/24 12:00 a.m.•10 views

CVE-2024-50694

In SunGrow WiNet-SV200.001.00.P027 and earlier versions, when copying the timestamp read from an MQTT message, the underlying code does not check the bounds of the buffer that is used to store the message. This may lead to a stack-based buffer overflow...

9.5AI score0.00573EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/12/18 12:00 a.m.•21 views

PT-2024-32364 · Unknown · Dhd Msgbuf.C

Name of the Vulnerable Software and Affected Versions: dhd msgbuf.c affected versions not specified Description: The issue is related to a possible out-of-bounds write in the dhd prot flowrings pool release function of dhd msgbuf.c due to a missing bounds check. This could lead to local escalatio...

10CVSS6.7AI score0.00212EPSS
SaveExploits0References5
Rows per page
Query Builder