2285 matches found
CVE-2023-33242
CVE-2023-33242 CVE-2023-33242 PoC El protocolo Lindell17 simulado es vulnerable a un exploit de extracción de bits, permitiendo a un atacante recuperar la clave privada extrayendo iterativamente bits individuales de la clave. El protocolo está diseñado para generar firmas ECDSA en un modelo...
CVE-2026-97404
In OpenStack Zaqar before 22.0.2, WSGI transport mishandles the URL-Signature header. By sending a request with an empty URL-Signature header, an unauthenticated remote attacker who knows a target project's UUID may bypass both Keystone authentication and pre-signed URL verification, resulting in...
-Kernel-ptrace-c-mishandles-vulnerability-CVE-2019-13272
-CVE-2019-13272...
CVE-2026-97404
In OpenStack Zaqar before 22.0.2, WSGI transport mishandles the URL-Si...
CVE-2021-4034-pwnkit
CVE-2021-4034, PwnKit Prueba de concepto para PwnKit, una escalada de privilegios local en pkexec de polkit. En una instalación predeterminada, cualquier usuario local sin privilegios puede convertirse en root. Acerca del error Las versiones vulnerables de pkexec manejan incorrectamente el recuen...
CVE-2019-13272
CVE-2019-13272 Exploit de root local en Linux Linux 4.10 5.1.17 PTRACETRACEME root local CVE-2019-13272 root@kitploit: In the Linux kernel before 5.1.17, ptracelink in kernel/ptrace.c mishandles the recording of the credentials of a process that wants to create a ptrace relationship, which allows...
EulerOS Virtualization 2.11.0 : ppp (EulerOS-SA-2026-3540)
According to the versions of the ppp package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : The passprompt plugin in pppd in ppp before 2.5.2 mishandles privileges.CVE-2024-58250 Tenable has extracted the preceding description...
EulerOS Virtualization 2.11.1 : ppp (EulerOS-SA-2026-3453)
According to the versions of the ppp package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : The passprompt plugin in pppd in ppp before 2.5.2 mishandles privileges.CVE-2024-58250 Tenable has extracted the preceding description...
Astra Linux – Vulnerability in TeXeVe-Bin
In axohelp.c, before version 1.3 in axohelp, and in axodraw2 before version 2.1.1b, sprintf is handled incorrectly. This issue is present in distributions like TeXLive and other collections...
Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15
A issue was discovered in l2capsockrelease in net/bluetooth/l2capsock.c in the Linux kernel before version 6.4.10. There is a use-after-free issue, as the children of a sk object are handled incorrectly...
Astra Linux – Vulnerability in python-psutil
psutil also known as python-psutil from version 5.6.5 onwards may have a double-free issue. This issue occurs due to improper handling of reference counts within a while loop or for loop, which converts system data into a Python object...
Astra Linux – Vulnerability in Linux
In intelpmudrainpebsnhm in arch/x86/events/intel/ds.c of the Linux kernel, up to version 5.11.8 on some Haswell CPUs, user-space applications such as perf-fuzzer can cause a system crash due to improper handling of the PEBS status in a PEBS record, also known as CID-d88d05a9e0b6...
Astra Linux – Vulnerability in Mariadb 10.3
MariaDB before version 10.6.2 allows an application to crash due to improper handling of a pushdown from a HAVING clause to a WHERE clause...
Astra Linux – Vulnerability in poppler-22, poppler
In Poppler 22.07.0, the PDFDoc::savePageAs function in PDFDoc.c allows attackers to cause a denial-of-service attack the application crashes with SIGABRT by manipulating a PDF file in which the xref data structure is improperly handled during the getCatalog process. Note that this vulnerability i...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: libvpx (UTSA-2023-003032)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-003032 advisory. VP9 in libvpx before 1.13.1 mishandles widths, leading to a crash related to encoding. Tenable has extracted the preceding description block directly from the Unity...
CVE-2026-89161
CVE-2026-89161 affects PCRE2 before version 10.48 . The vulnerable component is the pcre2_jit_match function, which mishandles a previously copied subject when it is passed in as a context, potentially leading to an incorrect free operation . This memory management flaw could result in memory cor...
CVE-2026-89161
In PCRE2 before 10.48, pcre2jitmatch mishandles a previously copied subject being passed in as a context. An incorrect free operation can occur...
CVE-2026-78135
CVE-2026-78135 affects the libcharon component of strongSwan 5.9.7 through 6.0.7 . The root cause is a mishandling of CREATE_CHILD_SA requests on unestablished IKE SAs within the IKEv2 state machine, which can result in the creation of a usable Child SA before authentication completes —effectivel...
Linux Distros Unpatched Vulnerability : CVE-2026-89087
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The cstruct package before 6.3.0 for OCaml mishandles indexes. CVE-2026-89087 Note that Nessus relies on the presence of the package as reported by the vendor...
