CVE-2021-24086

CVE-2021-24086 Dies ist ein Proof of Concept für CVE-2021-24086 „Windows TCP/IP Denial of Service Vulnerability“, eine NULL-Dereferenzierung in tcpip.sys, die von Microsoft im Februar 2021 gepatcht wurde. Laut diesem Tweet wurde die Schwachstelle von @piazzt entdeckt. Sie ist aus der Ferne...

CVE-2025-68325

CVE-2025-68325 schcake उस स्थिति पर विचार नहीं करता जब cakeenqueue एक गैर-शून्य परिणाम लौटाता है, जिससे qdisc ट्री में असंतुलित qlen होता है, और इसके मूल sched, जैसे qfq, में null-deref ट्रिगर होता है। प्रभावित संस्करण v6.19-rc1 पर स्थिर किया गया गंभीरता निम्न पैच root@kitploit: In cakedrop,...

CVE-2026-74740

A flaw was found in the Linux kernel's network scheduler net/sched: actapi. A Time-of-Check to Time-of-Use TOCTOU race condition exists where a pointer can be cleared between two reads. This allows a concurrent operation to cause a NULL dereference, potentially leading to a system crash and Denia...

CVE-2026-80520

A flaw was found in the ovpn module of the Linux kernel. The ovpncryptokillkey function incorrectly assumes that both crypto key slots are always populated. This can lead to a NULL dereference if a peer has only one installed key or if the function attempts to remove a key that is not present. A...

CVE-2025-4476-Exploit

CVE-2025-4476-Exploit Ein kleiner Python-Testclient zum Senden von HTTP-GET-Anfragen mit einem überdimensionierten Authorization: Basic-Header. Dieses Tool ist für Labortests und Forschung zu Header-Parsing-Problemen gedacht z. B. Null-Dereference-/Absturzfehler wie CVE-2025-4476 in libsoup. Es...

EUVD-2026-66586

In the Linux kernel, the following vulnerability has been resolved: ovpn: fix NULL dereference when killing missing key ovpncryptokillkey assumes both crypto slots are populated and dereferences each slot before checking it. That is not guaranteed: a peer can have only one installed key, and the...

CVE-2021-24086-exp

CVE-2021-24086 Questa è una proof of concept per CVE-2021-24086 "Windows TCP/IP Denial of Service Vulnerability ", un NULL dereference in tcpip.sys corretto da Microsoft a febbraio 2021. Secondo questo tweet, la vulnerabilità è stata trovata da @piazzt. È sfruttabile da remoto inviando un pacchet...

cve-2026-23398-poc

Lab: CVE-2026-23398 ICMP / ipnopmtudisc=3 Lab riproducibile per il bug del kernel Linux in icmptagvalidation dereferenziamento NULL quando net.ipv4.ipnopmtudisc = 3 e arriva un ICMP Fragmentation Needed il cui header IPv4 interno citato utilizza un numero di protocollo senza handler in inetprotos...

CVE-2026-80520

In the Linux kernel, the following vulnerability has been resolved: ovpn: fix NULL dereference when killing missing key ovpncryptokillkey assumes both crypto slots are populated and dereferences each slot before checking it. That is not guaranteed: a peer can have only one installed key, and the...

CVE-2026-80564

This Linux kernel vulnerability affects the gve (Google Virtual Ethernet) driver. The root cause is a missing implementation of the adjfine PTP operation , which leads to a NULL pointer dereference in ptp_clock_adjtime. The bug can be triggered from usermode via sudo ./testptp -d /dev/ptp0 -f 0, ...

CVE-2026-80524

This vulnerability affects the Linux kernel in the OP-TEE FFA driver, specifically the optee_ffa_lend_protmem function. A NULL pointer dereference can occur under memory pressure because the allocated pointer is not validated before use. The fix adds the missing NULL check before dereferencing. N...

CVE-2026-80520 ovpn: fix NULL dereference when killing missing key

In the Linux kernel, the following vulnerability has been resolved: ovpn: fix NULL dereference when killing missing key ovpncryptokillkey assumes both crypto slots are populated and dereferences each slot before checking it. That is not guaranteed: a peer can have only one installed key, and the...

CVE-2026-80520

A NULL pointer dereference in the Linux kernel's ovpn (OpenVPN) module can lead to a denial of service (CVSS 3.1: 7.5, HIGH). The function ovpn_crypto_kill_key assumes both crypto slots are populated and dereferences each before checking for NULL. Since a peer can have only one installed key, the...

MiracleLinux 8 : 389-ds:1.4 (AXSA:2026-1661:01)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1661:01 advisory. 389-ds-base: 389-ds-base: pre-auth LDAP filter injection in CleanAllRUV status check CVE-2026-11770 389-ds-base: 389-ds-base: NULL pointer dereferen...

CVE-2026-14457 RPK Server Signature Algorithm Selection Can Dereference a Missing Certificate

Issue summary: In a server or client configuration with RFC7250 Raw Public Keys RPKs enabled, and only the private key with no associated certificate configured locally, a NULL pointer dereference may occur when the remote peer solicits raw public keys and also sends the typically omitted...

CVE-2026-14457 RPK Server Signature Algorithm Selection Can Dereference a Missing Certificate

Issue summary: In a server or client configuration with RFC7250 Raw Public Keys RPKs enabled, and only the private key with no associated certificate configured locally, a NULL pointer dereference may occur when the remote peer solicits raw public keys and also sends the typically omitted...

SMBGhost-SMBleed-scanner

SMBGhost CVE-2020-0796 और SMBleed CVE-2020-1206 स्कैनर c 2020 ZecOps, Inc. - https://www.zecops.com - हैकर्स की गलतियाँ खोजें केवल शैक्षिक और कॉर्पोरेट वातावरण में परीक्षण के लिए अभिप्रेत है। ZecOps इस कोड के लिए कोई जिम्मेदारी नहीं लेता, अपने जोखिम पर उपयोग करें। यदि आप सर्वर, एंडपॉइंट और मोबाइल...

EUVD-2026-65003

The Hearing Access Service HAS GATT server in subsys/bluetooth/audio/has.c installs a connection-callback set unconditionally via BTCONNCBDEFINE, so securitychanged runs for every connection that establishes security even before the application has called bthasregister. The service attribute...

Astra Linux – Vulnerability in krb5

In kdc/kdcpreauthec.c of the Key Distribution Center KDC in MIT Kerberos 5 also known as krb5, before versions 1.18.4 and 1.19.x, and before version 1.19.2, remote attackers could exploit a vulnerability that led to a NULL pointer dereferencing and a crash of the daemon. This occurs because the...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: net/rds: fixed the possible null dereference of cp The cp parameter may be null. Calling cp-cpconn would result in a null dereference. Simon Horman adds: Analysis: cp is a parameter of rdsrdmamap and is not reassigned. The...