CVE-2026-107169

A flaw was found in m17n-lib. An attacker could provide specially crafted or truncated UTF-8 input to trigger an unhandled null pointer dereference during text processing. This issue causes the application to crash unexpectedly, resulting in a Denial of Service DoS...

CVE-2026-107169

A flaw was found in m17n-lib. An attacker could provide specially crafted or truncated UTF-8 input to trigger an unhandled null pointer dereference during text processing. This issue causes the application to crash unexpectedly, resulting in a Denial of Service DoS...

CVE-2026-107170

A flaw was found in m17n-lib. A partial failure during library initialization can leave an internal driver pointer uninitialized. Under specific error conditions, such as system resource exhaustion or database corruption, an application attempting to open an input method dereferences this null...

nginx: Fix of 5 CVEs

CVE-2026-27651: properly clear s-passwd in mail auth http requests to fix a null pointer dereference on CRAM-MD5/APOP retry - CVE-2026-27654: validate the Destination length for Dav COPY and MOVE to prevent an integer underflow and heap buffer overwrite when alias is used - CVE-2026-27654: also...

CVE-2026-107170

A flaw in m17n-lib allows for a null pointer dereference within the minput_open_im() function. This occurs when a partial failure during library initialization—triggered by conditions like system resource exhaustion or database corruption —leaves an internal driver pointer uninitialized. When an ...

CVE-2026-98358

A flaw was found in the Linux kernel's iSCSI Extensions for Remote Direct Memory Access iSER driver. A remote storage target can trigger a Denial of Service DoS by sending an unexpected remote invalidation response for write operations transmitted as immediate data. In this scenario, the initiato...

CVE-2026-98356

A flaw was found in the Linux kernel's Broadcom NetXtreme bnxtre driver. During device initialization, the driver fails to verify that memory allocation for the Data Center Bridging DCB workqueue succeeded. Under low-memory conditions where this setup fails, a subsequent asynchronous DCB...

CVE-2026-98355

A flaw was found in the Linux kernel's RDMA Remote Direct Memory Access subsystem. When connection path initialization fails in the RDMA Transport RTRS driver, error cleanup routines invoke event tracing before the associated object name is set. This issue leads to a null pointer dereference,...

CVE-2024-26475

CVE-2024-26475 Autores Sherlock Fang, Vlad Tronciu, Ayam Babu Descripción Un problema en radareorg radare2 v.0.9.7 a v.5.8.6 y corregido en v.5.8.8 permite a un atacante local causar una denegación de servicio a través de la función grubsfsreadextent. Vectores de ataque Crear un payload para que...

ioctlance

IOCTLance Description Presented at CODE BLUE 2023, this project titled Enhanced Vulnerability Hunting in WDM Drivers with Symbolic Execution and Taint Analysis introduces IOCTLance, a tool that enhances its capacity to detect various vulnerability types in Windows Driver Model WDM drivers. In a...

NFSundown

概述 NFSundown（CVE-2025-38089）的概念验证利用代码。它可以远程触发NFS服务器的内核崩溃。 详情 远程攻击者可通过发送特制的RPC请求，触发内核空指针解引用并导致内核崩溃。这是由于在SUNRPC代码路径中未正确处理 rqstp-rqacceptstatp 指针，使其保持为NULL并在错误处理分支中被解引用。在某些情况下（当所有服务器线程至少接受过一次连接时），这还可能导致释放后使用（use-after-free）。该漏洞已被分配编号CVE-2025-38089。 受影响版本...

IOFireWireFamily-null-deref

IOFireWireFamily-null-deref IOFireWireFamily-null-deref 是 CVE-2017-2388 的概念验证漏洞利用程序，这是一个 IOFireWireUserClient 中的空指针解引用漏洞，已在 macOS Sierra 10.12.4 中修复。该漏洞可被触发，导致带有 FireWire 端口的设备发生拒绝服务。 CVE-2017-2388 函数 IOFireWireUserClient::setAsyncRefIsochChannelForceStop 在将参数 inAsyncRef 作为源调用 bcopy 之前，未检查...

CVE-2019-10207

CVE-2019-10207 PoC for CVE-2019-10207 linux kernel: bluetooth: hciuart: kernel NULL pointer dereference gcc CVE-2019-10207.c -o cve-2019-10207-poc -static test on 4.20.0 kernel compile CONFIG must be opened: CONFIGBTHCIUARTMRVL=y CONFIGBTMRVL=y...

CVE-2024-36424

CVE-2024-36424 Esta vulnerabilidad fue descubierta y divulgada por M. Akil Gündoğan del Secunnix Vulnerability Research Team. Este repositorio contendrá la prueba de concepto y los avisos. Detalles: Producto: K7 Ultimate Security Versiones afectadas: v17.0.2019 CVE ID: CVE-2024-36424 Sistema...

CVE-2026-90271

A flaw was found in the Linux kernel's armmpam component. This vulnerability allows a local user to cause a system crash, leading to a Denial of Service DoS. The issue arises when a user unbinds a Memory System Component MSC after an error interrupt, causing a NULL pointer dereference...

CVE-2026-90202

A flaw was found in the Linux kernel's mpt3sas SCSI driver. The basereleasememorypools function attempts to free PCIe SGL Scatter-Gather List buffers that were never allocated, particularly after a partial setup failure. This can lead to a NULL pointer dereference, potentially causing a system...

CVE-2026-92493

A flaw was found in the Linux kernel's amd-pstate-ut driver. A local user can trigger a kernel NULL pointer dereference by loading the amdpstateut module on a non-AMD platform, such as an Intel system. This can lead to a system crash, resulting in a Denial of Service DoS...

Updated tor package fixes security vulnerabilities

Avoid a set of possible memory corruption, double-free, and null pointer dereference bugs that could occur with some reverse DNS virtual address configurations. TROVE-2026-051. Avoid cacheing DNS PTR responses when DNS caching is disabled. Previous code to prevent this caching parsed the response...

FreeRDP: FreeRDP: Denial of Service via crafted Surface Bits command

A flaw was found in FreeRDP. A malicious Remote Desktop Protocol RDP server can trigger a null pointer dereference in the gdisurfacebits function by sending a specially crafted Surface Bits command that claims to use the NSCodec codec ID. This vulnerability exists even when the NSCodec is disable...

CVE-2015-8543_for_SLE12SP1

$cat /etc/-release PRETTYNAME="SUSE Linux Enterprise Server 12 SP1" $id uid=1000jeremysp1 gid=100users groups=100users $sudo sh disablesecurity.sh $gcc exp.c -o exp 2/dev/null $../nsjail/nsjail -Mo --user 0 --group 0 --keepcaps --chroot / -- /bin/sh -i sh-4.2 /home/jeremysp1/nullpointerderf/exp +...