152434 matches found
postgresql: PostgreSQL: Stack buffer overflow via OUT parameter count manipulation
A flaw was found in PostgreSQL. An object creator can exploit a stack buffer overflow vulnerability within the argument name matching component. By manipulating the OUT parameter count, an attacker can write limited arbitrary bytes 0x0 and 0x1 to server memory, which may lead to unknown impacts...
kernel: vhost: move vdpa group bound check to vhost_vdpa
A flaw was found in the Linux kernel's vhost subsystem. Specifically, a bug in the vdpasim component allows for an out-of-bounds write when a valid ASID Address Space ID is incorrectly assigned to a vDPA virtio Data Path Acceleration group. This could lead to memory corruption, potentially...
kernel: octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify
A flaw was found in the Linux kernel's octeontx2-af driver. A malicious Virtual Function VF attached to a Physical Function PF in switchdev representor mode can send a specially crafted REPEVENTNOTIFY message. This message contains an unvalidated pcifunc field, which can lead to an out-of-bounds...
kernel: Linux kernel SLIP: Out-of-bounds write due to race condition during MTU change
A flaw was found in the Linux kernel's SLIP Serial Line Internet Protocol network component. A race condition exists during an MTU Maximum Transmission Unit change when the system reallocates receive buffers. This can allow a remote attacker to trigger an out-of-bounds write or write to a freed...
Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update
An update for kernel is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...
CVE-2026-8461
🎬 CVE-2026-8461 — PixelSmash FFmpeg MagicYUV 디코더의 심각한 Out-of-Bounds 쓰기 악성 비디오 파일이 무기가 될 수 있습니다. PixelSmash 는 FFmpeg의 MagicYUV 디코더에 영향을 미치는 심각한 메모리 손상 취약점으로, 공격자가 Out-of-Bounds 쓰기 를 트리거하여 애플리케이션 충돌 및 잠재적인 원격 코드 실행 을 초래할 수 있습니다. 📖 개요 CVE-2026-8461 은 FFmpeg의libavcodec MagicYUV 디코더에서 발견된 높은 심각도 의...
kernel: vhost: move vdpa group bound check to vhost_vdpa
A flaw was found in the Linux kernel's vhost subsystem. Specifically, a bug in the vdpasim component allows for an out-of-bounds write when a valid ASID Address Space ID is incorrectly assigned to a vDPA virtio Data Path Acceleration group. This could lead to memory corruption, potentially...
kernel: netfilter: require Ethernet MAC header before using eth_hdr()
A flaw was found in the Linux kernel's netfilter component. Certain netfilter modules, including ip6teui64 and xtmac, accessed Ethernet MAC header data without first verifying that an Ethernet device was associated with the network packet or that the MAC header was present and of sufficient lengt...
CVE-2026-54992-PoC
CVE-2026-54992 PoC Microsoft Message Queuing 원격 읽기 정수 오버플로CVE-2026-54992에 대한 개념 증명입니다. 이 PoC는 두 대의 Windows VM을 사용합니다. 취약한 대상의 일반 사용자는 로컬 MSMQ 서비스에 헬퍼가 호스팅하는 큐에서 읽기를 요청합니다. 헬퍼는 잘못된 MS-MQRR 응답을 반환하여 대상의 mqsvc.exe를 충돌시킵니다. 이 PoC는 서비스 거부denial of service를 입증하며, 코드 실행을 입증하지는 않습니다. 근본 원인 mqqm.dll은 반환된 ...
CVE-2018-16890
CVE-2018-16890 curl이 NTLMv2 type-2 헤더를 처리하는 방식에서 out-of-bounds 읽기 결함이 발견되었습니다. NTLM 인증을 사용하는 원격 악성 서버에 연결할 때 이 결함으로 인해 curl이 충돌할 수 있습니다. 간단한 스크립트로 curl을 확인하세요...
CVE-2019-12401
CVE-2019-12401: Apache Solr의 XML Bomb 5.0.0 이전 버전의 Solr는 업데이트 핸들러를 통한 XML 리소스 소비 공격일명 Lol Bomb에 취약합니다. 공격자는 XML DOCTYPE 및 ENTITY 유형 요소를 활용하여 서버가 XML을 구문 분석할 때 확장되어 OOM을 유발하는 패턴을 만들 수 있습니다. 공급업체 공개: 이 취약점에 대한 공급업체의 공개 및 수정 사항은 여기에서 확인할 수 있습니다. 개념 증명: 자세한 내용과 악용 프로세스는 이 PDF에서 확인할 수 있습니다...
CVE-2020-8277
CVE-2020-8277 교육 목적으로만 사용하세요. 빠른 실행 root@kitploit: clone this repository $ git clone https://github.com/masahiro331/CVE-2020-8277 run bind $ docker build -t bind-local ./bind Need TCP fallback $ docker run --rm --name bind -it -p 53:53 -p 53:53/udp bind use " v15.2.1" version If you use fixed...
zephyr-lwm2m-firmware-update-oob-read-cve-2026-10672-truncated-package-uri
CVE-2026-10672 — Zephyr LwM2M 펌웨어 업데이트 OOB 읽기 PoC CVE-2026-10672 에 대한 개념 증명PoC으로, Zephyr RTOS의 LwM2M 펌웨어 업데이트 풀 클라이언트subsys/net/lib/lwm2m/lwm2mpullcontext.c에서 발생하는 범위를 벗어난 읽기out-of-bounds read입니다. 취약점 CVE : CVE-2026-10672 CVSS : 8.2 High CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L CWE : CWE-125 ...
kernel: dm-verity: fix buffer overflow in FEC calculation
A flaw was found in the dm-verity component of the Linux kernel. A buffer overflow occurs during Forward Error Correction FEC calculation, allowing an attacker to write past the end of an allocated buffer. This out-of-bounds write can corrupt the syndrome buffer, potentially leading to system...
kernel: dm-verity: fix buffer overflow in FEC calculation
A flaw was found in the dm-verity component of the Linux kernel. A buffer overflow occurs during Forward Error Correction FEC calculation, allowing an attacker to write past the end of an allocated buffer. This out-of-bounds write can corrupt the syndrome buffer, potentially leading to system...
Chromium CVE-2026-87596: Out of bounds read in ANGLE
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium CVE-2026-87592: Out of bounds read in Tint
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium CVE-2026-87586: Out of bounds read in ANGLE
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium CVE-2026-87525: Out of bounds read in Chromoting
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
EUVD-2026-78162
A vulnerability was determined in GPAC 26.07.0. Affected by this issue is the function gfnodedel of the file scenegraph/basescenegraph.c of the component MP4Box. This manipulation causes out-of-bounds read. The attack is restricted to local execution. The exploit has been publicly disclosed and m...