EulerOS 2.0 SP12 : shim (EulerOS-SA-2026-3311)

According to the versions of the shim package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Issue summary: A specially crafted PKCS7 or S/MIME signed message could trigger a use-after-free during PKCS7 signature verification. Impact summary:...

HPE-Aruba-AOS8-Vulnerabilities

⚠️ Disclosure Status: All findings in this repository were submitted to the HPE Networking Bug Bounty Program Bugcrowd between May–June 2026. Five of six submissions were closed as "Not Applicable" at triage level without technical reconciliation of the submitted evidence. No fixes have been issue...

cve-2022-21877

POC CVE-2022-21877 Este repositorio contiene un POC para el CVE-2022-21877, encontrado por Quang Linh, trabajando en STAR Labs. Se trata de una fuga de información encontrada dentro del controlador spaceport.sys. Se puede encontrar una publicación de blog adjunta en esta dirección. Uso Para...

HeartLeak

HeartLeak Otro script de explotación para el bug más sonado de todos los tiempos. El script tiene dos características: scan: Genera hosts aleatorios direcciones IP, verifica si soportan OpenSSL, los prueba si son vulnerables a CVE-2014-0160 error de sobrelectura del búfer de Heartbeat y guarda lo...

UBUNTU-CVE-2025-15614

ugrep before 7.6.0 contains a heap buffer over-read vulnerability in t...

CVE-2025-15614

ugrep before 7.6.0 contains a heap buffer over-read vulnerability in t...

Linux Distros Unpatched Vulnerability : CVE-2025-15614

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ugrep before 7.6.0 contains a heap buffer over-read vulnerability in the LZW decompressor when processing crafted .Z archive files. Attackers can supply malform...

CVE-2026-18238

The rpcap client code that processes a RPCAPMSGPACKET message received from the server incorrectly validates its headers. A malicious server can send a crafted message and cause the client to treat up to 20 bytes of the client process memory beyond the end of the buffer as if it was a part of the...

EUVD-2026-72021

The rpcap client code that processes a RPCAPMSGPACKET message received from the server incorrectly validates its headers. A malicious server can send a crafted message and cause the client to treat up to 20 bytes of the client process memory beyond the end of the buffer as if it was a part of the...

DEBIAN-CVE-2025-15614

ugrep before 7.6.0 contains a heap buffer over-read vulnerability in the LZW decompressor when processing crafted .Z archive files. Attackers can supply malformed .Z files that cause the decompressor to read one byte past the allocated heap buffer, potentially crashing the process...

CVE-2025-15614

ugrep before 7.6.0 contains a heap buffer over-read vulnerability in the LZW decompressor when processing crafted .Z archive files. Attackers can supply malformed .Z files that cause the decompressor to read one byte past the allocated heap buffer, potentially crashing the process...

CVE-2025-15614 ugrep before 7.6.0 Heap Buffer Over-read via .Z decompression

ugrep before 7.6.0 contains a heap buffer over-read vulnerability in the LZW decompressor when processing crafted .Z archive files. Attackers can supply malformed .Z files that cause the decompressor to read one byte past the allocated heap buffer, potentially crashing the process...

CVE-2025-15614

ugrep before 7.6.0 is affected by a heap buffer over-read in its LZW decompressor (src/zopen.c) when processing crafted .Z archive files. The decompressor reads one byte past the allocated heap buffer , which can cause a process crash. The vulnerability requires a local attack vector and user int...

CVE-2025-15614 ugrep before 7.6.0 Heap Buffer Over-read via .Z decompression

ugrep before 7.6.0 contains a heap buffer over-read vulnerability in the LZW decompressor when processing crafted .Z archive files. Attackers can supply malformed .Z files that cause the decompressor to read one byte past the allocated heap buffer, potentially crashing the process...

CVE-2025-15614

ugrep before 7.6.0 contains a heap buffer over-read vulnerability in the LZW decompressor when processing crafted .Z archive files. Attackers can supply malformed .Z files that cause the decompressor to read one byte past the allocated heap buffer, potentially crashing the process...

EUVD-2025-210857

ugrep before 7.6.0 contains a heap buffer over-read vulnerability in the LZW decompressor when processing crafted .Z archive files. Attackers can supply malformed .Z files that cause the decompressor to read one byte past the allocated heap buffer, potentially crashing the process...

ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer over-read in ipmi_oem_fujitsu_get_sel_entry_long_text in ipmi-oem/ipmi-oem-fujitsu.c when a BMC provides a short response, a different vulnerability than CVE-2026-50031 (which has different affected versions).

...

CVE-2026-80832 crypto: qce - fix CCM AAD buffer underallocation

In the Linux kernel, the following vulnerability has been resolved: crypto: qce - fix CCM AAD buffer underallocation The AAD buffer allocated in qceaeadccmpreparebufassoclen can be smaller than the length later programmed into the DMA scatterlist. The allocation size is currently calculated as:...

CVE-2026-80801 nfc: microread: validate target discovery payload lengths

In the Linux kernel, the following vulnerability has been resolved: nfc: microread: validate target discovery payload lengths microreadtargetdiscovered parses target discovery payloads from skb-data according to the HCI gate. The fixed field offsets and UID copies were checked only against the...

AZL-99107 CVE-2026-85505 affecting package freeipmi for versions less than 1.6.19-1

ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer over-read in ipmioemfujitsugetselentrylongtext in ipmi-oem/ipmi-oem-fujitsu.c when a BMC provides a short response, a different vulnerability than CVE-2026-50031 which has different affected versions...