475468 matches found
CVE-2026-38698-and-CVE-2026-38699
Recherche sur la Wyze Cam Pan v3 Diapositives Référence CVE-2026-38698 Nom de l'attaque Débordement de tas sur la fonction tutkpacketalloc dans tutkavserver Détails supplémentaires Produit affecté TUTK SDK v.3.1.10.0 à v.4.3.8.1 Composant affecté fonction tutkpacketAlloc Vecteur d'attaque Un...
BIT-APACHE-2026-93546 Apache HTTP Server: mod_dav_fs namespace overflow
Integer overflow in moddavfs in Apache HTTP Server through 2.4.68 allows an authenticated WebDAV client with write access to crash worker processes and persistently corrupt a directory's property database via PROPPATCH requests declaring many XML namespaces...
BIT-APACHE-2026-63292 Apache HTTP Server: mod_vhost_alias stack overflow
Stack-based buffer overflow in modvhostalias in Apache Software Foundation Apache HTTP Server through 2.4.68 on all platforms allows a remote client to cause a denial of service or potentially execute arbitrary code via an HTTP request with a Host header exceeding 8192 bytes when...
CVE-2025-43300
CVE-2025-43300 CVE-2025-43300: Corruption mémoire du traitement d'image DNG sur iOS/macOS Résumé Une vulnérabilité dans le traitement d'image d'Apple RawCamera.bundle affecte iOS 18.6.1 et macOS. Le problème survient lorsque les fichiers DNG contiennent des métadonnées TIFF et des paramètres JPEG...
patch-CVE-2026-08742
Correctif : CVE-2026-08742 Détails de la vulnérabilité CVE : CVE-2026-08742 Produit : Citrix ADC Description : Débordement de tampon Gravité : Critique Statut du correctif : DÉPLOYÉ Champ| Valeur ---|--- Date du correctif| 2026-03-20 Statut| déployé Déployé sur| Production Validé par| Équipe SecO...
watchTowr-vs-Citrix-Netscaler-CVE-2026-88772
watchTowr-vs-Citrix-Netscaler-CVE-2026-88772 Générateur d'artefacts de détection pour Citrix NetScaler CVE-2026-88772 Consultez notre article de blog pour les détails techniques. Détection en action / | | |\ \ \ / / \ \ / | | | | / \ / / \ \ \ / / | | \ | Y | | \ / | | / // || \ ||| | ...
cve-2022-42475-poc
CVE-2022-42475 PoC Exécution de code à distance avant authentification sur SSL VPN Fortinet Description CVE-2022-42475 est une vulnérabilité de dépassement de tampon basé sur le tas heap-based buffer overflow dans le service SSL VPN de FortiOS qui permet à des attaquants non authentifiés d'exécut...
AZL-105969 CVE-2026-75818 affecting package aspell 0.60.8.1-1
GNU Aspell prezip-bin contains a heap-based buffer overflow vulnerability in the decompressor in prog/prezip.c. The decompressor does not properly check buffer space, so a crafted compressed file can cause out-of-bounds read and write operations on the heap. An attacker who convinces a user to...
DEBIAN-CVE-2026-75818
GNU Aspell prezip-bin contains a heap-based buffer overflow vulnerability in the decompressor in prog/prezip.c. The decompressor does not properly check buffer space, so a crafted compressed file can cause out-of-bounds read and write operations on the heap. An attacker who convinces a user to...
CVE-2026-75818
GNU Aspell prezip-bin contains a heap-based buffer overflow vulnerability in the decompressor in prog/prezip.c. The decompressor does not properly check buffer space, so a crafted compressed file can cause out-of-bounds read and write operations on the heap. An attacker who convinces a user to...
CVE-2026-75818 Heap Buffer Overflow in GNU Aspell's prezip utility
GNU Aspell prezip-bin contains a heap-based buffer overflow vulnerability in the decompressor in prog/prezip.c. The decompressor does not properly check buffer space, so a crafted compressed file can cause out-of-bounds read and write operations on the heap. An attacker who convinces a user to...
EUVD-2026-93364
GNU Aspell prezip-bin contains a heap-based buffer overflow vulnerability in the decompressor in prog/prezip.c. The decompressor does not properly check buffer space, so a crafted compressed file can cause out-of-bounds read and write operations on the heap. An attacker who convinces a user to...
CVE-2026-75818
GNU Aspell prezip-bin contains a heap-based buffer overflow vulnerability in the decompressor in prog/prezip.c. The decompressor does not properly check buffer space, so a crafted compressed file can cause out-of-bounds read and write operations on the heap. An attacker who convinces a user to...
CVE-2026-75818 Heap Buffer Overflow in GNU Aspell's prezip utility
GNU Aspell prezip-bin contains a heap-based buffer overflow vulnerability in the decompressor in prog/prezip.c. The decompressor does not properly check buffer space, so a crafted compressed file can cause out-of-bounds read and write operations on the heap. An attacker who convinces a user to...
CVE-2026-75818 Heap Buffer Overflow in GNU Aspell's prezip utility
GNU Aspell prezip-bin contains a heap-based buffer overflow vulnerability in the decompressor in prog/prezip.c. The decompressor does not properly check buffer space, so a crafted compressed file can cause out-of-bounds read and write operations on the heap. An attacker who convinces a user to...
CVE-2026-75818
The GNU Aspell prezip-bin utility contains a heap-based buffer overflow vulnerability within the decompressor located in prog/prezip.c. The root cause is an insufficient check of buffer space, allowing a crafted compressed file to trigger out-of-bounds read and write operations on the heap. An at...
Blackash-CVE-2025-48593
🚨 CVE-2025-48593 تنفيذ تعليمات برمجية عن بعد بدون نقرة في نظام أندرويد 🚨 "حزمة ضارة واحدة يمكنها السيطرة على جهازك." — فريق أمن أندرويد، نوفمبر 2025 🎯 لمحة عن الثغرة الخاصية| التفاصيل ---|--- CVE ID| CVE-2025-48593 الخطورة| 🔴 حرجة RCE, بدون نقرة CVSS تقديري| 9.8 بانتظار تأكيد NVD متجه الهجوم| 🌐...
Security update for the Linux Kernel (Live Patch 6 for SUSE Linux Enterprise 15 SP7)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.22 fixes various security issues: The following security issues were fixed: CVE-2026-46116: xfrm: defensively unhash xfrmstate lists in xfrmstatedelete bsc1267370. CVE-2026-63802: blk-cgroup: fix UAF in blkcgrstatflush bsc1272283...
cve-2023-6931-pipa
CVE-2023-6931 — Xiaomi Pad 6 pipa élévation de privilèges et désactivation de SELinux La version finale de l'exploit utilisée sur l'appareil, regroupée ici dans ce répertoire. Objectif Appareil Xiaomi Pad 6 / pipa / SM8250 Système HyperOS OS2.0.20.0.UMZCNXM Noyau 4.19.157-perf-g240e1d0a5f52 Point...
cve-2025-29384
Preuve de concept de l'exploit CVE-2025-29384 Vue d'ensemble Ce dépôt contient une preuve de concept PoC avancée pour CVE-2025-29384 , une vulnérabilité critique de débordement de tampon basé sur la pile découverte sur le routeur Tenda AC9 exécutant la version de firmware V15.03.05.14multi. Cette...