CVE-2026-18794

OpenRGB is vulnerable in its network protocol due to insufficient input data validation. An attacker can pass inconsistent data over the network to cause memory exhaustion and out-of-bounds memory reads and writes , leading to denial-of-service and potential memory corruption. The vulnerability i...

CVE-2026-18794 OpenRGB: insufficient input data checks lead to Denial-of-Service, memory overread and overwrite

The OpenRGB network protocol allows attackers to cause memory exhaustion and out-of-bounds memory reads and writes by passing inconsistent data...

overread

overread Simula o bug de overread CVE-2023-4966 do Citrix Bleed Este é o meu projeto final para Harvard CS50 Cybersecurity 2023. É sobre um bug. Um pequeno bug – com consequências enormes e contínuas. Nesta apresentação, compartilharei os “bleeding insights” do pequeno erro de um desenvolvedor. U...

CVE-2024-5535

CVE-2024-5535 PoC - OpenSSL NPN Buffer Overread Hinweis: Wir haben dies nicht entdeckt, wir haben nur einen PoC dafür basierend auf der Veröffentlichung erstellt. https://nvd.nist.gov/vuln/detail/cve-2024-5535...

kernel: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd()

A flaw was found in the Linux kernel's iSCSI Internet Small Computer System Interface target subsystem. This vulnerability involves a buffer overread and a double-free error when processing iSCSI Text commands. A remote attacker could exploit these issues by sending specially crafted network...

cve-images

cve-images — immagini vulnerabili di laboratorio intenzionali Una raccolta di immagini Docker deliberatamente vulnerabili per lo studio della sicurezza in un laboratorio isolato. Iniziato come riproduzione di CVE di nginx e si sta ampliando in un set più ampio di immagini vulnerabili per...

watchTowr-vs-Netscaler-CVE-2026-8451

CVE-2026-8451 Citrix Netscaler मेमोरी ओवररीड Citrix Netscaler ओवररीड डिटेक्शन आर्टिफैक्ट जनरेटर टूल! डिटेक्शन इन एक्शन यह डिटेक्शन आर्टिफैक्ट जनरेटर लक्षित Netscaler डिवाइस को स्वीकार करेगा, और CVE-2026-8451 के माध्यम से मेमोरी लीक करने का प्रयास करेगा। इसे केवल लक्षित सिस्टम की आवश्यकता है।...

Citrix-Bleed-Buffer-Overread-Demo

Citrix-Bleed-Buffer-Overread-Demo Il presente codice approssima funzionalmente la vulnerabilità Citrix Bleed CVE-2023-4699 dovuta alla gestione impropria del valore di ritorno di snprintf in C...

netscaler-saml-memory-disclosure-security-assessment

CVE-2026-8451 - Overread della memoria SAML di Citrix NetScaler CitrixBleed Report di cybersicurezza in stile consulenziale Report professionale di valutazione delle vulnerabilità per il rischio di divulgazione della memoria SAML di NetScaler, comprensivo di impatto tecnico, rimedio e strategia d...

cve-2025-5777-citrixbleed2_reproduction

CVE-2025-5777 — CitrixBleed 2 Divulgazione di memoria Citrix NetScaler CVSS 9.3 — Critico — Sfruttamento attivo in natura CitrixBleed 2 è una vulnerabilità di divulgazione di memoria in Citrix NetScaler ADC e NetScaler Gateway. Una validazione insufficiente dell'input nell'endpoint di...

Important: Red Hat Security Advisory: openssl security update

An update for openssl is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available fo...

openssl: SSL_select_next_proto buffer overread

A flaw was found in OpenSSL. Affected versions of this package are vulnerable to Information Exposure through the SSLselectnextproto function. This flaw allows an attacker to cause unexpected application behavior or a crash by exploiting the buffer overread condition when the function is called...

RHEL 7 : openssl (RHSA-2026:58563)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:58563 advisory. OpenSSL is a toolkit that implements the Secure Sockets Layer SSL and Transport Layer Security TLS protocols, as well as a full-strength...

RLSA-2026:57254 Important: kernel-rt security, bug fix, and enhancement update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fixes: kernel: net: ieee802154: do not leave a dangling sk pointer in ieee802154create CVE-2024-56602 kernel: ip6gre: Use cached t-net in...

kernel: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd()

A flaw was found in the Linux kernel's iSCSI Internet Small Computer System Interface target subsystem. This vulnerability involves a buffer overread and a double-free error when processing iSCSI Text commands. A remote attacker could exploit these issues by sending specially crafted network...

kernel: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd()

A flaw was found in the Linux kernel's iSCSI Internet Small Computer System Interface target subsystem. This vulnerability involves a buffer overread and a double-free error when processing iSCSI Text commands. A remote attacker could exploit these issues by sending specially crafted network...

kernel: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd()

A flaw was found in the Linux kernel's iSCSI Internet Small Computer System Interface target subsystem. This vulnerability involves a buffer overread and a double-free error when processing iSCSI Text commands. A remote attacker could exploit these issues by sending specially crafted network...

kernel: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd()

A flaw was found in the Linux kernel's iSCSI Internet Small Computer System Interface target subsystem. This vulnerability involves a buffer overread and a double-free error when processing iSCSI Text commands. A remote attacker could exploit these issues by sending specially crafted network...

PT-2026-79142

Name of the Vulnerable Software and Affected Versions libvips versions prior to 8.18.3 Description When built with libultrahdr support, the library can incorrectly size an output buffer within the vips foreign save uhdr set raw hdr function in libvips/foreign/uhdrsave.c. This occurs when a pipeli...

RHEL 8 : kernel (RHSA-2026:57253)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:57253 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: net: ieee802154: do not leave...