Amazon Linux 2 : alsa-lib, --advisory ALAS2-2026-3874 (ALAS-2026-3874)

The version of alsa-lib installed on the remote host is prior to 1.1.4.1-2. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3874 advisory. The Advanced Linux Sound Architecture ALSA library before 1.2.16.1 contains a double-free vulnerability in parsedef in src/conf....

Linux Distros Unpatched Vulnerability : CVE-2026-80691

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - scsi: target: iblock: Fix wrong PR ops NULL check for PREEMPT/RELEASE In the iblockexecuteprout function, PROPREEMPT, PROPREEMPTANDABORT, and PRORELEASE all...

Linux Distros Unpatched Vulnerability : CVE-2026-80605

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HID: picolcd: prevent NULL pointer dereference in picolcdsendandwait In picolcdsendandwait, an integer overflow of the signed loop counter 'k' can theoretically...

Linux Distros Unpatched Vulnerability : CVE-2026-80690

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - scsi: ufs: core: Initialize hba-rpmbs list in ufshcd Initialize the hba-rpmbs list in ufshcdallochost to prevent NULL pointer dereference in the device teardown...

CVE-2026-50416-writeup-and-poc

CVE-2026-50416: デスクトップヒープにおけるQWORD一つ分の過剰 Windows 11 Insiderビルド 10.0.28020.2149 において、Win32kデスクトップヒープのユーザーモードマッピングが、オフセット 0x100 に生のカーネルセッションプールポインタを露出していました。 この読み取り自体は、ほぼ攻撃的に小さなものです: root@kitploit: ULONG64 leaked = ULONG64 desktopheap + 0x100; 私のテストセッションでは、次の値が返されました: root@kitploit:...

CVE-2026-82588

A vulnerability was identified in Open5GS up to 2.7.7. This issue affects some unknown processing of the file src/amf/namf-handler.c of the component Transfer Endpoint. Such manipulation leads to null pointer dereference. The attack can be launched remotely. Upgrading to version 2.8.0 is capable ...

CVE-2026-82588 Open5GS Transfer Endpoint namf-handler.c null pointer dereference

A vulnerability was identified in Open5GS up to 2.7.7. This issue affects some unknown processing of the file src/amf/namf-handler.c of the component Transfer Endpoint. Such manipulation leads to null pointer dereference. The attack can be launched remotely. Upgrading to version 2.8.0 is capable ...

CVE-2026-82588

A null pointer dereference vulnerability exists in Open5GS versions up to 2.7.7 , located in the file src/amf/namf-handler.c within the Transfer Endpoint component. The exact processing triggering the issue is described as unknown in the provided documents. The attack can be launched remotely and...

CVE-2026-82588 Open5GS Transfer Endpoint namf-handler.c null pointer dereference

A vulnerability was identified in Open5GS up to 2.7.7. This issue affects some unknown processing of the file src/amf/namf-handler.c of the component Transfer Endpoint. Such manipulation leads to null pointer dereference. The attack can be launched remotely. Upgrading to version 2.8.0 is capable ...

CVE-2022-23222

CVE-2022-23222 如果你只想构建并运行这个东西，点这里。 下面大致是对这篇中文文章（writeup）的翻译， 原文见此处。 我们将以 5.13.0 版本的主线内核代码作为参考。 可用的指针类型与检查其边界的函数之间存在不匹配。 这种不匹配最早在 Linux 5.8 中引入，此后已被修补。 可用指针类型的列表见 此处。c / types of values stored in eBPF registers / / Pointer types represent: pointer pointer + imm pointer + u16 var pointer + u16 var ...

CVE-2021-27965

CVE-2021-27965 CVE-2021-27965の概念実証（スタックベースのバッファオーバーフロー） 注意: おそらくこれ以上更新しません（まだ完成させる可能性はあります）。現在、命令ポインタをきれいに上書きできる状態ですが、少なくとも簡単でありながら実世界のカーネルデバイスドライバを悪用するために必要なスキルを持っていることを証明するには十分だと思います。別のCVE-2021-27965のエクスプロイトを調査して、これを修正するためのヒントを得ます。...

CVE-2021-26690---Apache-mod_session

CVE-2021-26690 のパッチ差分解析 - Apache modsession この脆弱性は、Apache の modsession モジュール内の NULL ポインタ参照です。 これにより、Apache httpd の子プロセスに対するサービス拒否が発生します。 繰り返しループを使用することで、各 Apache ワーカーがクラッシュし、Webサイトに接続している、または接続しようとしているすべてのクライアントに対してサービス拒否が発生します。 この脆弱性は、@antonio-morales によって最初に発見されました。...

PT-2026-83635

Name of the Vulnerable Software and Affected Versions Open5GS versions prior to 2.8.0 Description A remote null pointer dereference can occur due to improper processing within the src/amf/namf-handler.c file of the Transfer Endpoint component. A null pointer dereference happens when a program...

libevent: Libevent: Memory corruption due to use-after-free

A flaw was found in Libevent, an event notification library. A use-after-free vulnerability exists in the evbufferaddbufferreference function when it processes an output buffer with a zero length. This can lead to a dangling pointer, which an attacker could exploit to cause memory corruption or...

POC-CVE-2024-12227

CVE-2024-12227 - NTIOLibX64.sys DoS PoC Proof of Concept per CVE-2024-12227 - Vulnerabilità di dereferenziazione di puntatore nullo nel driver NTIOLibX64.sys di MSI Dragon Center. Descrizione NTIOLibX64.sys versione 3.0.0.10 contiene una vulnerabilità di dereferenziazione di puntatore nullo nella...

CVE-2023-50965

💥 CVE-2023-50965 — Exploit di Stack Buffer Overflow Linux Proof of Concept dell'exploit per CVE-2023-50965 , che dimostra un buffer overflow basato su stack che porta a Remote Code Execution RCE su sistemi vulnerabili senza mitigazioni abilitate. Questo progetto è stato sviluppato per ricerca sul...

EUVD-2026-67936

A NULL pointer dereference vulnerability exists in TL-WR841N v14 in the UPnP service when processing SOAP state variable query requests. A specially crafted SOAP query may trigger unexpected termination or instability of the process hosting the UPnP service. Successful exploitation may result in ...

EUVD-2026-67935

A NULL pointer dereference vulnerability exists in TL-WR841N v14 in the UPnP service when processing SOAP action requests. A specially crafted SOAP action request containing unexpected XML content may cause the UPnP daemon to terminate unexpectedly. Successful exploitation may result in a...

CVE-2026-76649

A NULL pointer dereference vulnerability exists in TL-WR841N v14 in the UPnP service when processing SOAP action requests. A specially crafted SOAP action request containing unexpected XML content may cause the UPnP daemon to terminate unexpectedly. Successful exploitation may result in a...

CVE-2026-76650

A NULL pointer dereference vulnerability exists in TL-WR841N v14 in the UPnP service when processing SOAP state variable query requests. A specially crafted SOAP query may trigger unexpected termination or instability of the process hosting the UPnP service. Successful exploitation may result in ...