cve-2026-86547-mrubyc-op-enter

CVE-2026-86547 — إلغاء الإشارة إلى مؤشر NULL في OPENTER الخاص بـ mrubyc إثبات مفهوم مستقل لـ CVE-2026-86547 ، وهو إلغاء الإشارة إلى مؤشر NULL في معالج openter الخاص بـ mrubyc حتى الإصدار 4.0.0. الملخص mrubyc هو تطبيق خفيف الوزن للغة Ruby مخصص للأنظمة المدمجة. تحتفظ آلة البايت كود الافتراضية الخاص...

CVE-2025-55780

CVE-2025-55780 إلغاء مرجعية مؤشر فارغ في دالة عرض EPUB في MuPDF 1.26.4 مرجع CVE - CVE-2025-55780 الإصدارات المتأثرة: الإصدار 1.26.7 وما قبله متأثرة تم اكتشافه واختباره على: 1.26.4 درجة الخطورة CVSSv3 : 7.5 عالية تم الإصلاح في commit :...

cve-2025-2082-POV

CVE-2025-2082 – Function Pointer Overwrite PoV VCSEC-style This repository demonstrates a Proof of Vulnerability PoV simulating a critical memory corruption flaw inspired by CVE-2025-2082, discovered in Tesla's VCSEC Vehicle Controller Security component. The vulnerability allows an attacker to...

Linux Distros Unpatched Vulnerability : CVE-2026-66081

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Access of Uninitialized Pointer vulnerability in Apache Thrift cglib bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade...

Linux Distros Unpatched Vulnerability : CVE-2026-66859

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NULL Pointer Dereference, Use of Uninitialized Variable vulnerability in Apache Thrift cglib bindings. This issue affects Apache Thrift: before 0.25.0. Users ar...

Linux Distros Unpatched Vulnerability : CVE-2026-87117

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NULL pointer dereference vulnerability in Apache Thrift PHP bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to versi...

SUSE SLES15 Security Update : openssl-3 (SUSE-SU-2026:4412-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4412-1 advisory. - CVE-2026-35189: Excessive Memory Allocation in Relative CRLDP Processing bsc1280589. - CVE-2026-54872: Timing Side-Channel in...

SUSE SLES15 Security Update : openssl-3 (SUSE-SU-2026:4413-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4413-1 advisory. - CVE-2026-35189: Excessive Memory Allocation in Relative CRLDP Processing bsc1280589. - CVE-2026-54872: Timing Side-Channel in...

SUSE SLES15: libopenssl-3-devel / libopenssl-3-fips-provider / etc (SUSE-SU-2026:4419-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4419-1 advisory. - CVE-2026-35189: Excessive Memory Allocation in Relative CRLDP Processing bsc1280589. - CVE-2026-54872: Timing Side-Channel in...

iOS26.6-CVE-2026-65343

CVE-2026-65343 — قراءة خارج الحدود في AppleKeyStore كسر KASLR المكوّن: امتداد النواة AppleKeyStore — LibSerSEPControlDeserialize المتأثر: iOS / iPadOS 26.6 23G71 والإصدارات الأقدم تم الإصلاح في: iOS / iPadOS 26.6.1 23G83 النوع: قراءة خارج الحدود في إلغاء تسلسل رسائل تحكم SEP الأثر: تسريب مؤشرات...

CVE-2026-43499-S26

CVE-2026-43499 — استغلال نواة Android GKI 6.12 عبر pselect / configfs استغلال لنواة Linux لخط GKI 6.12 على Android أجهزة Samsung وPixel يستهدف CVE-2026-43499 : خلل في التراجع removewaiter داخل rtmutexstartproxylock يستخدم current بدلاً من waiter::task، تاركاً piblockedon الخاص بالمنتظر مشيراً إلى...

PoC-CVE-2025-69420

CVE-2025-69420 — OpenSSL टाइमस्टैम्प प्रतिक्रिया प्रकार भ्रम PoC CVE-2025-69420 के लिए केवल-क्रैश प्रयोगशाला पुनरुत्पादक। PoC एक मान्य RFC 3161 टाइमस्टैम्प प्रतिक्रिया लोड करता है, हस्ताक्षरित ESS गुण को मेमोरी में VASN1SEQUENCE से VASN1NULL में बदलता है, और TSRESPverifyresponse को कॉल करता है। ए...

CVE-2026-66081

A flaw was found in Apache Thrift's C GLib bindings. A remote, unauthenticated attacker could exploit this vulnerability by sending specially crafted input that triggers the access of an uninitialized pointer. This access can cause the application to crash, resulting in a Denial of Service DoS...

tpwn

tpwn cve-2015-???? poc os x 10.10.5 تصعيد امتيازات محلي للنواة الثغرة أُحرقت في 10.11 الكتابة الكاملة etason تحية إلى @ unthreadedjb 4 hax ثبّت NULLGuard لحماية نفسك من tpwn وثغرات NULL Pointer Deference الأخرى...

OPENSUSE-SU-2026:22013-1 Security update for openexr

This update for openexr fixes the following issue: - CVE-2026-88384: NULL pointer dereference in the C++ attribute parsing path when a specially crafted EXR file containing an unknown-type attribute with dataSize set to zero is processed bsc1282700...

AZL-106557 CVE-2026-66081 affecting package thrift 0.24.0-1

Access of Uninitialized Pointer vulnerability in Apache Thrift cglib bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

AZL-106590 CVE-2026-66859 affecting package thrift 0.24.0-1

NULL Pointer Dereference, Use of Uninitialized Variable vulnerability in Apache Thrift cglib bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

DEBIAN-CVE-2026-66081

Access of Uninitialized Pointer vulnerability in Apache Thrift cglib bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

DEBIAN-CVE-2026-66859

NULL Pointer Dereference, Use of Uninitialized Variable vulnerability in Apache Thrift cglib bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

CVE-2026-66081

Access of Uninitialized Pointer vulnerability in Apache Thrift cglib bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...