1080 matches found
php_hack
This tool exploits a vulnerability called CVE-2019-11043, an instance of insecure pointer arithmatic, to gain access to poorly configured PHP servers. It can be downloaded here you will need to run it from the command line Usage: phphack target IP target port...
cve-2019-6250-lab
CVE-2019-6250 — libzmq pre-auth RCE lab End-to-end working RCE chain + reproducible lab for CVE-2019-6250 , the pre-auth heap-buffer-overflow in libzmq's v2decodert::sizeready. A uint64t pointer-arithmetic overflow lets an unauthenticated peer overwrite the adjacent msgt::contentt::ffn function...
EUVD-2026-93144
In the Linux kernel, the following vulnerability has been resolved: IB/hfi1: Fix the PIOCRED credit-return mmap hfi1filemmap's PIOCRED case must hand user space the single credit-return page that holds this context's entry. That page is the second or third page of the per-node credit-return...
ROS-20261006-73-0333
The vulnerability in the drivers/net/ethernet/freescale/dpaa2/dpaa2-switch.c component of the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability could allow an attacker to cause a service failure...
ROS-20261006-73-0261
The vulnerability of the Linux operating system’s kernel is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a service failure...
CentOS Linux 8.5 [TuxCare] Security Update: rsync / rsync-daemon (CENTOS8.5:CLSA-2025:1749825355)
The CentOS Linux 8.5 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.5:CLSA-2025:1749825355 advisory. - inftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic...
Rocky Linux 8 [CIQ] Security Update: rsync / rsync-daemon / rsync-debuginfo / rsync-debugsource (crlsa-2025_8395)
The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20258395 advisory. zlib: Out-of-bounds pointer arithmetic in inftrees.c CVE-2016-9840 Tenable has extracted the preceding description block directly from the CIQ security advisory. No...
CentOS Linux 8.4 [TuxCare] Security Update: rsync / rsync-daemon (CENTOS8.4:CLSA-2025:1751027703)
The CentOS Linux 8.4 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.4:CLSA-2025:1751027703 advisory. - inftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic...
CentOS Linux 7 [TuxCare] Security Update: rsync (CENTOS7:CLSA-2025:1762544268)
The CentOS Linux 7 host has a package installed that is affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2025:1762544268 advisory. - inftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic...
Rocky Linux 9 [CIQ] Security Update: kernel / kernel-64k / kernel-64k-core / kernel-64k-debug / etc Multiple Vulnerabilities (crlsa-2026_4759)
The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20264759 advisory. kernel: HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save CVE-2025-39818 kernel: mlxsw: spectrummr: Fix use-after-free when...
ROS-20260930-73-0023
The vulnerability of the ASoC kernel component of the operating system is related to an error in pointer arithmetic. Exploiting this vulnerability can allow a perpetrator to cause a service failure...
ROS-20260930-73-0109
The vulnerability in the arch/arm64/kernel/signal.c component of the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a system failure...
ROS-20260930-73-0117
The vulnerability of the scsi/qla2xxx/qlags.c component of the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20260930-73-0115
The vulnerability of the pci/endpoint/pci-ep-cfs.c component in the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20260930-73-0014
The vulnerability of the nvmettcphandleh2cdatapdu function in the operating system’s kernel is related to an error in pointer arithmetic. Exploiting this vulnerability could allow an attacker to cause a service failure...
CentOS Linux 7 [TuxCare] Security Update: minizip / minizip-devel / zlib / zlib-devel / zlib-static (CENTOS7:CLSA-2025:1757247437)
The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2025:1757247437 advisory. - inftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic...
CentOS Linux 8 [TuxCare] Security Update: rsync / rsync-daemon (CENTOS-STREAM8:CLSA-2025:1749826078)
The CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS- STREAM8:CLSA-2025:1749826078 advisory. - inftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic...
ROS-20260929-73-0074
The vulnerability of the net/sched component in the Linux operating system’s kernel is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20260929-73-0137
The vulnerability of the x86pmustop function in the Linux operating system’s kernel is related to an error in pointer arithmetic. Exploiting this vulnerability could allow an attacker to trigger a service failure...