CVE-2015-4870

CVE-2015-4870 MySQL の Procedure Analyse 関数における DoS（サービス拒否） – CVE-2015-4870 解説: https://osandamalith.wordpress.com/2016/05/29/mysql-dos-in-the-procedure-analyse-function-cve-2015-4870/ 動画: https://www.youtube.com/watch?v=zE-TsQVn9oI...

CveTest

CveTest Node.JS V0.10.31 v8 バックポート CVE-2013-6668 のクラッシュを再現するためのテストケース。 このテストでは、"SQLDB" データベース内のテーブル（"Table1"）からデータを取得するために、SQL ストアドプロシージャ（"GetSomething"）を呼び出します。同じ呼び出しを数回行った後に、返される行が 52 行を超えるとクラッシュが発生します。 環境 Windows 7 64-bit MS SQL 2005 Node.JS V0.10.31 x64 tedious node module V1.4.3 以前 さまざまな種類の...

ROOT-APP-GOBINARY-CVE-2026-33186 CVE-2026-33186 in google.golang.org/grpc - Patched by Root

Root has patched CVE-2026-33186 in the google.golang.org/grpc package for Root:Go. Multiple fixed versions available...

Rocky Linux 8 [CIQ] Security Update: mecab / mecab-debuginfo / mecab-debugsource / mecab-ipadic / etc Multiple Vulnerabilities (crlsa-2021_3590)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20213590 advisory. mysql: Server: Stored Procedure multiple vulnerabilities CVE-2020-14672, CVE-2021-2046, CVE-2021-2072, CVE-2021-2081, CVE-2021-2215, CVE-2021-2217,...

CVE-2026-47496

A flaw was found in the NVIDIA Virtual GPU vGPU Manager within the NVIDIA GPU Display Driver. A user within a guest virtual machine VM can exploit this vulnerability by sending a specially crafted Remote Procedure Call RPC request to the host system, causing an out-of-bounds memory write. A...

sccm_sql_backdoor

sccmsqlbackdoor Management Pointのストアドプロシージャに制御されたバックドアを埋め込み、正当なMP HTTPサービスを介した間接的なSQL実行を可能にする概念実証ツールです。 インストール リポジトリをクローンして依存関係をインストールすることでインストールできます。 $ git clone --recurse-submodules https://github.com/synacktiv/sccmsqlbackdoor $ cd sccmsqlbackdoor $ python3 -m venv .venv && source...

EUVD-2026-80811

Rallly before 4.15.0 contains an information disclosure vulnerability in the polls.get tRPC procedure that returns scheduled-event invitee names and email addresses to unauthenticated callers. Attackers can access a poll's urlId from public invite links to retrieve sensitive invitee information...

CVE-2026-80225

In NLnetLabs Unbound up to and including 1.26.0, a degradation of service vulnerability is present in the TCP/DoT reading procedure where there is no limit on consecutive reads. A malicious actor that can stream and sustain a rate of distinct uncached names over the TCP/DoT connection, monopolize...

CVE-2026-92565: Exposure of Private Personal Information to an Unauthorized Actor

Rallly before 4.15.0 contains an information disclosure vulnerability in the polls.get tRPC procedure that returns scheduled-event invitee names and email addresses to unauthenticated callers. Attackers can access a poll's urlId from public invite links to retrieve sensitive invitee information...

Astra Linux – Vulnerabilities in nghttp2, jetty9, netty, tomcat9

The HTTP/2 protocol allows for a denial of service server resource consumption, as request cancellation can quickly reset many streams, as exploited in practice from August to October 2023...

Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Fixed an UAF in svctcplistendataready After the listener svcsock is freed, and before invoking svctcpaccept for the established child sock, there is a window during which the newsock may retain the freed listener svcsock ...

Astra Linux – Vulnerability in Linux 5.10, Linux

The SUNRPC subsystem in the Linux kernel, up to version 5.17.2, can call the xsxprtfree function before ensuring that the sockets are in the intended state...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fixed the issue where the timer for starting a call race against the destruction of the call occurred. The rxrpccall structure contains a timer used to handle various timed events related to a call. This timer can be...

Astra Linux – Vulnerability in Samba

An infinite loop vulnerability was discovered in Samba’s mdssvc RPC service for Spotlight. When parsing Spotlight mdssvc RPC packets sent by the client, the core unmarshalling function slunpackloop failed to validate a field in the network packet that contains the count of elements in an array-li...

Astra Linux – Vulnerability in Samba

Netlogon RPC Elevation of Privilege Vulnerability...

Astra Linux – Vulnerability in Samba

A Type Confusion vulnerability was discovered in Samba’s mdssvc RPC service for Spotlight. When parsing Spotlight mdssvc RPC packets, one encoded data structure is a key-value style dictionary, where the keys are character strings, and the values can be any of the supported types in the mdssvc...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: arm64: ftrace: fixed module PLTs with mcount Li Huafei reports that the ftrace with module PLTs based on mcount was broken by the commit: a6253579977e4c6f “arm64: ftrace: consistently handle PLTs.” When module PLTs are used and a...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: crypto: ccp – Fixed null pointer dereference in sevplatformshutdownlocked. The SEV platform device can be shut down with a null pspmaster, for example, by using DEBUGTESTDRIVERREMOVE. This issue was identified using KASAN:...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: HSI: ssiprotocol: Fixed a use-after-free vulnerability in the ssiProtocol Driver due to race conditions. In the ssiProtocolprobe function, &ssi-work is bound to ssipxmitwork. In ssippnsetup, the ssippnxmit function within the...

Astra Linux – Vulnerability in Samba

A flaw was discovered in Samba’s DNS server. A authenticated user could exploit this flaw to cause damage to the RPC server. This RPC server, which also supports protocols other than dnsserver, will be restarted after a short delay. However, it is easy for an authenticated, non-administrative...