tftp: tftp-hpa: Denial of Service due to out-of-bounds read/write in remap engine

A flaw was found in tftp-hpa. When the in.tftpd remap engine processes an inverse remap rule that also aborts with a non-empty custom error message, it can pass invalid match offsets to the genmatchstring function. This leads to out-of-bounds read/write operations. A remote, unauthenticated...

Moderate: Red Hat Security Advisory: tftp security update

An update for tftp is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the C...

CVE-2026-77366: Authorization Bypass Through User-Controlled Key

obsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaults. Prior to 1.3.1, tool dispatch does not compare the caller-controlled input.vault value with the vault bound to the caller, the JSON Web Token JWT has no vault claim, and the folder access-control list is...

ALSA-2026:80663 Moderate: tftp security update

The Trivial File Transfer Protocol TFTP is typically used only for booting diskless workstations. The tftp packages include the tftp and tftp-server subpackages. The tftp subpackage provides the user interface for TFTP and the tftp-server subpackage provides the server. This allows users to...

Rocky Linux 8 [CIQ] Security Update: tftp / tftp-debuginfo / tftp-debugsource / tftp-server / etc (crlsa-2026_78952)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202678952 advisory. tftp: tftp-hpa: Denial of Service due to out-of-bounds read/write in remap engine CVE-2026-85234 Tenable has extracted the preceding description block directly fro...

Moderate: tftp security update

The Trivial File Transfer Protocol TFTP is typically used only for booting diskless workstations. The tftp packages include the tftp and tftp-server subpackages. The tftp subpackage provides the user interface for TFTP and the tftp-server subpackage provides the server. This allows users to...

mtkclient

Idioma: 🇺🇸 🇨🇳 MTKClient Solo una herramienta mtk para explotación, lectura/escritura de flash y hacer cosas locas. En Windows, necesitas instalar el puerto mtk original y el controlador usbdk consulta las instrucciones a continuación. En Linux, solo se necesita un kernel parcheado cuando se usa...

cve-2019-2215

CVE-2019-2215 Temproot para Pixel 2 y Pixel 2 XL mediante CVE-2019-2215 Basado en una prueba de concepto de Jann Horn y Maddie Stone de Google Project Zero Resumen Demostración de un ataque de escalada de privilegios de solo lectura/escritura en memoria del kernel que resulta en un shell root...

s3sec

s3sec Prueba los buckets de AWS S3 para acceso de lectura/escritura/eliminación Esta herramienta fue desarrollada para probar rápidamente una lista de buckets de S3 para acceso público de lectura, escritura y eliminación con fines de pruebas de penetración en programas de bug bounty. Screenshot...

mod_auth_openidc security update

2.4.16.11-1.1 - Resolves: RHEL-248048 - CVE-2026-54789 out-of-bounds read/write in oidcstatecookiescleanexpired when a state-prefixed cookie token contains no '=' separator...

Exploit for Improper Privilege Management in Microsoft

CVE-2026-69414 — Microsoft Malware Protection Engine EoP Explo...

tftp security update

An update is available for tftp. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The Trivial File Transfer Protocol TFTP is typically used only for booting...

AlmaLinux 8 : tftp (ALSA-2026:78952)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:78952 advisory. tftp: tftp-hpa: Denial of Service due to out-of-bounds read/write in remap engine CVE-2026-85234 Tenable has extracted the preceding description block directly fr...

AlmaLinux 9.2 [TuxCare] Security Update: libpcap / libpcap-devel (ALMALINUX9.2:CLSA-2026:1791564868)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1791564868 advisory. - In BPF instructions that load/store a value from/to a scratch memory register the register index is an unsigned 32-bit integer and must not...

vivo-root-build

PD2415 6.6.89 Candidato Full-Flow Questa sorgente si basa sul motore IonStack PD2415 6.6.57 stesso-dispositivo/stesso-SoC: perf KASLR, pselect GhostLock, CFI fops, pipe physrw. La chiusura del carrier dumpstate è mantenuta dal metodo PD2241 validato. Il target 6.6.89 archiviato mantiene...

MGASA-2026-0471 Updated libxfont2 package fixes security vulnerabilities

fsreadglyphs heap buffer overflow via cumulative glyph data overflow in libXfont2. CVE-2026-44950 fsreadglyphs heap OOB read/write via encoding array index mismatch in libXfont2. CVE-2026-59679...

Updated libxfont2 package fixes security vulnerabilities

fsreadglyphs heap buffer overflow via cumulative glyph data overflow in libXfont2. CVE-2026-44950 fsreadglyphs heap OOB read/write via encoding array index mismatch in libXfont2. CVE-2026-59679...

cve-2018-8453-exp

cve-2018-8453-exp cve-2018-8453 exp Questo programma è un exploit per cve-2018-8453. Piattaforma di sviluppo\test: x86: windows 10 rs2 15063 x64: windos 10 rs2 16299 Nota: utilizza Palette per leggere/scrivere il kernel Avvertenza importante: questo strumento è destinato esclusivamente alla ricer...

Moderate: Red Hat Security Advisory: tftp security update

An update for tftp is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the C...

tftp: tftp-hpa: Denial of Service due to out-of-bounds read/write in remap engine

A flaw was found in tftp-hpa. When the in.tftpd remap engine processes an inverse remap rule that also aborts with a non-empty custom error message, it can pass invalid match offsets to the genmatchstring function. This leads to out-of-bounds read/write operations. A remote, unauthenticated...