173809 matches found
CVE-2026-57546 Buffer Over-read in WLAN HAL
Transient DOS when processing a continuous receive command with a zero-sized global configuration override...
CVE-2026-57546
A Buffer Over-read vulnerability exists in the WLAN HAL component. The flaw occurs during the processing of a continuous receive command when a zero-sized global configuration override is present, leading to a transient Denial of Service (DoS) . No specific software versions or remediation steps ...
CVE-2026-105775
A security vulnerability has been detected in vllm-project vLLM up to 0.31.0. This impacts the function convssmforward of the file vllm/modelexecutor/layers/mamba/mambamixer2.py of the component Completions Request Handler. The manipulation leads to out-of-bounds read. The attack is possible to b...
CVE-2021-43798
CVE-2021-43798 1. Résumé Grafana est une plateforme open source prenant en charge la surveillance et la gestion des données. Dans les versions ci-dessous, il existe une vulnérabilité de type Path Traversal permettant de manipuler les chemins de fichiers à l'aide de caractères spéciaux comme ../...
Authorization Bypass
langgraphsdk is vulnerable to an authorization bypass. The vulnerability is due to the @auth.on.threads, @auth.on.assistants, and @auth.on.crons decorators ignoring the specified actions argument, which allows an authenticated attacker to bypass fallback permission or ownership checks and read,...
ntfsDump
ntfsDump Используется для копирования файла из тома с разделами NTFS путем чтения необработанного тома и разбора структур NTFS. Аналог https://github.com/PowerShellMafia/PowerSploit/blob/master/Exfiltration/Invoke-NinjaCopy.ps1 Ссылка: https://www.codeproject.com/Articles/81456/An-NTFS-Parser-Lib...
CVE-2021-43798
CVE-2021-43798 - Чтение произвольных файлов в Grafana Python-инструментарий для авторизованного тестирования CVE-2021-43798, уязвимости обхода пути в Grafana, которая может позволить неаутентифицированное чтение произвольных файлов через пути к ресурсам плагинов. Этот репозиторий содержит:...
CVE-2026-105775 vllm-project vLLM Completions Request mamba_mixer2.py conv_ssm_forward out-of-bounds
A security vulnerability has been detected in vllm-project vLLM up to 0.31.0. This impacts the function convssmforward of the file vllm/modelexecutor/layers/mamba/mambamixer2.py of the component Completions Request Handler. The manipulation leads to out-of-bounds read. The attack is possible to b...
EUVD-2026-92962
A security vulnerability has been detected in vllm-project vLLM up to 0.31.0. This impacts the function convssmforward of the file vllm/modelexecutor/layers/mamba/mambamixer2.py of the component Completions Request Handler. The manipulation leads to out-of-bounds read. The attack is possible to b...
CVE-2026-105775
A security vulnerability exists in vllm-project vLLM up to version 0.31.0 . The issue resides within the Completions Request Handler component, specifically affecting the conv_ssm_forward function in the file vllm/model_executor/layers/mamba/mamba_mixer2.py . This flaw allows for an out-of-bounds...
CVE-2026-105775 vllm-project vLLM Completions Request mamba_mixer2.py conv_ssm_forward out-of-bounds
A security vulnerability has been detected in vllm-project vLLM up to 0.31.0. This impacts the function convssmforward of the file vllm/modelexecutor/layers/mamba/mambamixer2.py of the component Completions Request Handler. The manipulation leads to out-of-bounds read. The attack is possible to b...
CVE-2019-9702_Symantec_Encryption_Desktop_LPE_PoC
Preuve de concept d'escalade de privilèges locaux de Symantec Encryption Desktop PGPwded.sys Ce dépôt contient une preuve de concept pour une voie d'escalade de privilèges locaux dans le filtre de stockage PGPwded.sys de Symantec Encryption Desktop, basée sur une primitive de lecture/écriture bru...
CVE-2025-70828
CVE-2025-70828 Résumé Une vulnérabilité de lecture arbitraire de fichier a été découverte dans Datart v1.0.0-rc.3. L'application ne parvient pas à valider correctement l'URL de connexion JDBC lors de la configuration de la source de données. Détails de la vulnérabilité Type de vulnérabilité :...
CVE-2025-5880
Whistle 2.9.98 содержит неисправленную уязвимость обхода пути path traversal, поскольку конечная точка /cgi-bin/sessions/get-temp-file не обеспечивает адекватную очистку пользовательского ввода в параметре filename. Передавая абсолютные пути или последовательности обхода, такие как /etc/passwd,...
CVE-2018-16890
CVE-2018-16890 Un défaut de lecture hors limites a été trouvé dans la façon dont curl gérait les en-têtes NTLMv2 de type 2. Lors de la connexion à un serveur distant malveillant utilisant l'authentification NTLM, ce défaut pourrait faire planter curl. Un script simple pour vérifier votre curl...
CVE-2024-22275
CVE-2024-22275: Lecture partielle de fichiers dans VMware vCenter Server Le serveur vCenter contient une vulnérabilité de lecture partielle de fichiers. Un acteur malveillant disposant de privilèges administratifs sur le shell de l'appliance vCenter peut exploiter ce problème pour lire...
CVE-2020-8277
CVE-2020-8277 À des fins éducatives uniquement. Exécution rapide clone this repository $ git clone https://github.com/masahiro331/CVE-2020-8277 run bind $ docker build -t bind-local ./bind Need TCP fallback $ docker run --rm --name bind -it -p 53:53 -p 53:53/udp bind use " v15.2.1" version If you...
DEBIAN-CVE-2026-104043
A flaw was found in SSSD. A local attacker with access to the Name Service Switch NSS responder UNIX socket can trigger an integer underflow by sending a specially crafted request with an undersized packet header. This issue causes an out-of-bounds memory read during packet parsing, crashing the...
UBUNTU-CVE-2026-104043
A flaw was found in SSSD. A local attacker with access to the Name Service Switch NSS responder UNIX socket can trigger an integer underflow by sending a specially crafted request with an undersized packet header. This issue causes an out-of-bounds memory read during packet parsing, crashing the...
CVE-2026-104043
A flaw was found in SSSD. A local attacker with access to the Name Service Switch NSS responder UNIX socket can trigger an integer underflow by sending a specially crafted request with an undersized packet header. This issue causes an out-of-bounds memory read during packet parsing, crashing the...