CVE-2026-14366

The Silicon Labs SiWx917 WiFi driver's transmit callback siwx91xsend in drivers/wifi/siwx91x/siwx91xwifi.c frees a network packet it does not own. In the Zephyr TX path the netpkt is owned by the L2/networking stack; the driver only borrows it to copy the frame bytes into a local netbuf. Before t...

CVE-2017-3881

CVE-2017-3881 Cisco IOS 원격 코드 실행 =================== 이 저장소는 2017년 3월 17일 Cisco Systems가 공개한 원격 코드 실행 취약점을 악용하기 위한 Proof-Of-Concept 코드를 포함합니다 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170317-cmp 설명 익스플로잇 분석 글은 여기에서 확인할 수 있습니다 -...

CVE-2026-62309

A flaw was found in CoreDNS. A remote attacker can send a specially crafted 28-byte UDP datagram to a CoreDNS server with the proxyproto plugin enabled. This malformed datagram can cause the CoreDNS process to crash, leading to a denial of service DoS. The vulnerability arises from improper...

CVE-2022-38604

Эксплойты для CVE-2022-38604 FilesystemEoPs — это копия этого репозитория с добавлением скомпилированных проектов x64. Здесь вы можете найти мой отчёт об уязвимости произвольного удаления файлов. Здесь вы можете понять, как использовать примитив произвольного удаления файлов для достижения...

CVE-2026-27852

A flaw was found in dovecot. A remote attacker can craft a malicious email with an excessive number of email addresses or MIME parameters in its headers. When a user attempts to read this message over IMAP, the parsing process consumes an inordinate amount of memory, leading to the termination of...

CVE-2026-80692

A flaw was found in the Bluetooth hcisync component of the Linux kernel. This vulnerability, a Use-After-Free UAF, could allow a local attacker to potentially cause a system crash or execute unauthorized code. This occurs if a connection object is released from memory while the hcisync task is...

CVE-2026-80651

A flaw was found in the Linux kernel's crypto: ccp/sev-dev-tsm module. The dsmcreate function fails to properly validate the pdev-bus pointer, leading to a null pointer dereference. A local attacker could exploit this vulnerability to trigger a kernel crash, resulting in a Denial of Service DoS...

CVE-2018-5951

CVE-2018-5951: Уязвимость типа «Отказ в обслуживании» в MikroTik RouterOS Краткое описание уязвимости Уязвимость в MikroTik RouterOS позволяет неаутентифицированному удалённому злоумышленнику принудительно перезагрузить маршрутизатор. Это выполняется отправкой пакета размером 1 байт на IPv6-адрес...

CVE-2026-82810

extension.vn 2FA Authenticator Extension 1.0.0.2 for Chrome contains an information disclosure vulnerability in the Background Service Worker component. The unrestricted chrome.runtime.onMessageExternal.addListener handler allows an attacker with local access and low privileges to manipulate the ...

CVE-2026-82810 extension.vn 2FA Authenticator Extension Background Service Worker chrome.runtime.onMessageExternal.addListener information disclosure

A weakness has been identified in extension.vn 2FA Authenticator Extension 1.0.0.2 on Chrome. The impacted element is the function chrome.runtime.onMessageExternal.addListener of the component Background Service Worker. Executing a manipulation of the argument sender.id can lead to information...

EUVD-2026-68657

A weakness has been identified in extension.vn 2FA Authenticator Extension 1.0.0.2 on Chrome. The impacted element is the function chrome.runtime.onMessageExternal.addListener of the component Background Service Worker. Executing a manipulation of the argument sender.id can lead to information...

CVE-2018-6389

CVE-2018-6389 Эксплойт для Wordpress Эксплойт CVE-2018-6389 может остановить любой сайт Wordpress версии ниже 4.9.3 Уязвимость затрагивает сценарий WordPress load-scripts.php , который принимает параметр load О PoC Простой сценарий на Python с многопоточностью может позволить кому угодно останови...

Updated c-ares packages fix security vulnerabilities

Use-after-free / double-free in c-ares query-completion handling, remotely triggerable via aresgetaddrinfo over TCP. CVE-2026-33630 CPU-exhaustion denial of service via unbounded DNS name compression pointer chains. CVE-2026-69184 Memory-amplification denial of service via unvalidated DNS header...

MGASA-2026-0343 Updated c-ares packages fix security vulnerabilities

Use-after-free / double-free in c-ares query-completion handling, remotely triggerable via aresgetaddrinfo over TCP. CVE-2026-33630 CPU-exhaustion denial of service via unbounded DNS name compression pointer chains. CVE-2026-69184 Memory-amplification denial of service via unvalidated DNS header...

Important: Red Hat Security Advisory: sqlite security update

An update for sqlite is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

Security Bulletin: IBM Integration Designer is vulnerable to multiple CVEs

Summary Vulnerability in the IBM® Runtime Environment Java™ Version 8 used by IBM Integration Designer. IBM Integration Designer has addressed the following CVEs: CVE-2026-47027, CVE-2026-47063, CVE-2026-60147 Vulnerability Details CVEID:CVE-2026-47063 DESCRIPTION: Easily exploitable vulnerabilit...

kernel: dm log: fix out-of-bounds write due to region_count overflow

A flaw was found in the Linux kernel's device-mapper log dm log component. A local attacker could exploit an integer overflow vulnerability where a 64-bit value is truncated to 32 bits, leading to undersized memory allocations. This allows for out-of-bounds writes to kernel memory during log...

kernel: netfilter: ctnetlink: ensure safe access to master conntrack

A flaw was found in the netfilter: ctnetlink component of the Linux kernel. This vulnerability occurs due to insufficient locking when accessing the master conntrack object, allowing it to become invalid while still being referenced. A local attacker could potentially exploit this race condition,...

CVE-2026-26446

A flaw was found in Stomper. An unauthenticated client can trigger a denial of service by closing their TCP connection at specific points while a broker is sending data. This action causes the server process to receive a SIGPIPE signal, leading to its immediate termination and a denial of service...

CVE-2024-47176

CVE-2024-47176 !CAUTION Только для образовательного/оборонительного использования. Используйте только там, где вам разрешено. Используйте на свой страх и риск! Как использовать python3 scanner.py CIDR SCANNER IP Пример python3 scanner.py 192.168.0.0/16 192.168.5.100 Требуемые модули tqdm Установк...