libxfont2: Font Server Client encoding[] Out-Of-Bounds Read/Write

A flaw was found in the libXfont2 font-server client. A remote attacker, by operating a malicious font server, could exploit an out-of-bounds read/write vulnerability. This occurs because the client incorrectly handles font data, leading to an out-of-bounds memory access. This can lead to privile...

libxfonts2: libXfont2: Privilege Escalation via Heap Buffer Overflow in Font Server Client

A flaw was found in the libXfont2 font-server client. This heap buffer overflow vulnerability allows a malicious font server to send specially crafted glyph data. The fsreadglyphs function fails to properly validate the total size of the incoming data, leading to an overwrite of memory beyond the...

CVE-2020-5236

Waitress 1.4.2 ReDoS - CVE-2020-5236 Waitress 버전 1.4.2는 잘못된 문자가 포함된 헤더를 수신할 때 DoS 공격을 허용합니다. "Bad-header: xxxxxxxxxxxxxxx\x10"과 같은 헤더를 수신하면 정규 표현식 엔진이 치명적으로 역추적되어 프로세스가 CPU 시간을 100% 사용하게 되고 다른 모든 상호 작용이 차단됩니다. 이로 인해 공격자는 잘못된 헤더가 포함된 단일 요청을 전송하여 서비스를 오프라인으로 만들 수 있습니다. NVD 제공 사용 취약한 서버 실행...

CVE-2013-5211

CVE-2013-5211 PoC 네트워크 시간 프로토콜 데몬 ntpd monlist 명령 활성화 DoS 이 Python 스크립트는 CVE-2013-5211 취약점을 탐지하는 데 사용됩니다. 이 취약점은 NTP네트워크 시간 프로토콜 서버에서 발견되었습니다. ntpd monlist 명령을 사용하여, 이 취약점은 공격자가 서버에 일련의 UDP 패킷을 전송하여 서버의 리소스를 소모할 수 있게 합니다. 스크립트는 사용자가 지정한 NTP 서버에 UDP 패킷을 전송하고 서버의 응답을 기다립니다. 서버가 응답하면 스크립트는 해당 서버에...

CVE-2018-9539

CVE-2018-9539 Код proof-of-concept для CVE-2018-9539 Если у вас есть вопросы, можете написать мне в Twitter @tamirzb. Сборка Чтобы собрать это: 1. Загрузите исходный код Android. 2. Поместите этот репозиторий в AOSP/external. 3. Выполните следующие команды: root@kitploit: cd AOSP source...

CVE-2026-45404

A flaw was found in OpenTelemetry-Go. The OpenTracing bridge's bridgeSpan component contains an unsynchronized map, extraBaggageItems, which is not safe for concurrent access. When multiple operations, such as SetBaggageItem and correlation.MapFromContext, attempt to access this map simultaneousl...

CVE-2026-76763

A flaw was found in SmallRye GraphQL. The number scalar coercion for BigInteger does not properly validate the magnitude of float or string inputs. An unauthenticated remote attacker can exploit this by sending a GraphQL query containing a large exponent float literal. This can lead to the...

CVE-2026-80720

A flaw was found in the iomap component of the Linux kernel. The iomapsplitioend function can cause a deadlock when it attempts to split bios that originate from iomapioendbioset and the bioset is exhausted. This can lead to a system hang, resulting in a Denial of Service DoS for affected systems...

CVE-2026-80696

A flaw was found in the Linux kernel's hwmon ltc4282 driver. This vulnerability occurs due to an out-of-bounds read when processing the minimum alarm voltage for the VGPIO channel, caused by a missing return statement. A local attacker could potentially exploit this to cause a denial of service o...

CVE-2026-80680

A flaw was found in the Linux kernel's i2c: amd-mp2 driver. During the registration of an I2C adapter, the driver may store a memory address pointer that later becomes invalid if the adapter registration fails. This can lead to the driver attempting to access this invalid memory location a "stale...

CVE-2026-80681

A flaw was found in the Linux kernel's vxlan component. A use-after-free vulnerability exists due to improper handling of the Ethernet header pointer after routeshortcircuit is called. When pskbmaypull reallocates the skb-head, the previously cached Ethernet header pointer becomes stale, leading ...

CVE-2026-80665

A flaw was found in the Linux kernel's Kernel-based Virtual Machine KVM component for ARM64 architectures. The kvmhandlevncrabort function incorrectly assumes that a specific translation result always indicates an abort, even when kvmtranslatevncr returns an error for a Guest Frame Number GFN...

CVE-2026-80622

A flaw was found in the Linux kernel's tlclk driver. This vulnerability occurs due to improper module cleanup, where the driver can be unloaded while user-space processes are still active, and memory is freed prematurely. This can lead to a use-after-free condition and race conditions. A local...

CVE-2026-79778

A flaw was found in rclone. In the WebDAV TUS creation handler, a vulnerability allows a malicious or compromised configured endpoint to trigger a denial of service. By resetting connections during TUS uploads, an attacker can cause the application to panic, terminating processes and halting...

CVE-2026-61712

A flaw was found in BuildKit. A remote attacker could provide a malicious base image or build with oversized /etc/passwd and /etc/group files. When BuildKit attempts to resolve usernames or group identifiers from these files, it reads them without an upper bound, leading to excessive memory...

CVE-2023-36802

CVE-2023-36802 CVE-2023-36802 ITW 사례 설명 PreviousMode 덮어쓰기 프리미티브 사용 https://cwresearch.tistory.com/entry/Microsoft-Streaming-Service-Proxy-Elevation-of-Privilege-Vulnerability-CVE-2023-36802 감사합니다 chompie Google Project 0...

CVE-2020-6286

CVE-2020-6286 SAP NetWeaver AS JAVA LM Configuration Wizard Обход каталогов SAP NetWeaver — это интегрированная технологическая платформа SAP и техническая основа всех приложений SAP, начиная с SAP Business Suite. SAP NetWeaver представляет собой сервис-ориентированную платформу для приложений и...

CVE-2026-76763

SmallRye GraphQL contains a flaw in its number scalar coercion for BigInteger , which fails to properly validate the magnitude of float or string inputs. An unauthenticated remote attacker can send a GraphQL query containing a large exponent float literal, triggering the allocation of extremely l...

CVE-2026-76763 Io.smallrye/smallrye-graphql: smallrye graphql: unauthenticated denial of service via large exponent float literals

A flaw was found in SmallRye GraphQL. The number scalar coercion for BigInteger does not properly validate the magnitude of float or string inputs. An unauthenticated remote attacker can exploit this by sending a GraphQL query containing a large exponent float literal. This can lead to the...

EUVD-2026-68525

A flaw was found in SmallRye GraphQL. The number scalar coercion for BigInteger does not properly validate the magnitude of float or string inputs. An unauthenticated remote attacker can exploit this by sending a GraphQL query containing a large exponent float literal. This can lead to the...