CVE-2026-80640

A flaw was found in the Linux kernel's CXL subsystem firmware control cxl/fwctl. A buffer overflow vulnerability exists in the cxlctlgetsupportedfeatures function due to improper initialization of an array size. This could lead to a system crash, resulting in a denial of service DoS...

CVE-2026-80722

A flaw was found in the Linux kernel's mac80211 Wi-Fi subsystem. A remote attacker sending a specially crafted S1G TWT setup frame could cause the system to process an incomplete parameters block. This incomplete processing can lead to memory corruption or a system crash, resulting in a Denial of...

CVE-2026-80691

A flaw was found in the Linux kernel's SCSI target iblock module. A missing null pointer check in the iblockexecuteprout function, specifically for the ops-prclear callback during PREEMPT and RELEASE operations, allows unimplemented hooks to be called. This can lead to dereferencing a null functi...

CVE-2026-80656

A flaw was found in the Linux kernel's hfsplus filesystem. A local attacker could provide a specially crafted and corrupted HFS+ image. When attempting to mount this image, a malformed btree node size value could lead to the use of an uninitialized value within the kernel. This could result in a...

CVE-2026-80645

A flaw was found in the Linux kernel's rapidio/tsi721 component. This vulnerability arises from incorrect handling of a variable within a specific loop in the tsi721dbdpc function. If a particular item is not found, the system attempts to access invalid memory. This could allow a local attacker t...

nhi-zero-trust-bypass

المشروع: استغلال ثغرات البروتوكولات للتلاعب بأسرار الهويات غير البشرية NHI وتجاوز سياسات الثقة الصفرية لقطات الشاشة فيما يلي لقطات شاشة حقيقية من العرض التوضيحي. للمزيد، راجع screenshots/README.md. 1. استغلال DNS تعطل BIND أ. تم إرسال حزمة الاستغلال يقوم Scapy بإرسال حزمة DNS TSIG غير صالحة إلى...

nodejs: Node.js: Remote memory exhaustion via HTTP/2 retained header blocks

A flaw was found in Node.js's handling of HTTP/2. This vulnerability allows a remote attacker to bypass maxSessionMemory limits by sending specially crafted HTTP/2 retained header blocks. This can lead to memory exhaustion, resulting in a denial of service DoS for the affected system...

nodejs: Node.js: Heap-use-after-free in HTTP/2 handling can lead to denial of service

A heap use-after-free vulnerability in the Node.js HTTP/2 component allows a remote attacker to crash the application, causing a denial of service. This is triggered by an unexpected re-entrant call to nghttp2sessionmemsend while nghttp2sessionmemrecv is still executing...

nodejs: Node.js: Heap-use-after-free in HTTP/2 handling can lead to denial of service

A heap use-after-free vulnerability in the Node.js HTTP/2 component allows a remote attacker to crash the application, causing a denial of service. This is triggered by an unexpected re-entrant call to nghttp2sessionmemsend while nghttp2sessionmemrecv is still executing...

nodejs: Node.js: Remote memory exhaustion via HTTP/2 retained header blocks

A flaw was found in Node.js's handling of HTTP/2. This vulnerability allows a remote attacker to bypass maxSessionMemory limits by sending specially crafted HTTP/2 retained header blocks. This can lead to memory exhaustion, resulting in a denial of service DoS for the affected system...

gst-plugins-good: gst-plugins-good: unbounded memory growth in rtph264depay and rtph265depay RTP depayloaders

A flaw was found in the GStreamer gst-plugins-good package. The rtph264depay and rtph265depay RTP depayloader elements do not enforce a maximum size limit on the reassembly buffer used during fragmented RTP packet processing. A remote, unauthenticated attacker can send a continuous stream of RTP...

libxfont2: Font Server Client encoding[] Out-Of-Bounds Read/Write

A flaw was found in the libXfont2 font-server client. A remote attacker, by operating a malicious font server, could exploit an out-of-bounds read/write vulnerability. This occurs because the client incorrectly handles font data, leading to an out-of-bounds memory access. This can lead to privile...

libxfonts2: libXfont2: Privilege Escalation via Heap Buffer Overflow in Font Server Client

A flaw was found in the libXfont2 font-server client. This heap buffer overflow vulnerability allows a malicious font server to send specially crafted glyph data. The fsreadglyphs function fails to properly validate the total size of the incoming data, leading to an overwrite of memory beyond the...

CVE-2020-5236

Waitress 1.4.2 ReDoS - CVE-2020-5236 La version 1.4.2 de Waitress permet une attaque DOS lorsque Waitress reçoit un en-tête contenant des caractères invalides. Lorsqu'un en-tête comme "Bad-header: xxxxxxxxxxxxxxx\x10" est reçu, cela amène le moteur d'expression régulière à effectuer un...

CVE-2013-5211

CVE-2013-5211 PoC هجوم رفض الخدمة DoS باستخدام أمر monlist في برنامج NTP Daemon ntpd هذا النص البرمجي بلغة بايثون يُستخدم للكشف عن الثغرة CVE-2013-5211، وهي ثغرة موجودة في خوادم NTP بروتوكول وقت الشبكة. باستخدام أمر ntpd monlist، يمكن لهذه الثغرة أن تسمح لمهاجم بإرسال سلسلة من حزم UDP إلى الخادم،...

CVE-2018-9539

CVE-2018-9539 Code de preuve de concept pour CVE-2018-9539 Si vous avez des questions, n'hésitez pas à m'envoyer un message direct sur Twitter @tamirzb. Compilation Pour compiler ce projet : 1. Téléchargez le code source d'Android. 2. Placez ce dépôt dans AOSP/external. 3. Exécutez les commandes...

CVE-2026-45404

A flaw was found in OpenTelemetry-Go. The OpenTracing bridge's bridgeSpan component contains an unsynchronized map, extraBaggageItems, which is not safe for concurrent access. When multiple operations, such as SetBaggageItem and correlation.MapFromContext, attempt to access this map simultaneousl...

CVE-2026-76763

A flaw was found in SmallRye GraphQL. The number scalar coercion for BigInteger does not properly validate the magnitude of float or string inputs. An unauthenticated remote attacker can exploit this by sending a GraphQL query containing a large exponent float literal. This can lead to the...

CVE-2026-80720

A flaw was found in the iomap component of the Linux kernel. The iomapsplitioend function can cause a deadlock when it attempts to split bios that originate from iomapioendbioset and the bioset is exhausted. This can lead to a system hang, resulting in a Denial of Service DoS for affected systems...

CVE-2026-80696

A flaw was found in the Linux kernel's hwmon ltc4282 driver. This vulnerability occurs due to an out-of-bounds read when processing the minimum alarm voltage for the VGPIO channel, caused by a missing return statement. A local attacker could potentially exploit this to cause a denial of service o...