CVE-2025-5777

CVE-2025-5777 Exploit de fuga de memoria en Citrix NetScaler !WARNING Este script está destinado únicamente a fines educativos y de investigación. No lo utilice contra sistemas sin permiso explícito. El acceso o las pruebas no autorizadas son ilegales y poco éticos. Lea el Descargo de...

CVE-2026-97554

A flaw was found in the Linux kernel's Server Message Block SMB client. When handling malformed directory entries with invalid security identifiers, the client fails to verify whether data parsing succeeded before processing file attributes. A malicious or compromised server could exploit this...

CVE-2026-98031

A flaw was found in the Linux kernel. When removing a nexthop routing group entry, an error path fails to properly initialize an error-reporting pointer, causing the kernel to dereference uninitialized stack memory. A local user with network administration privileges could exploit this flaw durin...

CVE-2026-98001

A flaw was found in the Linux kernel's LTC4282 hardware monitoring driver. This vulnerability can lead to a Denial of Service DoS due to the use of uninitialized stack memory. The driver fails to initialize its clock data structure during setup, leaving member fields uninitialized. A local attack...

CVE-2026-93263

A flaw was found in the Linux kernel's ESWIN clock driver. Due to uninitialized stack memory during clock registration, leftover data can cause the clock framework to dereference an invalid pointer. This issue can trigger a kernel crash during device initialization, resulting in a Denial of Servi...

CVE-2026-97554

In the Linux kernel, the following vulnerability has been resolved: smb: client: avoid using uninitialized SIDs in cifsposixtofattr cifsposixtofattr ignores the return value of posixinfoparse. When a malformed POSIX directory entry is encountered e.g. invalid SID lengths from an untrusted server,...

CVE-2026-93801

In the Linux kernel, the following vulnerability has been resolved: smb/client: zero-initialize stack-allocated cifsopeninfodata Stack-allocated cifsopeninfodata may contain random data. This can make some fields have wrong value if they are not set later...

CVE-2026-94056

A flaw was found in Exim. When the Proxy-Protocol is used with an attacker-controlled proxy, an attacker can read certain uninitialized data from stack memory. This information disclosure could potentially expose sensitive data. Mitigation To prevent information disclosure, ensure that Exim is no...

SUSE CVE-2026-94056

Exim before 4.100.1, when Proxy-Protocol is used with an attacker-controlled proxy, allows attackers to read certain uninitialized data from stack memory...

EUVD-2026-83614

Exim before 4.100.1, when Proxy-Protocol is used with an attacker-controlled proxy, allows attackers to read certain uninitialized data from stack memory...

Linux Distros Unpatched Vulnerability : CVE-2026-94056

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Exim before 4.100.1, when Proxy-Protocol is used with an attacker-controlled proxy, allows attackers to read certain uninitialized data from stack memory...

CVE-2026-94056

Exim before 4.100.1, when Proxy-Protocol is used with an attacker-controlled proxy, allows attackers to read certain uninitialized data from stack memory...

CVE-2026-94056

Exim before 4.100.1, when Proxy-Protocol is used with an attacker-controlled proxy, allows attackers to read certain uninitialized data from stack memory...

CVE-2026-94056

Exim before 4.100.1, when Proxy-Protocol is used with an attacker-controlled proxy, allows attackers to read certain uninitialized data from stack memory...

CVE-2026-94056

Exim before 4.100.1, when Proxy-Protocol is used with an attacker-controlled proxy, allows attackers to read certain uninitialized data from stack memory...

CVE-2026-94056

Exim before 4.100.1 is vulnerable to an information disclosure issue when Proxy-Protocol is used with an attacker-controlled proxy. The root cause is the reading of certain uninitialized data from stack memory , allowing a remote attacker to leak sensitive information. The CVSS 3.1 score is 7.5 (...

CVE-2026-94056

Exim before 4.100.1, when Proxy-Protocol is used with an attacker-controlled proxy, allows attackers to read certain uninitialized data from stack memory...

CVE-2026-94056

Exim before 4.100.1, when Proxy-Protocol is used with an attacker-controlled proxy, allows attackers to read certain uninitialized data from stack memory...

CVE-2026-94056: Use of Uninitialized Resource

Exim before 4.100.1, when Proxy-Protocol is used with an attacker-controlled proxy, allows attackers to read certain uninitialized data from stack memory...

CVE-2026-89858

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Bound image count in qla2x00updatefruversions qla2x00updatefruversions copies the user-supplied BSG request into a fixed 256-byte stack buffer bsgDMAPOOLSIZE and then iterates list-count times over the...