Lucene search
+L

214 matches found

Kitploit
Kitploit
added 2026/09/11 2:04 p.m.4 views

PIE-Stack-Clash-CVE-2017-1000253

PIE-Stack-Clash-CVE-2017-1000253 コンテナ内で CVE-2017-1000253 をデモします。 このデモは、CentOS 上でエクスプロイトを実行する Qualys POC コード に依存しています。 脆弱性カーネルのインストール root@kitploit: 1.CentOS 7 をインストール 2.Docker をインストール 3./etc/yum.repos.d/CentOS-Vault.repo ファイルを編集: 1.各エントリのパスを 7.3.1611 を含むように変更:...

7.8CVSS6.9AI score0.10695EPSS
SaveExploits5
Tenable Nessus
Tenable Nessus
added 2026/08/25 12:00 a.m.9 views

TencentOS Server 4: glibc (TSSA-2026:0850)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0850 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

9CVSS6AI score0.00208EPSS
SaveExploits0References3
Wolfi
Wolfi
added 2026/08/19 8:23 p.m.23 views

GHSA-JJ7C-H3WM-VJFW vulnerabilities

Vulnerabilities for packages: busybox...

5.3AI score
SaveExploits0
SUSE CVE
SUSE CVE
added 2026/08/12 12:02 a.m.8 views

SUSE CVE-2026-6791

When expanding paths that begin with a tilde followed by a username, the internal parsetilde function extracts the username to determine the user's home directory. The implementation allocates memory for this username directly on the stack using the strndupa macro. Because the size of this...

6.6CVSS5.4AI score0.00208EPSS
SaveExploits0References3
OSV
OSV
added 2026/08/10 7:17 p.m.9 views

DEBIAN-CVE-2026-6791

When expanding paths that begin with a tilde followed by a username, the internal parsetilde function extracts the username to determine the user's home directory. The implementation allocates memory for this username directly on the stack using the strndupa macro. Because the size of this...

9CVSS5.4AI score0.00208EPSS
SaveExploits0References1
OSV
OSV
added 2026/08/10 7:17 p.m.10 views

AZL-95492 CVE-2026-6791 affecting package glibc 2.38-21

When expanding paths that begin with a tilde followed by a username, the internal parsetilde function extracts the username to determine the user's home directory. The implementation allocates memory for this username directly on the stack using the strndupa macro. Because the size of this...

9CVSS5.9AI score0.00208EPSS
SaveExploits0References1
NVD
NVD
added 2026/08/10 7:17 p.m.11 views

CVE-2026-6791

When expanding paths that begin with a tilde followed by a username, the internal parsetilde function extracts the username to determine the user's home directory. The implementation allocates memory for this username directly on the stack using the strndupa macro. Because the size of this...

9CVSS0.00208EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2026/08/10 7:17 p.m.10 views

CVE-2026-6791

When expanding paths that begin with a tilde followed by a username, the internal parsetilde function extracts the username to determine the user's home directory. The implementation allocates memory for this username directly on the stack using the strndupa macro. Because the size of this...

9CVSS5.4AI score0.00208EPSS
SaveExploits0References4
OSV
OSV
added 2026/08/10 7:17 p.m.6 views

UBUNTU-CVE-2026-6791

When expanding paths that begin with a tilde followed by a username, the internal parsetilde function extracts the username to determine the user's home directory. The implementation allocates memory for this username directly on the stack using the strndupa macro. Because the size of this...

9CVSS5.4AI score0.00208EPSS
SaveExploits0References5
EUVD
EUVD
added 2026/08/10 6:41 p.m.13 views

EUVD-2026-55729

When expanding paths that begin with a tilde followed by a username, the internal parsetilde function extracts the username to determine the user's home directory. The implementation allocates memory for this username directly on the stack using the strndupa macro. Because the size of this...

9CVSS5.4AI score0.00208EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/10 6:41 p.m.207 views

CVE-2026-6791

CVE-2026-6791 concerns tilde expansion in wordexp within glibc. When expanding paths starting with ~username, parse_tilde extracts the username and allocates memory for it on the stack via strndupa. No bounds checks on the username length can exhaust stack space, enabling a stack-clash condition ...

9CVSS5.4AI score0.00208EPSS
SaveExploits0References1
Debian CVE
Debian CVE
added 2026/08/10 6:41 p.m.13 views

CVE-2026-6791

When expanding paths that begin with a tilde followed by a username, the internal parsetilde function extracts the username to determine the user's home directory. The implementation allocates memory for this username directly on the stack using the strndupa macro. Because the size of this...

9CVSS5.4AI score0.00208EPSS
SaveExploits0
OSV
OSV
added 2026/08/10 6:41 p.m.22 views

CVE-2026-6791 Potential stack-based buffer clash during tilde expansion in wordexp

When expanding paths that begin with a tilde followed by a username, the internal parsetilde function extracts the username to determine the user's home directory. The implementation allocates memory for this username directly on the stack using the strndupa macro. Because the size of this...

9CVSS5.5AI score
SaveExploits0References5
ATTACKERKB
ATTACKERKB
added 2026/08/10 6:41 p.m.12 views

CVE-2026-6791

When expanding paths that begin with a tilde followed by a username, the internal parsetilde function extracts the username to determine the user's home directory. The implementation allocates memory for this username directly on the stack using the strndupa macro. Because the size of this...

9CVSS5.3AI score0.00208EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2026/08/10 6:41 p.m.8 views

CVE-2026-6791 Potential stack-based buffer clash during tilde expansion in wordexp

When expanding paths that begin with a tilde followed by a username, the internal parsetilde function extracts the username to determine the user's home directory. The implementation allocates memory for this username directly on the stack using the strndupa macro. Because the size of this...

9CVSS5.3AI score0.00208EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/07/06 12:00 a.m.17 views

PT-2026-69895

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description An issue exists in the wordexp function when expanding paths that start with a tilde followed by a username. The internal parse tilde function allocates memory f...

9.1CVSS5.3AI score0.00208EPSS
SaveExploits0References31
EUVD
EUVD
added 2025/10/03 8:07 p.m.10 views

EUVD-2022-25838

Malicious code in bioql PyPI...

6.7CVSS6.7AI score0.00173EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/03 8:07 p.m.13 views

EUVD-2022-25839

Malicious code in bioql PyPI...

6.7CVSS6.6AI score0.00173EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/03 8:07 p.m.11 views

EUVD-2022-45586

Malicious code in bioql PyPI...

6.7CVSS6.7AI score0.00172EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 1:09 a.m.15 views

CVE-2022-42519

In CdmaBroadcastSmsConfigsRequestData::encode of cdmasmsdata.cpp, there is a possible stack clash leading to memory corruption. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Andro...

6.7CVSS7.1AI score0.00172EPSS
SaveExploits0References1
Rows per page
Query Builder