97147 matches found
system_bt_AOSP10_r33_CVE-2021-0431
Fluoride 蓝牙协议栈 在 AOSP 上构建和运行 直接构建 AOSP 即可 - Fluoride 默认包含在其中。 在 Linux 上构建和运行 适用于 Ubuntu 的说明，已在 14.04 + Clang 3.5.0 和 16.10 + Clang 3.8.0 上测试通过 下载源码 mkdir /fluoride cd /fluoride git clone https://android.googlesource.com/platform/system/bt 安装依赖（需要 sudo 权限）： cd /fluoride/bt build/installdeps.sh...
CVE-2026-107300
msgpack5 is a msgpack v5 implementation for node.js and the browser. Prior to 6.1.0, the streaming decoder recursively invokes itself for each complete MessagePack value remaining in a chunk. A remote peer can send one chunk containing many small valid values, causing recursion proportional to th...
AZL-106860 CVE-2026-107298 affecting package msgpack 3.3.0-1
msgpack5 is a msgpack v5 implementation for node.js and the browser. Prior to 6.1.0, the array and map decoding paths have no nesting-depth limit, allowing an attacker who can provide MessagePack input to submit deeply nested containers that exhaust the JavaScript call stack and interrupt a...
CVE-2026-107298
msgpack5 is a msgpack v5 implementation for node.js and the browser. Prior to 6.1.0, the array and map decoding paths have no nesting-depth limit, allowing an attacker who can provide MessagePack input to submit deeply nested containers that exhaust the JavaScript call stack and interrupt a...
PX4-Autopilot
业界构建所依赖的自动驾驶仪堆栈。 关于 PX4 是一款面向无人机和无人载具的开源自动驾驶仪堆栈。它支持多旋翼、固定翼、垂直起降（VTOL）、地面车辆，以及从竞速穿越机到工业勘测飞机等众多实验性平台。它运行于 NuttX、Linux 和 macOS 之上。采用 BSD 3-Clause 许可证。 为什么选择 PX4 模块化架构。 PX4 围绕 uORB 构建，这是一种兼容 DDS 的发布/订阅中间件。各模块完全并行化且线程安全。您可以构建自定义配置，并裁剪掉不需要的部分。 广泛的硬件支持。 PX4 可在多种 自动驾驶仪板卡 上运行，并通过 Pixhawk...
CVE-2026-107300 msgpack5: Many buffered values can exhaust the streaming decoder stack
msgpack5 is a msgpack v5 implementation for node.js and the browser. Prior to 6.1.0, the streaming decoder recursively invokes itself for each complete MessagePack value remaining in a chunk. A remote peer can send one chunk containing many small valid values, causing recursion proportional to th...
CVE-2026-107300
The msgpack5 library, a msgpack v5 implementation for node.js and the browser , is vulnerable to a stack exhaustion issue in versions prior to 6.1.0 . The streaming decoder recursively invokes itself for every complete MessagePack value found within a chunk. A remote peer can exploit this by send...
EUVD-2026-95111
msgpack5 is a msgpack v5 implementation for node.js and the browser. Prior to 6.1.0, the streaming decoder recursively invokes itself for each complete MessagePack value remaining in a chunk. A remote peer can send one chunk containing many small valid values, causing recursion proportional to th...
CVE-2026-107300 msgpack5: Many buffered values can exhaust the streaming decoder stack
msgpack5 is a msgpack v5 implementation for node.js and the browser. Prior to 6.1.0, the streaming decoder recursively invokes itself for each complete MessagePack value remaining in a chunk. A remote peer can send one chunk containing many small valid values, causing recursion proportional to th...
CVE-2026-34308
CVE-2026-34308：MySQL Server（JSON 组件）拒绝服务 官方厂商公告：Oracle 关键补丁更新公告 — 2026 年 4 月。 摘要（摘自已发布的 CVE） Oracle MySQL Server 中的漏洞（组件：Server: JSON）。 受支持的受影响版本：8.0.0–8.0.45 、8.4.0–8.4.8 和 9.0.0–9.6.0 。 该漏洞允许低权限用户使 MySQL Server 崩溃。 CVSS 3.1 基础评分 ：6.5 （仅影响可用性） CVSS 向量 ：CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:...
CVE-2026-107298 msgpack5: Deeply nested input can exhaust the decoder stack
msgpack5 is a msgpack v5 implementation for node.js and the browser. Prior to 6.1.0, the array and map decoding paths have no nesting-depth limit, allowing an attacker who can provide MessagePack input to submit deeply nested containers that exhaust the JavaScript call stack and interrupt a...
CVE-2026-107298
msgpack5 is a msgpack v5 implementation for node.js and the browser. Prior to 6.1.0, the array and map decoding paths have no nesting-depth limit, allowing an attacker who can provide MessagePack input to submit deeply nested containers that exhaust the JavaScript call stack and interrupt a...
CVE-2026-107298 msgpack5: Deeply nested input can exhaust the decoder stack
msgpack5 is a msgpack v5 implementation for node.js and the browser. Prior to 6.1.0, the array and map decoding paths have no nesting-depth limit, allowing an attacker who can provide MessagePack input to submit deeply nested containers that exhaust the JavaScript call stack and interrupt a...
EUVD-2026-95109
msgpack5 is a msgpack v5 implementation for node.js and the browser. Prior to 6.1.0, the array and map decoding paths have no nesting-depth limit, allowing an attacker who can provide MessagePack input to submit deeply nested containers that exhaust the JavaScript call stack and interrupt a...
CVE-2025-5844
CVE-2025-5548：分析与 PoC 📝摘要 本仓库提供了对 CVE-2025-5548 的全面技术分析和可用的 概念验证（PoC） ：这是一个影响 FreeFloat FTP Server v1.0 的堆栈缓冲区溢出漏洞。 研究涵盖了该漏洞的完整生命周期：从搭建漏洞环境到执行利用，再到理解安全缺陷。 📂 项目结构 文档分为两部分： 第 1 部分：环境 易受攻击的软件栈的详细分解。 实验组件的安装步骤。 所选环境及具体版本的技术理由。 第 2 部分：利用 攻击向量的逐步分析。 漏洞利用开发与载荷投递。 详细结果与利用后证据（截图/日志）。 👤作者 Sergi Puig Mendoz...
CVE-2019-25485
🐞 CVE-2019-25485: R 3.4.4 - スタックベースのバッファオーバーフロー（x86 および x64） R 3.4.4 におけるスタックベースのバッファオーバーフロー。x86 では完全なエクスプロイトが可能だが、x64 ではプログラム上の制約によりガジェット分析での RIP 制御に留まる。同一の脆弱性が 2 つのアーキテクチャで異なるエクスプロイト経路を生む。 📑 目次 このリポジトリが存在する理由 この脆弱性が興味深い理由 背景と影響を受けるソフトウェア 脆弱性について クラッシュの誘発 エクスプロイト 🎓 このリポジトリが存在する理由...
CVE-2025-5548
🐞CVE-2025-5548 FreeFloat FTP Server 1.0 のバッファオーバーフロー 🎯 スタックバッファオーバーフローエクスプロイト このリポジトリには、32ビットWindows環境におけるリバースエンジニアリングとメモリレベルの脆弱性（スタックバッファオーバーフロー）のエクスプロイトに焦点を当てたサイバーセキュリティプロジェクトのドキュメントと実践的な開発が含まれています。 📌 プロジェクトの目的 このプロジェクトの目的は、ASLRやDEPなどの最新のセキュリティ対策が欠如していることで知られるFreefloat FTP Server v1.00...
kernel: ipv6: validate extension header length before copying to cmsg
A flaw was found in the Linux kernel's IPv6 networking stack. An unprivileged local user could exploit a vulnerability in how IPv6 extension header lengths are handled. By manipulating these headers using nftables, an attacker can trigger an out-of-bounds read, leading to information disclosure...
kernel: ipv6: fix use-after-free in ip6_finish_output2()
A flaw was found in the Linux kernel's IPv6 networking stack. A use-after-free vulnerability exists in the ip6finishoutput2 function, where a cached pointer to the IPv6 destination address can become stale after memory reallocation. An attacker could potentially exploit this to leak sensitive...
kernel: ipvs: clear IPv4 options after rebasing tunnel ICMP errors
A flaw was found in the Linux kernel's IP Virtual Server IPVS component. When processing Internet Control Message Protocol ICMP errors for tunneled packets, the system can incorrectly use a stale IPv4 option offset. A remote attacker could exploit this by sending a specially crafted ICMP packet,...