CVE-2026-93312 Freedesktop Poppler JBIG2Stream.cc rewind null pointer dereference

A flaw has been found in Freedesktop Poppler 26.07.0. Impacted is the function JBIG2Stream::rewind of the file poppler/JBIG2Stream.cc. This manipulation causes null pointer dereference. It is possible to initiate the attack remotely. The exploit has been published and may be used. Upgrading to...

CVE-2026-93312 Freedesktop Poppler JBIG2Stream.cc rewind null pointer dereference

A flaw has been found in Freedesktop Poppler 26.07.0. Impacted is the function JBIG2Stream::rewind of the file poppler/JBIG2Stream.cc. This manipulation causes null pointer dereference. It is possible to initiate the attack remotely. The exploit has been published and may be used. Upgrading to...

CVE-2026-93312

Freedesktop Poppler version 26.07.0 contains a null pointer dereference in the function JBIG2Stream::rewind (file poppler/JBIG2Stream.cc), triggered when processing a crafted JBIG2 stream. The vulnerability is exploitable remotely with user interaction required (e.g., opening a malicious PDF). Im...

EUVD-2026-82613

A flaw has been found in Freedesktop Poppler 26.07.0. Impacted is the function JBIG2Stream::rewind of the file poppler/JBIG2Stream.cc. This manipulation causes null pointer dereference. It is possible to initiate the attack remotely. The exploit has been published and may be used. Upgrading to...

training-security-awareness

Free Security Awareness Training for Employees — Open Source Interactive SCORM Library 130+ free, open-source security awareness training exercises for employees — hands-on, interactive SCORM modules covering phishing awareness training, phishing simulation, GDPR training, EU AI Act compliance, A...

EUVD-2026-82609

A vulnerability was determined in O-RAN-SC SMO OAM 2025-06-10. Affected by this issue is some unknown functionality of the component VES Collector. Executing a manipulation can lead to allocation of resources. The attack may be launched remotely. The exploit has been publicly disclosed and may be...

EUVD-2026-82601

A vulnerability was found in O-RAN-SC SMO OAM 2025-06-10. Affected by this vulnerability is an unknown functionality of the component VES Collector. Performing a manipulation results in allocation of resources. The attack may be initiated remotely. The exploit has been made public and could be...

EUVD-2026-82591

Improper neutralization of special elements in output used by a downstream component 'injection' in Azure Cosmos DB allows an authorized attacker to elevate privileges over a network...

EUVD-2026-82568

A vulnerability has been found in O-RAN-SC SMO OAM 2025-06-10. Affected is an unknown function of the component VES Collector. Such manipulation of the argument additionalFields.padding leads to uncontrolled memory allocation. The attack can be launched remotely. The exploit has been disclosed to...

CVE-2026-93311

Freedesktop Poppler 26.07.0 contains an integer overflow in the SampledFunction::SampledFunction constructor (poppler/Function.cc), triggered by manipulation of the BitsPerSample argument. The vulnerability is reachable remotely over the network with low complexity and no required privileges, but...

CVE-2026-93311

A vulnerability was detected in Freedesktop Poppler 26.07.0. This issue affects the function SampledFunction::SampledFunction of the file poppler/Function.cc of the component SampledFunction. The manipulation of the argument BitsPerSample results in integer overflow. The attack may be performed...

CVE-2026-93311 Freedesktop Poppler SampledFunction Function.cc integer overflow

A vulnerability was detected in Freedesktop Poppler 26.07.0. This issue affects the function SampledFunction::SampledFunction of the file poppler/Function.cc of the component SampledFunction. The manipulation of the argument BitsPerSample results in integer overflow. The attack may be performed...

EUVD-2026-82612

A vulnerability was detected in Freedesktop Poppler 26.07.0. This issue affects the function SampledFunction::SampledFunction of the file poppler/Function.cc of the component SampledFunction. The manipulation of the argument BitsPerSample results in integer overflow. The attack may be performed...

bleach

Bleach 注記: 2026-06-05: Bleach はメンテナンスされなくなりました。今後、セキュリティ問題を含むリリースは行われません。 詳細は issue: を参照してください。 Bleach は、許可リストベースの HTML サニタイジングライブラリであり、マークアップや属性をエスケープまたは除去します。 Bleach はまた、テキストを安全にリンク化（linkify）することができ、Django の urlize フィルターではできないフィルタリングを適用し、テキスト内の既存のリンクに対してもオプションで rel 属性を設定できます。 Bleach は、 信頼できない...

CVE-2026-93309

A vulnerability was determined in O-RAN-SC SMO OAM 2025-06-10. Affected by this issue is some unknown functionality of the component VES Collector. Executing a manipulation can lead to allocation of resources. The attack may be launched remotely. The exploit has been publicly disclosed and may be...

CVE-2026-93308

A vulnerability was found in O-RAN-SC SMO OAM 2025-06-10. Affected by this vulnerability is an unknown functionality of the component VES Collector. Performing a manipulation results in allocation of resources. The attack may be initiated remotely. The exploit has been made public and could be...

CVE-2024-6387

CVE-2024-6387.py - PoC 重要な注意事項！！！ このエクスプロイトは32ビットのOpenSSHサーバーでのみ動作します 。これは、PoCが32ビットポインターを使用するためです。 また、一部のバージョンは既にパッチが適用されており、すべてのサーバーが脆弱であるとは限らないことが知られています。 テスト済み: Kali Linux, ParrotSec, Ubuntu 22.04 📜 説明 OpenSSHサーバーにおけるリモート認証不要のコード実行脆弱性...

CVE-2021-32537

CVE-2021-32537: RTKVHD64 における範囲外アクセスによるプール破損 これは2021年4月初めに Realtek に報告したバグです。影響を受けるドライバは RTKVHD64.sys で、多くの一般的なハードウェアで利用可能と思われます（以下のハードウェア構成でテスト済みですが、おそらくさらに多くの脆弱な機器が存在します）。 Microsoft Surface Laptop、 Microsoft Surface Book、 Microsoft Surface Pro、 Lenovo Thinkpad、 Dell XPS 13。 Realtek...

CVE-2026-93310

CVE-2026-93310 affects the VES Collector component of O-RAN-SC SMO OAM (version 2025-06-10), where an unknown part of the component is susceptible to manipulation leading to allocation of resources (a resource exhaustion/DoS condition). The vulnerability is remotely exploitable with no authentica...

EUVD-2026-82610

A vulnerability was identified in O-RAN-SC SMO OAM 2025-06-10. This affects an unknown part of the component VES Collector. The manipulation leads to allocation of resources. Remote exploitation of the attack is possible. The exploit is publicly available and might be used. The project was inform...