5964 matches found
DEBIAN-CVE-2026-98482
In the Linux kernel, the following vulnerability has been resolved: nfc: llcp: drop truncated I/RR/RNR PDUs in nfcllcprecvhdlc nfcllcprecvhdlc reads the sequence byte skb-data2, via nfcllcpns/nfcllcpnr, before any length check. The receive path only guarantees the two-byte LLCP header --...
CVE-2026-98584
In the Linux kernel, the following vulnerability has been resolved: net/sched: fix potential stack infoleak in emtextdump emtextdump allocates struct tcfemtext on the stack without zeroing it. strscpy writes the algorithm name and a NUL terminator into conf.algo, leaving the remaining bytes...
EUVD-2026-103845
In the Linux kernel, the following vulnerability has been resolved: usb: typec: tipd: fix uninitialized typecpartnerdesc in tps6598xconnect tps6598xconnect passes a stack-allocated typecpartnerdesc to typecregisterpartner after initializing only usbpd, accessory and identity. typecregisterpartner...
CVE-2026-98584 net/sched: fix potential stack infoleak in em_text_dump()
In the Linux kernel, the following vulnerability has been resolved: net/sched: fix potential stack infoleak in emtextdump emtextdump allocates struct tcfemtext on the stack without zeroing it. strscpy writes the algorithm name and a NUL terminator into conf.algo, leaving the remaining bytes...
EUVD-2026-103629
In the Linux kernel, the following vulnerability has been resolved: net/sched: fix potential stack infoleak in emtextdump emtextdump allocates struct tcfemtext on the stack without zeroing it. strscpy writes the algorithm name and a NUL terminator into conf.algo, leaving the remaining bytes...
cve-2019-6207
CVE-2019-6207 $ clang exploit.c -o exploit $ ./exploit CVE-2019-6207 exploit to leak 4 bytes of arbitrary kernel memory Tested on MacOS 10.14.1, should works on: MacOS wop != NETRTDUMP2 int size = rtmsg2RTMGET, &info, NULL, w, credp; if w-wreq != NULL && w-wtmem != NULL struct rtmsghdr rtm = stru...
CVE-2026-100802
A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Uninitialized memory in the Graphics: WebGPU component Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security...
CVE-2026-100799
A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Uninitialized memory in the Graphics: WebGPU component Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security...
CVE-2026-100783
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Uninitialized memory in the Audio/Video component Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product...
CVE-2026-100759
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Uninitialized memory in the Storage: Quota Manager component Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red H...
CVE-2020-1206-POC
CVE-2020-1206 Uninitialized Kernel Memory Read POC c 2020 ZecOps, Inc. - https://www.zecops.com - Find Attackers' Mistakes POC to check for CVE-2020-1206 / "SMBleed" Expected outcome: Local file containing target computer kernel memory. Intended only for educational and testing in corporate...
CVE-2026-90272
A flaw was found in the Linux kernel's perf: armpmuv3 component. The hwid branch stack field, which is passed to userspace, was not properly initialized by the Branch Record Buffer Extension BRBE driver. This could lead to the disclosure of uninitialized memory to userspace, potentially allowing ...
Astra Linux β Vulnerability in Firefox and Thunderbird
When resolving a symbolic link such as file:///proc/self/fd/1, an error message may be generated if the symbolic link resolves to a string containing uninitialized memory in the buffer. This bug only affects Thunderbird on Unix-based operating systems Android, Linux, MacOS. Windows is unaffected...
Astra Linux β Vulnerabilities in Linux 5.10, Linux 5.15
This vulnerability allows local attackers to disclose sensitive information on affected installations of the Linux Kernel 6.0-rc2. An attacker must first gain the ability to execute high-privileged code on the target system in order to exploit this vulnerability. The specific flaw resides within...
openssl: openssl: Information Disclosure from Uninitialized Memory via Invalid RSA Public Key
A flaw was found in openssl. Applications that use RSASVE key encapsulation, a method for securely exchanging encryption keys, may inadvertently expose sensitive data. This vulnerability arises when an application processes a malicious, invalid RSA public key provided by an attacker without prope...
SUSE CVE-2026-98387
In the Linux kernel, the following vulnerability has been resolved: s390/crypto: Fix skcipherwalk return code handling in aess390 The return codes from skcipherwalkvirt were not properly checked before entering the processing loops in ecbaescrypt and ctraescrypt. If skcipherwalkvirt fails, the wa...
MongoDeepDive
π MongoDeepDive Context-Aware MongoDB Wire Protocol Exploit CVE-2025-14847 Advanced Heuristics Analyzer for Red Team Operations π Overview MongoDeepDive is a high-performance, asynchronous vulnerability scanner and forensic analyzer designed to detect uninitialized memory leaks in MongoDB servers...
EUVD-2026-66458
In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Pad trailing CCA or EP11 message with zeros The both functions xcrbmsgtotype6cprbmsgx and xcrbmsgtotype6ep11cprbmsgx copy the user space message into a kernel buffer based on the message length. But on further...
CVE-2025-5777
CVE-2025-5777 Citrix NetScaler Memory Leak Exploit !WARNING This script is intended for educational and research purposes only. Do not use it against systems without explicit permission. Unauthorized access or testing is illegal and unethical. Read the full DISCLAIMER before using this script...
CVE-2026-109712
Sandbox escape due to uninitialized memory in the Graphics component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...