Exploit for Path Traversal in Apache Http_Server

masscve-2021-41773 MASS CVE-2021-41773 Screenshot...

DEBIAN-CVE-2024-56830

The Net::EasyTCP package 0.15 through 0.26 for Perl uses Perl's builtin rand if no strong randomization module is present...

PT-2025-37328

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The Linux kernel contains an issue where normal memcpy is used to write to IRAM on ARM/Tegra platforms. This causes Kasan Kernel Address Sanitizer to crash the kernel when attempting t...

PT-2025-49261

Name of the Vulnerable Software and Affected Versions urllib3 versions 1.0 through 2.5.16 Description urllib3 is a Python HTTP client library. Versions prior to 2.6.0 have an issue in the Streaming API where it improperly handles highly compressed data. The decompression logic can cause excessive...

PT-2026-4944

Name of the Vulnerable Software and Affected Versions libpng versions 1.6.43 through 1.6.46 Description A buffer overflow issue exists in libpng versions 1.6.43 through 1.6.46. A local attacker can potentially cause a denial of service by exploiting the vulnerability through a specially crafted...

PT-2026-2863

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel related to the scs magic function within the shadow call stack SCS implementation. The function requires a 'void ' variable but receives a 'struct task...

PT-2025-36295

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contained an issue in the ACPI pfr update functionality. The driver update version check used the runtime version number instead of the security-version-number, causing...

PT-2025-42744

Name of the Vulnerable Software and Affected Versions golang versions 1.15 golang versions 1.19 Description The Reader.ReadResponse function in the net/textproto package experiences excessive CPU consumption. Recommendations Update to a newer version of golang that contains a fix for this...

PT-2026-3558

Name of the Vulnerable Software and Affected Versions GNU C Library versions 2.0 through 2.42 Description Using the wordexp function with WRDE REUSE and WRDE APPEND together in the GNU C Library can lead to the function returning uninitialized memory in the we wordv member. Subsequent calls to...

PT-2026-2899

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A missing NULL pointer check exists in the drm/msm/dpu module, specifically related to the pingpong interface. The check is generally present in dpu encoder phys wb setup ctl, but is...

PT-2025-2361 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: A CVE record has been rejected due to non-usage compliance with CNA rules. The reason for rejection is that the CVE record has not been used...

PT-2026-7116

Name of the Vulnerable Software and Affected Versions GnuTLS affected versions not specified Description A flaw exists in GnuTLS that can lead to a denial of service DoS. This occurs due to excessive CPU and memory consumption when processing maliciously crafted certificates. These certificates...

PT-2025-11967 · Suricata +1 · Suricata +1

Name of the Vulnerable Software and Affected Versions: Suricata versions affected versions not specified Description: The issue is related to high memory usage caused by the hashsize setting via rules in Suricata. Recommendations: At the moment, there is no information about a newer version that...

PT-2025-37969

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A user-after-free vulnerability exists in the Linux kernel related to HID Human Interface Device processing, specifically within the handling of ASUS ROG N-Key keyboards. A maliciously...

PT-2025-25565

Name of the Vulnerable Software and Affected Versions Apache Commons FileUpload versions 1.0 through 1.5 Apache Commons FileUpload versions 2.0.0-M1 through 2.0.0-M3 Description The issue is related to the allocation of resources for multipart headers with insufficient limits, which enables a...

GHSA-GV7F-5QQH-VXFX xous has unsound usages of `core::slice::from_raw_parts`

We consider asslice and asslicemut unsound because: the pointer with any bit patterns could be cast to the slice of arbitrary types. The pointer could be created by unsafe new and deprecated fromparts. We consider that fromparts should be removed in latest version because it will help trigger...

xous has unsound usages of `core::slice::from_raw_parts`

We consider asslice and asslicemut unsound because: the pointer with any bit patterns could be cast to the slice of arbitrary types. The pointer could be created by unsafe new and deprecated fromparts. We consider that fromparts should be removed in latest version because it will help trigger...

SUSE CVE-2024-56745

In the Linux kernel, the following vulnerability has been resolved: PCI: Fix resetmethodstore memory leak In resetmethodstore, a string is allocated via kstrndup and assigned to the local "options". options is then used in with strsep to find spaces: while name = strsep&options, " " != NULL If...

DEBIAN-CVE-2024-56745

In the Linux kernel, the following vulnerability has been resolved: PCI: Fix resetmethodstore memory leak In resetmethodstore, a string is allocated via kstrndup and assigned to the local "options". options is then used in with strsep to find spaces: while name = strsep&options, " " != NULL If...

UBUNTU-CVE-2024-56743

In the Linux kernel, the following vulnerability has been resolved: nfscommon: must not hold RCU while calling nfsdfileputlocal Move holding the RCU from nfstonfsdfileputlocal to nfstonfsdnetput. It is the call to nfsto-nfsdservput that requires the RCU anyway the puts for nfsdfile and netns were...