177894 matches found
bind9: bind: BIND 9: Denial of Service via crafted DNSSEC responses
A flaw was found in BIND 9. A remote attacker can cause a named resolver to stop functioning Denial of Service by inducing the victim resolver to send multiple queries for a DNSSEC-signed zone. If the attacker's authoritative server responds with a specific sequence of crafted answers that arrive...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
PHP2Shell — WordPress Pre-Auth RCE CVE-2026-109618 / CVE-2026...
xorg-x11-server: xorg-x11-server: Arbitrary code execution via use-after-free in passive grab handling
A flaw was found in xorg-x11-server. A local user can exploit a use-after-free condition—where the software attempts to access memory after it has been freed—by establishing a passive input grab and removing an input device. When subsequent input events are processed, the server dereferences the...
Important: Red Hat Security Advisory: xorg-x11-server security update
An update for xorg-x11-server is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerabilit...
CVE-2025-21756
CVE-2025-21756 — Exploitation Lab For educational and authorized security research purposes only. Description CVE-2025-21756 is a use-after-free UAF vulnerability in the Linux kernel's vsock Virtual Socket subsystem, disclosed on February 26, 2025. It allows a local attacker to escalate privilege...
Important: Red Hat Security Advisory: openssh security update
An update for openssh is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
openssh: OpenSSH: Use-after-free vulnerability during host key re-exchange on the client side
A flaw was found in OpenSSH. A remote attacker could exploit a use-after-free vulnerability on the client side when a server changes its host key during a key re-exchange. This could lead to high impact on confidentiality and integrity, and low impact on availability...
libxml2: double-free/UAF in libxml2 Python bindings
A flaw was found in libxml2 with Python bindings enabled. A remote attacker could exploit this vulnerability by providing a specially crafted XML document containing a Document Type Definition DTD with enumerated attribute values. This triggers a double-free error in the SAX attributeDecl callbac...
libxml2: mingw-libxml2: libxml2: Denial of Service via crafted XML input due to use-after-free
A flaw was found in libxml2. A remote attacker can exploit a use-after-free vulnerability in the xmlParseInternalSubset function by providing maliciously crafted XML input. This improper handling of entity resolution can lead to a denial-of-service DoS, making the affected system or application...
Important: Red Hat Security Advisory: libxml2 security update
An update for libxml2 is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
🛡️ PHP2Shell Vulnerability Scanner & Hardening Toolkit Aud...
CLSA-2026-1792982524 Fix of 203 CVEs
CVE-2026-46267 - nfc: hci: shdlc: Stop timers and work before freeing context CVE-2026-46267 CVE-2026-53004 - sctp: fix OOB write to userspace in sctpgetsockoptpeerauthchunks CVE-2026-53004 CVE-2026-98716 - KVM: SVM: Use the active VMCB's MSR bitmap when checking if MSR is intercepted...
CVE-2026-74690
A flaw was found in the Linux kernel's s390/ism component. An interrupt handler could concurrently access data structures sba and ieq that have already been freed during the ismdevexit process. This Use-After-Free UAF vulnerability could lead to system instability or potentially allow for privile...
libreswan: IKEv2 Use-After-Free bug when using IKE-over-TCP
A use-after-free flaw was found in Libreswan's IKE-over-TCP handling. When a TCP connection closes and additional packet processing occurs for the same connection tuple, the IKE daemon may access a previously freed interface endpoint object. A remote, unauthenticated attacker may exploit this fla...
Important: Red Hat Security Advisory: libreswan security update
An update for libreswan is now available for Red Hat Enterprise Linux 9.8 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available f...
EVlink City < R8 V3.4.0.1 - Authentication Bypass
A CWE-798: Use of Hard-coded Credentials vulnerability exists in EVlink City EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1, EVlink Parking EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0.1, and EVlink Smart Wallbox EVB1A all versions prior to R8 V3.4.0.1 that could allow an attacker t...
CLSA-2026-1792980237 Fix of 276 CVEs
CVE-2022-49416 - wifi: mac80211: fix use-after-free in chanctx code CVE-2022-49416 CVE-2022-49685 - iio: trigger: sysfs: fix use-after-free on remove CVE-2022-49685 CVE-2021-47670 - can: peakusb: fix use after free bugs CVE-2021-47670 CVE-2026-98706 - wifi: mac80211: drain PS delivery work during...
CLSA-2026-1792979087 kernel: Fix of 118 CVEs
Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count CVE-2026-64276 - media: av7110: prevent underflow in writetstodecoder CVE-2023-54284 - usb: usbtmc: check URB actuallength for interrupt-IN notifications CVE-2026-63904 - usb: usbfs: fix use-after-free of usbdevice in...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
PHP session.uploadprogress Heap Use-After-Free - Pre-Auth RCE v...
CLSA-2026-1792977831 kernel: Fix of 118 CVEs
Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count CVE-2026-64276 - media: av7110: prevent underflow in writetstodecoder CVE-2023-54284 - usb: usbtmc: check URB actuallength for interrupt-IN notifications CVE-2026-63904 - usb: usbfs: fix use-after-free of usbdevice in...