186017 matches found
Exploit for Use After Free in Linux Linux_Kernel
Galaxy Tab S10 FE — ADB root CVE-2026-43499 / GhostLock + Ker...
Use of Uninitialized Resource
Overview vllm is an A high-throughput and memory-efficient inference and serving engine for LLMs Affected versions of this package are vulnerable to Use of Uninitialized Resource via LogprobsTensors.emptycpu in vllm/v1/outputs.py, which allocates an uninitialized int32 tensor using torch.empty...
Security Bulletin: Multiple vulnerabilities addressed in IBM SevOne Network Performance Management for October 2026
Summary IBM SevOne Network Performance Management has addressed PHP Remote Code Execution security vulnerabilities in the NMS component with a Service Pack update. Vulnerability Details CVEID:CVE-2026-109618 DESCRIPTION: PHP uses longjmp for out-of-memory OOM errors to exit the current context an...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
php2shell Next-generation exploit orchestrator for CVE-2026-1...
Exploit for Use After Free in Linux Linux_Kernel
A12 GhostLock — one-click root for the Samsung Galaxy A12 !C...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
php2shell — CVE-2026-109618 / CVE-2026-109619 Peringatan...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
php2shell detector Fingerprint, probe, verdict: PHP sessio...
php2shell-scan
php2shell-scan Go A deliberately limited, read-only sec...
Updated iperf package fixes security vulnerabilities
Iperf3 server accepts unbounded peer-controlled json parameters enabling remote denial of service via resource exhaustion. CVE-2026-71217 Unbounded peer-controlled allocation in iperf3 jsonread allows unauthenticated remote memory exhaustion. CVE-2026-71218 Iperf3 3.21 esnet/iperf contains a...
Amazon Linux 2023 : libreswan (ALAS2023-2026-3253)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3253 advisory. A null pointer dereference flaw was found in Libreswan's PKCS7 certificate payload handling. When processing a crafted IKEv2 IKEAUTH packet containing a PKCS7 bundle with a certificate...
Amazon Linux 2023 : curl, curl-minimal, libcurl (ALAS2023-2026-3267)
It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3267 advisory. During an upload, curl mishandles HTTP/2 RSTSTREAM received from the server with reason HTTP11REQUIRED or REFUSEDSTREAM leading to a use after free of a struct Curleasy object. CVE-2026-92392 Tenable h...
Amazon Linux 2023 : tigervnc, tigervnc-icons, tigervnc-license (ALAS2023-2026-3262)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3262 advisory. CheckSetDoodad in xkb/xkb.c frees doodad-text.text on error but doesnot NULL the pointer. When the error path continues, XkbClearDoodad iscalled during cleanup and frees the same pointer again...
Microsoft Windows 10 20H2 HTTP.sys Use-After-Free
Microsoft Windows 10 versions 2004 and 20H2 and Windows Server versions 2004 and 20H2 contain an HTTP.sys use-after-free vulnerability. The supplied proof of concept sends a malformed Accept-Encoding header to trigger a crash on an unpatched listener. https://packetstorm.news/download/237474...
Node.js HTTP/2 Reentrant Send Use-After-Free Checker
Node.js contains an HTTP/2 reentrant send heap use-after-free vulnerability. This offline proof of concept checker assesses operator-supplied Node.js version evidence for potentially affected 22.x, 24.x, and 26.x releases...
Amazon Linux 2023 : xorg-x11-server-Xwayland, xorg-x11-server-Xwayland-devel (ALAS2023-2026-3261)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3261 advisory. CheckSetDoodad in xkb/xkb.c frees doodad-text.text on error but doesnot NULL the pointer. When the error path continues, XkbClearDoodad iscalled during cleanup and frees the same pointer again...
MiracleLinux 9 : kernel-5.14.0-687.59.1.el9_8 (AXSA:2026-2149:105)
The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-2149:105 advisory. kernel: openvswitch: defer tunnel netdevput to RCU release CVE-2026-31678 kernel: xfrm: espintcp: do not reuse an in-progress partial send...
Amazon Linux 2023 : firefox (ALAS2023-2026-3281)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3281 advisory. Information disclosure in the Networking: JAR component. This vulnerability was fixed in Firefox ESR 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17. CVE-2026-100766 Sandbox...
Amazon Linux 2023 : xorg-x11-server-common, xorg-x11-server-devel, xorg-x11-server-source (ALAS2023-2026-3260)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3260 advisory. CheckSetDoodad in xkb/xkb.c frees doodad-text.text on error but doesnot NULL the pointer. When the error path continues, XkbClearDoodad iscalled during cleanup and frees the same pointer again...