98 matches found
CVE-2021-23017-POC
CVE-2021-23017-POC Un problème de sécurité dans le résolveur nginx a été identifié, qui pourrait permettre à un attaquant capable de forger des paquets UDP provenant du serveur DNS de provoquer un débordement mémoire de 1 octet, entraînant un plantage du processus worker ou d'autres impacts...
NGINX-ngx_http_rewrite_module-heap-buffer-overflow-CVE-2026-9256
CVE-2026-9256 NGINX ngxhttprewritemodule PoC: выводы и размышления Область применения: только для локальных полигонов, авторизованных сред воспроизведения, проверки уязвимостей и анализа защитных правил. Не используйте на неавторизованных целях. Идеи PoC в этом документе проверяют только удаленно...
CVE-2026-23918-Apache-H2-PoC
CVE-2026-23918-Apache-H2-PoC Это proof-of-concept эксплойт для уязвимости double-free в modhttp2 от Apache CVE-2026-23918. Это неприятный баг, затрагивающий путь очистки потока в h2mplx.c. Если вкратце, при правильном расчёте времени можно заставить сервер попытаться очистить один и тот же поток...
CVE-2026-42945
CVE-2026-42945 PoC Go Chinois | English Outil de détection et d’exploitation auxiliaire pour la mise en œuvre de HTTP/2 dans nginx CVE-2026-42945 , destiné à vérifier la présence de la vulnérabilité dans un environnement autorisé , à comparer l’effet des correctifs et à reproduire le comportement...
fix_nginx_cve_2026_42945
Script de correction en une commande pour NGINX CVE-2026-42945 Détecte automatiquement la distribution système, met à niveau NGINX vers la version corrigée ≥1.30.1, sauvegarde la configuration et effectue un rollback automatique. Description de la vulnérabilité Identifiant de la vulnérabilité :...
CVE-2026-42536-PoC
CVE-2026-42536: PoC переполнения кучи в modxml2enc Apache HTTP Server Этот PoC-код является частью сообщения в блоге по адресу https://erberkan.github.io/2026/PatchDiffingandN-DayDefense/ . Этот репозиторий содержит контролируемое доказательство концепции для CVE-2026-42536 — запись за границы ку...
CVE-2021-26690---Apache-mod_session
Analyse de patchs pour CVE-2021-26690 - Apache modsession Cette vulnérabilité est un déréférencement de pointeur NULL au sein du module modsession d'Apache. Elle provoquera un déni de service pour les processus enfants du httpd d'Apache. En utilisant une boucle répétitive, chaque travailleur Apac...
CVE-2026-100651
A flaw was found in vLLM. The service fails to properly enforce length limits on input prompts when handling certain multimodal inference requests. A remote attacker with access to the inference service could exploit this vulnerability by submitting an excessively long prompt, causing an internal...
CVE-2026-48521 Envoy: HTTP/3 connection pool selection null-derefs in ProdClusterManagerFactory::allocateConnPool when transport_socket_options is null
Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1, Envoy's ProdClusterManagerFactory::allocateConnPool dereferences transportsocketoptions while selecting an HTTP/3 connection pool without first checking whether the...
CVE-2026-48521 Envoy: HTTP/3 connection pool selection null-derefs in ProdClusterManagerFactory::allocateConnPool when transport_socket_options is null
Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1, Envoy's ProdClusterManagerFactory::allocateConnPool dereferences transportsocketoptions while selecting an HTTP/3 connection pool without first checking whether the...
CVE-2026-48521
Envoy versions prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1 contain a null pointer dereference (CWE-476) in ProdClusterManagerFactory::allocateConnPool during HTTP/3 connection pool selection. When auto_config and HTTP/3 are enabled, certain LoadBalancerContext implementations used by synthetic, ...
EUVD-2026-84109
Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1, Envoy's ProdClusterManagerFactory::allocateConnPool dereferences transportsocketoptions while selecting an HTTP/3 connection pool without first checking whether the...
CVE-2026-57173
vLLM is an inference and serving engine for large language models. Prior to 0.24.0, the inputaudio handling path for /v1/chat/completions calls AudioMediaIO.loadbytes or AudioMediaIO.loadfile without passing VLLMMAXAUDIODECODEDURATIONS to the shared audio decoder. An unauthenticated client can...
CVE-2026-57173: Allocation of Resources Without Limits or Throttling
vLLM is an inference and serving engine for large language models. Prior to 0.24.0, the inputaudio handling path for /v1/chat/completions calls AudioMediaIO.loadbytes or AudioMediaIO.loadfile without passing VLLMMAXAUDIODECODEDURATIONS to the shared audio decoder. An unauthenticated client can...
CVE-2026-89020 MikroTik RouterOS Stack Buffer Overflow via TFTP URL Path
MikroTik RouterOS before 7.23.4 long-term and 7.24.2 stable contains a stack-based buffer overflow vulnerability in the mtget binary's TFTP RRQ builder function that allows authenticated users to crash the mtget worker process by supplying a URL path of 507 bytes or more to the /tool fetch comman...
Astra Linux – Vulnerability in Samba
A Type Confusion vulnerability was discovered in Samba’s mdssvc RPC service for Spotlight. When parsing Spotlight mdssvc RPC packets, one encoded data structure is a key-value style dictionary, where the keys are character strings, and the values can be any of the supported types in the mdssvc...
CVE-2026-13417 Boards plugin denial of service via unvalidated block fields.properties
Mattermost versions 11.9.x = 11.9.0, 11.8.x = 11.8.4, 11.7.x = 11.7.7, 10.11.x = 10.11.22 fail to validate the type of fields.properties on block creation which allows an authenticated user with editor access to a board to crash the Boards plugin worker and trigger a denial of service via a child...
CVE-2026-13417
Mattermost Boards plugin denial of service vulnerability in versions 11.9.x ≤ 11.9.0 , 11.8.x ≤ 11.8.4 , 11.7.x ≤ 11.7.7 , and 10.11.x ≤ 10.11.22 . The plugin fails to validate the type of fields.properties on block creation, allowing an authenticated user with editor access to a board to crash t...
CVE-2026-61915
An issue was discovered in Cyrus IMAP before 3.12.4. There is a VPATCH BYPARAM double-free. An authenticated calendar user could crash a Cyrus CalDAV worker with a PATCH containing PATCH-ACTION="BYPARAM@..." against a resource with two or more properties of the matched kind. The memory holding th...
