45364 matches found
CVE-2026-80742
A flaw was found in the Linux kernel's afpacket Address Family Packet component. A local attacker could exploit this vulnerability by sending specially crafted zero-byte packets through the TPACKET ring buffer on devices without a hard header. This improper handling of zero-length packets can cau...
CVE-2024-4577-LetsDefend-walkthrough
Incident Response Walkthrough: Mitigating a Zero-Day Attack CVE-2024-4577 LetsDefend Write-up PHP-CGI CVE-2024–4577 Scenario: Our Intrusion Detection System IDS and Intrusion Prevention System IPS identified a potential attack targeting a critical system component at 12:05 PM UTC. This write-up...
CVE-2026-90035
A flaw was found in the drm/amd/display component of the Linux kernel. A local attacker, by connecting a specially crafted USB4/DPIA tunneling device, could trigger a division-by-zero error within the getestimatedbw function. This occurs when the device reports an estimated-bandwidth change befor...
demo-cve-2022-21449
Demo Project: CVE-2022-21449 Vulnerability This project demonstrates the CVE-2022-21449 vulnerability, which affects Java's ECDSA signature verification. The vulnerability allows a malicious actor to bypass signature verification by using a signature with zero values r=0 and s=0. The project uses...
CVE-2025-24132-Scanner
EN | KR 📄 Overview This tool discovers AirPlay-capable devices on your local network via mDNS Zeroconf and tests them for the CVE-2025-24132 “zero-click” HTTP RCE vulnerability. Discovered devices are listed in a simple GUI; click a device to view all retrieved properties. Prerequisites Python 3....
aisecplus-week01-danielossai
🔐 AISec Plus — Week 1: Map the Threat Researcher: Daniel Ossai Repo: aisecplus-week01-danielossai Submitted: Week 1 · AISec Plus Bootcamp 📌 Incident Name & Date EchoLeak CVE-2025-32711 Discovered: January 2025 · Disclosed: June 2025 · Patched: June 2025 📝 What Happened Researchers at Aim Security...
CVE-2026-45585
🔑 CVE-2026-45585 - YellowKey 🔓 Advanced mitigation for CVE-2026-45585 YellowKey 📌 What is YellowKey Vulnerability? YellowKey CVE-2026-45585 is a zero-day physical attack vulnerability discovered in May 2026 that allows attackers with physical access to completely bypass BitLocker encryption on...
CVE-2023-38831-POC
Description Name : CVE-2023-38831 CVSS Score : 7.8 Affected Versions : Winrar 6.23 CVE-2023-38831 is a zero-day vulnerability affecting WinRAR all versions prior to 6.23. The issue is in the processing of ZIP format which could allow attackers to utilize affected archives to distribute malware. B...
SoftwareSystemSecurity-2019
SoftwareSystemSecurity-2019 Software System Security Final Assignment: Vulnerability Reproduction CVE-2018-4878 Flash 0day...
CVE-2026-92454 JPEG decoder: truncated segments are read past the image buffer, and a zero sampling factor hangs the decode
The GUIX software JPEG decoder reads four kinds of marker segment without checking that each is long enough to hold what it reads. A truncated segment is therefore read past the end of the caller's image buffer. Separately, a zero chroma sampling factor makes the block decode loop non-terminating...
CVE-2026-92454
The GUIX software JPEG decoder is vulnerable to an out-of-bounds read and a non-terminating loop when GX_SOFTWARE_DECODER_SUPPORT is enabled. The decoder fails to verify that four kinds of marker segments are long enough, causing truncated segments to be read past the end of the caller's image bu...
eero-zero-length-ipv6-options-header-dos
eeroOS Ethernet Interface Denial of Service Vulnerability CVE-2023-5324 If eero Pro 5 devices receive an IPv6 packet where the payload length is zero and contains a hop-by-hop or destination options extension header that refers to another hop-by-hop or destination options extension header that...
CVE-2024-42009-roundcube-xss
CVE-2024-42009 — Roundcube Webmail 1.6.6 Stored XSS PoC For authorised security testing, CTF environments, and educational research only. Using this tool against systems you do not own or have written permission to test is illegal under the Computer Misuse Act 1990 UK, the CFAA US, and equivalent...
Zero-Day-Legacy
🎓 Graduation Project — Ajloun National University ANU Faculty of IT · Cybersecurity and Cloud Computing · Academic Year 2026 🏆 Highest Grade in the University: 97% 📖 Overview Zero-Day Legacy is a realistic, intentionally vulnerable Boot-to-Root CTF Capture The Flag lab machine built as a graduati...
extra_recipe-iOS-10.2
extrarecipe-iOS-10.2 CVE-2017-2370 Code & Exploit by ianbeer https://bugs.chromium.org/p/project-zero/issues/detail?id=1004 Fixed https://support.apple.com/en-us/HT207482...
CVE-2024-26170-extended
CVE-2024-26170-extended researching for CVE-2024-26170 or cimfs.sys to find overflows or bugs that is considered a zero-day...
CVE-2026-93182
A flaw was found in the Linux kernel. A local user can trigger a divide-by-zero error in the scheduler's fair scheduling class sched/fair due to an unsigned 32-bit integer u32 overflow in the updatetgcfsrunnable function. This overflow corrupts internal scheduling data, leading to an invalid...
Pegasus Spyware Infection Confirmed on Serbian University Rector's iPhone Days Before Election
The iPhone of Vladan Đokić, rector of the University of Belgrade and a prominent supporter of Serbia's student protest movement, was infected with NSO Group's Pegasus spyware in 2026, the Citizen Lab said on October 19. The finding came six days before Serbia's October 25 snap parliamentary...
CVE-2026-93062
A flaw was found in the Linux kernel's iwlwifi driver. This vulnerability is caused by a division-by-zero error within the iwldbgtlvallocfragments function when the number of fragments is zero. This could lead to a system crash, resulting in a Denial of Service DoS...