dsa

A Summary of Go's crypto/dsa Vulnerability CVE-2016-3959 Alex Mullins April 9, 2016 Introduction Recently, there was a bug discovered in the Digital Signature Algorithm DSA crypto library for the Go programming language. In this article we'll go over the details of the bug and how an attacker cou...

cve-2022-29117-assessment

cve-2022-29117-assessment CVE-2022-29117 .NET Cookie-Handling DoS Assessment, Understanding & Questions Framework...

pcre2: PCRE2: Memory corruption vulnerability in pcre2_jit_match

A flaw was found in PCRE2, a library for processing regular expressions. The pcre2jitmatch function, which handles just-in-time JIT compilation for regular expressions, incorrectly manages memory when processing certain inputs. This memory corruption vulnerability could allow a local attacker to...

PCRE2: PCRE2: Out-of-bounds read via invalid UTF data during JIT fallback

A flaw was found in PCRE2. An attacker can provide invalid UTF Unicode Transformation Format data, leading to an out-of-bounds read during a Just-In-Time JIT fallback. This vulnerability could potentially result in a denial of service...

Important: Red Hat Security Advisory: pcre2 security update

An update for pcre2 is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

pcre2: PCRE2: Out-of-bounds write allows arbitrary code execution via crafted regular expressions

A flaw was found in PCRE2. An out-of-bounds write vulnerability exists in the pcre2dfamatch function due to improper size checking when reusing cached workspace blocks. A remote attacker could exploit this by providing a specially crafted regular expression or a recursive pattern in conjunction...

PCRE2: PCRE2: Out-of-bounds write via integer overflow on 32-bit platforms

A flaw was found in PCRE2. On 32-bit platforms, an integer overflow in the pcre2compile32 function can lead to an out-of-bounds write. This vulnerability could allow a remote attacker to achieve a high integrity impact and a low availability impact, potentially leading to data corruption or denia...

pcre2: pcre2: Out-of-bounds write via crafted regular expression

A flaw was found in pcre2. When an application processes attacker-controlled regular expressions using certain Just-In-Time JIT compiler interfaces, an out-of-bounds write with arbitrary data can occur. An attacker could exploit this vulnerability to achieve arbitrary code execution, corrupt...

pcre2: PCRE2: Out-of-bounds write via large pattern input

A flaw was found in PCRE2. On 32-bit platforms, an attacker can provide a specially crafted large pattern, leading to an out-of-bounds write within the pcre2patternconvert function. This vulnerability can result in high integrity impact, such as data corruption, and potentially a low availability...

pcre2: PCRE2: Denial of Service via out-of-bounds read during invalid UTF matching

A flaw was found in PCRE2, a library for processing regular expressions. A remote attacker could exploit this vulnerability by providing a specially crafted input that triggers an out-of-bounds read during pattern matching with invalid UTF Unicode Transformation Format characters. This could lead...

CVE-2022-48474_CVE-2022-48475

CVE-2022-48474 & CVE-2022-48475 PoC & exploits for CVE-2022-48474 & CVE-2022-48475 "Control de Ciber" is a Cybercafe management software. Multiple Denial-of-Service DoS vulnerabilities in versions prior to 1.650. An unauthenticated remote attacker can send a carefully crafted request that lead to...

CVE-2024-5084

CVE-2024-5084 CVE-2024-5084 Proof of Concept...

CVE-2025-65018-Heap-buffer-overflow-in-libpng-ps4-ps5-

Poc for CVE-2025-65018-Heap-buffer-overflow-in-libpng-ps4-ps5- Usage: 1-press share button and make screenshot 2-with ftp go to path:/user/avcontents/photo/NPXS20001/NPXS20001/XXX/ you will find screenshot that you make. 3-copy it to pc and run it with makepng.py it will output poc.png 4-rename i...

CVE-2026-17484

IBM i versions 7.3, 7.4, 7.5, and 7.6 are vulnerable to a denial of service (DoS) condition caused by improper access control within Dedicated Service Tools (DST) or System Service Tools (SST). A local attacker could exploit this flaw to disrupt service availability. Remediation involves installi...

CVE-2026-17484 IBM i is Information Disclosure

IBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to cause a denial of service due to improper access control...

CVE-2025-0411-PoC

更多PoCs at: https://pc.fenchuan8.com//index?forum=101158&yqm=DGR4X Compile with MinGW-w64 x8664-w64-mingw32-g++ loader.cpp -o loader.exe -s -static After compilation, compress the exe with 7z and execute twice. Since this vulnerability requires user interaction, the generated compressed file needs...

CVE-2026-81858

IBM i versions 7.3, 7.4, 7.5, and 7.6 (5770-SS1) are vulnerable to an out-of-bounds read in the File Server component. This vulnerability could allow a remote authenticated attacker to cause a denial of service and obtain information. Remediation is available via specific PTFs: SJ11622 for versio...

CVE-2026-81858 IBM i is Affected By A Denial of Service Vulnerability in Host Servers

IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to cause a denial of service and obtain information due to an out-of-bounds read in the File Server...

CVE-2026-93886

IBM i versions 7.3, 7.4, 7.5, and 7.6 (Product 5770-SS1) are vulnerable to an Improper Neutralization of Input During Web Page Generation (CWE-79) in the HTTP Server Administration Graphical User Interface (GUI) . A remote authenticated attacker could exploit this flaw due to improper validation ...

CVE-2026-93886 IBM i is Affected By An Improper Neutralization of Input Vulnerability in HTTP Server Administration GUI

IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to execute arbitrary script code due to improper validation of user-supplied input...