265789 matches found
wongpress
缓冲区溢出与格式化字符串漏洞的真实案例：在 Ubuntu Server 中获取 RCE 相关 CVE CVE-2024-2961 : Glibc iconv 函数中的缓冲区溢出漏洞 CVE-2024-29510 : Ghostscript（PostScript 语言解释器）中的格式化字符串漏洞 1. 问题背景 soon 。 2. 攻击场景 soon 。 3. 环境搭建 项目结构 soon 。 4. 漏洞利用 soon 。 5. 参考资料 soon 。...
CVE-2026-85384
A stack-based buffer overflow vulnerability exists in the httpd component of RE210 AC750 due to improper bounds checking in the splitString function when processing an uploaded configuration file. An authenticated attacker on the local network can upload a crafted configuration file to trigger th...
CVE-2026-45531
In readbootregion of fsck.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-49882
In rwmfchandlereadop of rwmfc.cc, there is a possible memory safety issue due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-45515
In a2dpvendoropusdecoderdecodepacket of a2dpvendoropusdecoder.cc, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-28662
In p2pprocessprovdiscbootstrapreq of p2ppd.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote proximal/adjacent code execution with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-28618
In decfrmprepare of oapv.c, there is a possible OOB write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...
nginx-rce-cve-2026-42945
5. CVE-2026-42945 - RCE Crítico en NGINX CVSS 9.2 Clasificación Categoría: 0-Day / Ejecución Remota de Código CVE: CVE-2026-42945 CVSS: 9.2 Crítico Fecha de descubrimiento: 12 de mayo de 2026 Fecha de parche: Mayo de 2026 parche de seguridad trimestral de F5 Fuente: GitHub...
CVE-2026-39259
SmallerC scanf s Stack.md SmallerC - scanf %s 栈缓冲区溢出 项目： https://github.com/alexfru/SmallerC SmallerC 的 scanf 实现在格式字符串中 %s 或 % 未指定显式字段宽度时，不会对字符串读取实施上限。运行时将持续向目标缓冲区写入，直到遇到空白字符或 EOF，而不管缓冲区实际分配的大小如何。任何超出边界的字节都会直接落入栈中，覆盖编译器放置在缓冲区上方的所有内容——局部变量、保存的寄存器、返回地址。 这并不是一类新颖的漏洞。自 C 语言早期以来，无界 scanf...
EUVD-2026-73943
A vulnerability was determined in Cesanta mJS up to 1.26. Affected is the function skipspacesandcomments of the file src/mjstok.c. Executing a manipulation can lead to heap-based buffer overflow. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized. The...
CVE-2026-85384 Authenticated Stack-Based Buffer Overflow in RE210 AC750 Configuration Import
A stack-based buffer overflow vulnerability exists in the httpd component of RE210 AC750 due to improper bounds checking in the splitString function when processing an uploaded configuration file. An authenticated attacker on the local network can upload a crafted configuration file to trigger th...
EUVD-2026-73942
A stack-based buffer overflow vulnerability exists in the httpd component of RE210 AC750 due to improper bounds checking in the splitString function when processing an uploaded configuration file. An authenticated attacker on the local network can upload a crafted configuration file to trigger th...
CVE-2026-85384 Authenticated Stack-Based Buffer Overflow in RE210 AC750 Configuration Import
A stack-based buffer overflow vulnerability exists in the httpd component of RE210 AC750 due to improper bounds checking in the splitString function when processing an uploaded configuration file. An authenticated attacker on the local network can upload a crafted configuration file to trigger th...
CVE-2009-0182
VUPlayer 2.49 Desbordamiento de búfer local para ejecución arbitraria de código Versión del programa: VUPlayer 2.49 Vulnerabilidad: desbordamiento de búfer local al importar un archivo de lista de reproducción .wax que conduce a la ejecución arbitraria de código Explotación: Desbordamiento de búf...
CVE-2003-0264
Desbordamiento de búfer del parámetro PASS del POP3 de SLMail 5.5 Versión del programa: SLMail 5.5 Vulnerabilidad: Desbordamiento de búfer en el parámetro PASS del servicio POP3 puerto 110 de Seattle Lab Mail SLMail 5.5 Probado en: Windows 7 x86 Explotación: Desbordamiento de búfer remoto Vídeo d...
Duplicate Advisory: Microsoft Security Advisory CVE-2026-71328 – .NET and Visual Studio Remote Code Execution Vulnerability
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-63gh-g2x5-x69v. This link is maintained to preserve external references. Original Description Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network...
Duplicate Advisory: Microsoft Security Advisory CVE-2026-69522 – .NET and Visual Studio Remote Code Execution Vulnerability
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-2j8r-3c22-8565. This link is maintained to preserve external references. Original Description Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network...
Duplicate Advisory: Microsoft Security Advisory CVE-2026-69439 – .NET and Visual Studio Elevation of Privilege Vulnerability
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-527h-q9f6-p7qx. This link is maintained to preserve external references. Original Description Heap-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a...
cfengine-CVE_2015_0235
CVE20150235 glibc 中 gethostbyname 缓冲区溢出利用 - CVE-2015-0235 https://community.qualys.com/blogs/laws-of-vulnerabilities/2015/01/27/the-ghost-vulnerability 最初来源于 Ben Bomgardner 在 help-cfengine 邮件列表中的帖子。 https://groups.google.com/forum/!topic/help-cfengine/tWjOlO19Mrw 集成到主配置文件中 下载策略文件并解压到你的主配置文件目录中...