one-multiply-too-many-cve-2026-70638-llama-cpp-android-jni-integer-overflow

CVE-2026-70638 - Desbordamiento de enteros JNI de LLaMA-Android en llama.cpp PoC complementario para el artículo de Hunt-Benito "Una multiplicación de más: CVE-2026-70638 — Desbordamiento de enteros en la asignación de montón JNI de Android de llama.cpp" →...

CVE-2026-42533-POC

CVE-2026-42533 Pre-auth heap buffer overflow and heap information leak in nginx, caused by missing save/restore of PCRE capture state across the two passes of the script engine. A regex map variable evaluated between two capture references overwrites r-captures, so the LEN pass and the VALUE pass...

MS17-010

MS17-010 Este repositorio es para mi trabajo público sobre MS17-010. No tengo planeado dar soporte. Todos los problemas de soporte no recibirán respuesta de mi parte. Archivos BUG.txt Detalle del bug MS17-010 y algo de análisis checker.py Script para encontrar named pipe accesible...

kernel-rt security update

An update is available for kernel-rt. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The kernel-rt packages provide the Real Time Linux Kernel, which enables...

RLSA-2026:77500 Important: kernel-rt security update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fixes: kernel: vsock/vmci: fix UAF when peer resets connection during handshake CVE-2026-64115 kernel: packet: use consistent hardheaderlen in...

RLSA-2026:77498 Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: vsock/vmci: fix UAF when peer resets connection during handshake CVE-2026-64115 kernel: packet: use consistent hardheaderlen in non-ring send paths kernel: packet: use consistent...

kernel security update

An update is available for kernel. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The kernel packages contain the Linux kernel, the core of any Linux operating...

CVE-2026-23002-5G-NAS-Message-Buffer-Overflow-in-gNodeB

CVE-2026-23002 – Desbordamiento de búfer en mensaje NAS 5G en gNodeB Código del programa simulación en C // gnbnassim.c - Simulated 5G gNodeB parsing NAS Registration Request include include include define MAXIESIZE 128 void processregistrationrequestuint8t nasmsg, uint16t length uint8t...

nginx-cve-2026-42945-poc

CVE-2026-42945 — NGINX Rewrite Module 堆缓冲区溢出 → RCE RCE 已确认成功 — 通过堆溢出 + GDB 进程注入，在 NGINX / OpenResty worker 进程中执行任意命令。 快速开始 一键构建 NGINX 镜像 + 执行 RCE 测试 ./run.sh nginx 一键构建 OpenResty 镜像 + 执行 RCE 测试 ./run.sh openresty 自定义命令 ./run.sh nginx 'cat /etc/passwd' ./run.sh openresty 'whoami' 漏洞概述 属性| 值 ---|--...

CVE-2026-63292

⚠️ CVE-2026-63292 — Vulnerabilidad de seguridad en Apache HTTP Server 🔐 --- 🔎 Descripción general CVE-2026-63292 es una vulnerabilidad de desbordamiento de búfer basado en pila que afecta al módulo modvhostalias de Apache HTTP Server. El problema puede desencadenarse bajo configuraciones...

CVE-2026-7827

A stack-based buffer overflow in the RdbLoadEntity function of the RDB graph decoders src/serializers/decoders//decodegraphentities.c in FalkorDB before 4.18.4 allows a remote attacker who can issue Redis replication commands for example, against an instance with no password configured to cause a...

CVE-2026-7827

A stack-based buffer overflow in the RdbLoadEntity function of the RDB graph decoders src/serializers/decoders//decodegraphentities.c in FalkorDB before 4.18.4 allows a remote attacker who can issue Redis replication commands for example, against an instance with no password configured to cause a...

CVE-2026-42945

CVE-2026-42945 实际风险评估脚本 针对 CVE-2026-42945 （Nginx Rift）的本地风险评估工具。不同于直接告诉你"版本受影响就危险"，这个脚本会逐层检查真正决定风险的三个条件，给出符合你实际情况的结论。 背景 CVE-2026-42945 是 nginx ngxhttprewritemodule 中一个存在了 18 年的堆缓冲区溢出漏洞（CWE-122），CVSS 4.0 评分 9.2。但公告中有一句关键的限定： "Code execution possible on systems without ASLR protection" RCE...

llama-cpp-security-patches

llama.cpp Security Patches Security patches for unpatched vulnerabilities in llama.cpp, discovered by Cyera Research. Background Between July 2025 and June 2026, we reported 10 vulnerabilities to the llama.cpp project through GitHub Security Advisories and MITRE. All advisories were closed by the...

CVE-2026-11108-Integer-Overflow-in-Memory-Allocator-kmalloc-Sim-

CVE-2026-11108 – Desbordamiento de entero en asignador de memoria kmalloc Sim Código del programa C // allocsim.c - Vulnerable memory allocator include include include define MAXBLOCK 1024 void mymallocsizet size sizet total = size + sizeofsizet; // header if total MAXBLOCK return NULL; void ptr ...

3007Project

3007Project Programa setuid utilizado para actualizar la puntuación del jugador. Lee el contenido del archivo de puntuación, busca y actualiza la puntuación según el ID del jugador dado; si no se encuentra el ID del jugador, se añade un nuevo ID y puntuación al archivo. El programa no debe fallar...

CVE-2026-7827

FalkorDB versions prior to 4.18.4 are vulnerable to a stack-based buffer overflow in the _RdbLoadEntity function of the RDB graph decoders (located in src/serializers/decoders/*/decode_graph_entities.c). The root cause is an unbounded property count in a crafted RDB stream, where the count sizes ...

EUVD-2026-95474

A stack-based buffer overflow in the RdbLoadEntity function of the RDB graph decoders src/serializers/decoders//decodegraphentities.c in FalkorDB before 4.18.4 allows a remote attacker who can issue Redis replication commands for example, against an instance with no password configured to cause a...

CVE-2026-7827 Stack-based buffer overflow in FalkorDB _RdbLoadEntity via unbounded property count in crafted RDB

A stack-based buffer overflow in the RdbLoadEntity function of the RDB graph decoders src/serializers/decoders//decodegraphentities.c in FalkorDB before 4.18.4 allows a remote attacker who can issue Redis replication commands for example, against an instance with no password configured to cause a...

POC-CVE-2026-0300-exploit

CVE-2026-0300 — Explotación de desbordamiento de búfer en el Portal de Autenticación User-ID de PAN-OS Crítico CVSS 9.3 — Ejecución remota de código no autenticada en el Portal Cautivo de PAN-OS de Palo Alto Networks Tabla de Contenidos Descripción General Detalles de la Vulnerabilidad Versiones...