CVE-2026-106432

The BSON encoder in the MongoDB PHP Driver converts a string length to a 32-bit value without validation. When an affected application encodes a string near 4 GiB, the allocation size can wrap while the copy operation uses the original length. The resulting heap buffer overflow can corrupt proces...

CVE-2026-106435

The MongoDB Python Driver's binary accelerator can read outside a buffer when an application decodes malformed BSON containing a truncated regular-expression element without a trailing NUL byte. An actor who can supply BSON to the documented decode or decodeall API can cause the application proce...

CVE-2026-107705 Poppler 0.42.0 through 26.10.0 Stack Buffer Overflow via Decrypt::revision6Hash()

Poppler 0.42.0 through 26.10.0 contains a stack-based buffer overflow in Decrypt::revision6Hash that allows attackers controlling the password to overwrite stack memory when opening AESV3/R6 encrypted PDFs. Attackers can supply a password longer than 127 bytes through applications using the...

EUVD-2026-95208

Poppler 0.42.0 through 26.10.0 contains a stack-based buffer overflow in Decrypt::revision6Hash that allows attackers controlling the password to overwrite stack memory when opening AESV3/R6 encrypted PDFs. Attackers can supply a password longer than 127 bytes through applications using the...

CVE-2026-107705

The Poppler library, versions 0.42.0 through 26.10.0 , is vulnerable to a stack-based buffer overflow within the Decrypt::revision6Hash() function. An attacker who controls the password of an AESV3/R6 encrypted PDF can provide a password exceeding 127 bytes, leading to an overflow of the K1 and E...

razer-lycosa-kernel-lpe-BYOVD-Vulnerability-PoC

Lycosa.sys, Razer: दो कर्नेल भेद्यताएँ जो किसी भी स्थानीय उपयोगकर्ता द्वारा पहुँची जा सकती हैं https://github.com/416rehman/DeepZero के माध्यम से खोजा गया विक्रेता: Razer Inc. घटक: Lycosa.sys, Razer Lycosa कीबोर्ड फ़िल्टर ड्राइवर, x64 SHA-256:...

CVE-2026-42533

CVE-2026-42533 लैब — NGINX Two-Pass Capture Clobbering RCE CVSS 9.2 Critical — nginx में Pre-auth heap buffer overflow + info leak प्रभावित: nginx 0.9.6 – 1.30.3 / 1.31.2 | पैच किया गया: 1.30.4 / 1.31.3 आर्किटेक्चर ┌─────────────────────────────────────┐ │ Host machine │ │ │ PoC scripts ──────┤...

CVE-2019-18634-writeup

CVE-2019-18634 https://www.exploit-db.com/exploits/47995 का विश्लेषण Sudo 1.8.25p - 'pwfeedback' बफर ओवरफ्लो PoC Sudo का pwfeedback विकल्प उपयोगकर्ता को अपना पासवर्ड दर्ज करते समय दृश्य प्रतिक्रिया प्रदान करने के लिए उपयोग किया जा सकता है। प्रत्येक कुंजी दबाने पर एक तारांकन चिह्न मुद्रित होता है।...

CVE-2026-0300

PAN-OS CVE-2026-0300 गैर-विनाशकारी एक्सपोज़र सर्वेक्षण उपकरण अवलोकन यह उपकरण एक गैर-विनाशकारी एक्सपोज़र सर्वेक्षण उपयोगिता है जो यह आकलन करने के लिए है कि क्या कोई लक्षित PAN-OS सेवा CVE-2026-0300 से संबंधित नेटवर्क-सुलभ सतहों को उजागर कर सकती है। यह उपकरण अधिकृत रक्षात्मक सुरक्षा सत्यापन, संपत्त...

PAN-OS-User-ID-Buffer-Overflow-PoC

🛡️ CVE-2026-0300: PAN-OS User-ID™ पोर्टल RCE विश्लेषण शोध प्रूफ-ऑफ-कॉन्सेप्ट: CWE-787 आउट-ऑफ-बाउंड्स राइट 📌 अवलोकन CVE-2026-0300 Palo Alto Networks PAN-OS User-ID™ प्रमाणीकरण पोर्टल कैप्टिव पोर्टल में पहचाना गया एक उच्च-गंभीरता वाला बफर ओवरफ्लो भेद्यता है। यह शोध रिपॉजिटरी भेद्यता के तकनीकी तर्क क...

CVE-2026-31431-mitigacion

CVE-2026-31431 — पूर्ण तकनीकी विश्लेषण वर्गीकरण: लोकल प्रिविलेज एस्केलेशन LPE — लिनक्स कर्नेल CVSS: 7.8 उच्च प्रभाव: अनप्रिविलेज्ड उपयोगकर्ता → root प्रभावित मॉड्यूल: algifaead कर्नेल का AFALG सबसिस्टम सामग्री 1. यह असुरक्षित क्यों है? 2. कौन से संस्करण प्रभावित हैं? 3. इसका शोषण कैसे किया जाता ह...

cve-2026-0300-audit

CVE-2026-0300 ऑडिट टूलिंग CVE-2026-0300 के लिए केवल-पठनीय ऑडिट टूलिंग — PA-Series और VM-Series फ़ायरवॉल पर PAN-OS User-ID Authentication Portal पूर्व में "Captive Portal" के रूप में जाना जाता था में अनप्रमाणित बफर ओवरफ़्लो। यह रिपॉज़िटरी Tailwind Resource Group सुरक्षा सलाह TRG-SA-2026-003 के साथ...

EUVD-2026-95247

IBM Guardium Data Protection 12.0, 12.1, 12.2 is vulnerable to a heap-based buffer overflow in the MongoDB protocol parser. A remote attacker could send a specially crafted MongoDB SCRAM username containing an excessive length and cause memory corruption, potentially resulting in denial of servic...

CVE-2026-82335 IBM Guardium Data Protection Buffer Overflow

IBM Guardium Data Protection 12.0, 12.1, 12.2 is vulnerable to a heap-based buffer overflow in the MongoDB protocol parser. A remote attacker could send a specially crafted MongoDB SCRAM username containing an excessive length and cause memory corruption, potentially resulting in denial of servic...

CVE-2026-82335

IBM Guardium Data Protection versions 12.0, 12.1, and 12.2 are vulnerable to a heap-based buffer overflow within the Sniffer component 's MongoDB protocol parser. A remote attacker can exploit this by sending a specially crafted MongoDB SCRAM username with an excessive length, leading to memory c...

CVE-2026-82344 IBM Guardium Data Protection Buffer Overflow

IBM Guardium Data Protection 12.0, 12.1 is vulnerable to a heap-based buffer overflow in the S-TAP TrafficTap TDS login reassembly functionality. An unauthenticated remote attacker can send crafted TDS login fragments that exceed the fixed-size reassembly buffer, potentially resulting in denial o...

EUVD-2026-95246

IBM Guardium Data Protection 12.0, 12.1 is vulnerable to a heap-based buffer overflow in the S-TAP TrafficTap TDS login reassembly functionality. An unauthenticated remote attacker can send crafted TDS login fragments that exceed the fixed-size reassembly buffer, potentially resulting in denial o...

CVE-2026-82344

IBM Guardium Data Protection versions 12.0, 12.1, and 12.2 are vulnerable to a heap-based buffer overflow within the S-TAP TrafficTap TDS login reassembly functionality. An unauthenticated remote attacker can exploit this by sending crafted TDS login fragments that exceed the fixed-size reassembl...

CVE-2026-106432

The MongoDB PHP Driver contains a heap buffer overflow vulnerability within its BSON encoder . The root cause is the conversion of string lengths to 32-bit values without proper validation; when encoding strings near 4 GiB , the allocation size can wrap while the copy operation maintains the orig...

CVE-2026-106432 Heap buffer overflow via 32-bit string-length truncation in MongoDB PHP Driver

The BSON encoder in the MongoDB PHP Driver converts a string length to a 32-bit value without validation. When an affected application encodes a string near 4 GiB, the allocation size can wrap while the copy operation uses the original length. The resulting heap buffer overflow can corrupt proces...