CVE-2026-96261 IBM Power Systems Firmware Buffer Overflow

IBM Power Systems Firmware FW1060.00 through FW1060.81 is affected by a vulnerability in host firmware configuration parsing. An attacker with authenticated service-level access to the service processor can write specially crafted configuration data, causing the host firmware boot stack to crash...

CVE-2026-96261

IBM Power Systems Firmware versions FW1060.00 through FW1060.81 are vulnerable to a stack-based buffer overflow (CWE-121) during host firmware configuration parsing. An attacker with authenticated service-level access to the service processor can provide specially crafted configuration data, caus...

CVE-2026-96262 IBM Power Systems Firmware Buffer Overflow

IBM Power Systems Firmware FW1060.00 through FW1060.81 is affected by a vulnerability in the service processor mailbox interface. An attacker with authenticated service-level access to the FSP can send a specially crafted mailbox message to overflow host firmware runtime attribute storage, allowi...

EUVD-2026-97870

IBM Power Systems Firmware FW1060.00 through FW1060.81 is affected by a vulnerability in the service processor mailbox interface. An attacker with authenticated service-level access to the FSP can send a specially crafted mailbox message to overflow host firmware runtime attribute storage, allowi...

CVE-2026-96262

IBM Power Systems Firmware versions FW1060.00 through FW1060.81 are affected by a stack-based buffer overflow (CWE-121) in the service processor mailbox interface. An attacker with authenticated service-level access to the FSP can send a specially crafted mailbox message to overflow host firmware...

CVE-2026-96263 IBM Power Systems Firmware Buffer Overflow

IBM Power Systems Firmware FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, and FW1060.00 through FW1060.81 is affected by a vulnerability in the host firmware boot process image validation path. An attacker with service access to the service processor can supply a maliciously crafted co...

CVE-2026-96263

IBM Power Systems Firmware is affected by a stack-based buffer overflow (CWE-121) within the host firmware boot process image validation path. An attacker with service access to the service processor can provide a maliciously crafted code update image, leading to arbitrary code execution on the h...

EUVD-2026-97868

IBM Power Systems Firmware FW1060.00 through FW1060.81 is affected by a vulnerability in the service processor mailbox interface. An attacker with authenticated service-level access to the FSP can send a specially crafted mailbox message to overflow host firmware runtime attribute storage, allowi...

CVE-2026-96264 IBM Power Systems Firmware Buffer Overflow

IBM Power Systems Firmware FW1060.00 through FW1060.81 is affected by a vulnerability in the service processor mailbox interface. An attacker with authenticated service-level access to the FSP can send a specially crafted mailbox message to overflow host firmware runtime attribute storage, allowi...

CVE-2026-96264

IBM Power Systems Firmware (FW1060.00 through FW1060.81) is vulnerable to a stack-based buffer overflow (CWE-121) in the service processor mailbox interface. An attacker with authenticated service-level access to the FSP can send a specially crafted mailbox message to overflow host firmware runti...

CVE-2026-96266

IBM Power Systems Firmware (versions FW1060.00 through FW1060.81 ) is vulnerable to a stack-based buffer overflow (CWE-121) during host firmware configuration parsing. An attacker with authenticated service-level access to the FSP can provide specially crafted configuration data to trigger memory...

CVE-2026-96266 IBM Power Systems Firmware Buffer Overflow

IBM Power Systems Firmware FW1060.00 through FW1060.81 is affected by a vulnerability in host firmware configuration parsing. An attacker with authenticated service-level access to the FSP can write specially crafted configuration data to cause memory corruption in the host firmware boot stage...

Updated wireshark package fixes security vulnerabilities

Loop with Unreachable Exit Condition 'Infinite Loop' in Wireshark. CVE-2026-95386 Heap-based Buffer Overflow in Wireshark. CVE-2026-95387 Heap-based Buffer Overflow in Wireshark. CVE-2026-95388 Heap-based Buffer Overflow in Wireshark. CVE-2026-95389 NULL Pointer Dereference in Wireshark...

MGASA-2026-0496 Updated cjose packages fix security vulnerabilities

The updated packages fix security vulnerabilities: Heap buffer overflow in AES Key Wrap decryption A128KW/A192KW/A256KW. CVE-2026-53938 All-zero Content Encryption Key used for AES-CBC-HMAC JWE encryption. CVE-2026-53939...

Updated cjose packages fix security vulnerabilities

The updated packages fix security vulnerabilities: Heap buffer overflow in AES Key Wrap decryption A128KW/A192KW/A256KW. CVE-2026-53938 All-zero Content Encryption Key used for AES-CBC-HMAC JWE encryption. CVE-2026-53939...

CVE-2024-28515

CVE-2024-28515 Description Buffer Overflow vulnerability in CSAPPLab CSAPP Lab3 15-213 Fall 20xx allows a remote attacker to execute arbitrary code via the lab3 of csapp,lab3/buflab-update.pl component. Additional Information CNVD has completed verification of this vulnerability, but it has not...

CVE-2015-1578

CVE-2015-1578 Achat 0.150 beta7 - Remote Buffer Overflow Rewrite for python3 for the PNPT course. Original: Author KAhara MAnhara Rewritten: in python3 by Giuseppe Aloisi Achat 0.150 beta7 - Buffer Overflow Tested on Windows 7 32bit https://www.exploit-db.com/exploits/36025 give the script a few...

telnet_scan

Telnet Vulnerability Scanner CVE-2026-24061 & CVE-2026-32746 A Python-based security assessment tool that detects and where applicable exploits two critical vulnerabilities in GNU InetUtils telnetd: CVE-2026-24061 – Authentication bypass via USER environment variable injection CVSS 9.8...

CVE-2020-0796

CVE-2020-0796 CVE-2020-0796 Python POC buffer overflow https://github.com/eerykitty/CVE-2020-0796-PoC...

CVE-2026-42945-POC

CVE-2026-42945 RCE Proof of concept for CVE-2026-42945 , a critical heap buffer overflow in NGINX's ngxhttprewritemodule introduced in 2008. The bug enables unauthenticated remote code execution against servers using rewrite and set directives. This vulnerability — along with three other memory...