CVE-2026-90596

embedded-graphics (Rust library) up to 0.8.2 is affected by an integer overflow in the ImageRaw::new/bytes_per_row function (src/image/image_raw.rs) on 32-bit platforms. The flaw can be triggered remotely without authentication or user interaction. Per CVSS 3.1, the impact is rated MEDIUM (6.5) w...

CVE-2026-90596 embedded-graphics image_raw.rs new/bytes_per_row integer overflow

A weakness has been identified in embedded-graphics up to 0.8.2 on 32-bit. Impacted is the function ImageRaw::new/bytesperrow of the file src/image/imageraw.rs. This manipulation causes integer overflow. The attack is possible to be carried out remotely. Upgrading the affected component is...

cve-2021-3490-ebpf-analysis

cve-2021-3490-ebpf-analysis 研究实现，演示与 CVE-2021-3490 相关的 Linux eBPF 子系统交互。包含 BPF map 创建、系统调用封装、命名空间设置和验证器分析。仅用于教育和安全研究目的。 CVE-2021-3490 – eBPF 验证器边界跟踪分析 概述 本仓库包含探索 Linux 内核 eBPF 子系统的 C 实现，涉及 CVE-2021-3490，这是一个涉及 eBPF 验证器中 32 位边界跟踪不正确的漏洞。 该项目的目标是理解 bpf 系统调用的内部工作方式、如何从用户空间创建和管理 BPF...

CVE-2023-33802

CVE-2023-33802 SumatraPDF 3.4.6 -32位拒绝服务（DoS） 描述 在此漏洞中，当我们在SumatraPDF 32位中打开两个大型文本文件（first.txt & second.txt）作为输入时，会出现崩溃。 运行以下命令，或者您可以手动在SumatraPDF 32位3.4.6中同时打开这两个文件。 root@kitploit: SumatraPDF.exe first.txt second.txt 使用WinDBG分析32位版本3.4.6应用程序的崩溃报告 遇到以下崩溃。 root@kitploit: Microsoft R Windows Debugg...

CVE-2026-90783

MKVToolNix through 101.0 contains a heap buffer overflow in the bundled avilib library's ODML superindex parser due to integer wraparound in 32-bit arithmetic. Attackers can craft a malicious AVI file with oversized entry counts that cause an undersized heap allocation, allowing a heap buffer...

CVE-2026-90783 MKVToolNix through 101.0 Heap Buffer Overflow via avilib ODML Superindex Integer Wraparound

MKVToolNix through 101.0 contains a heap buffer overflow in the bundled avilib library's ODML superindex parser due to integer wraparound in 32-bit arithmetic. Attackers can craft a malicious AVI file with oversized entry counts that cause an undersized heap allocation, allowing a heap buffer...

EUVD-2026-76923

wasm2c in WebAssembly wabt through 1.0.41 allows sandbox escape in some situations that primarily involve 32-bit platforms, aka a "table flip" attack. It does not check the return value of calloc in wasmrtallocatefuncreftable wasm2c/wasm-rt-impl-tableops.inc. When the funcref table allocation...

CVE-2026-90648

wasm2c in WebAssembly wabt through 1.0.41 allows sandbox escape in some situations that primarily involve 32-bit platforms, aka a "table flip" attack. It does not check the return value of calloc in wasmrtallocatefuncreftable wasm2c/wasm-rt-impl-tableops.inc. When the funcref table allocation...

CVE-2026-90648

wasm2c in WebAssembly wabt through 1.0.41 allows sandbox escape in some situations that primarily involve 32-bit platforms, aka a "table flip" attack. It does not check the return value of calloc in wasmrtallocatefuncreftable wasm2c/wasm-rt-impl-tableops.inc. When the funcref table allocation...

UBUNTU-CVE-2026-90648

wasm2c in WebAssembly wabt through 1.0.41 allows sandbox escape in some situations that primarily involve 32-bit platforms, aka a "table flip" attack. It does not check the return value of calloc in wasmrtallocatefuncreftable wasm2c/wasm-rt-impl-tableops.inc. When the funcref table allocation...

CVE-2026-90648

wasm2c in WebAssembly wabt through 1.0.41 allows sandbox escape in some situations that primarily involve 32-bit platforms, aka a "table flip" attack. It does not check the return value of calloc in wasmrtallocatefuncreftable wasm2c/wasm-rt-impl-tableops.inc. When the funcref table allocation...

CVE-2026-90648

wasm2c in WebAssembly wabt through 1.0.41 allows sandbox escape in some situations that primarily involve 32-bit platforms, aka a "table flip" attack. It does not check the return value of calloc in wasmrtallocatefuncreftable wasm2c/wasm-rt-impl-tableops.inc. When the funcref table allocation...

CVE-2026-90648

wasm2c in WebAssembly wabt through 1.0.41 allows sandbox escape in some situations that primarily involve 32-bit platforms, aka a "table flip" attack. It does not check the return value of calloc in wasmrtallocatefuncreftable wasm2c/wasm-rt-impl-tableops.inc. When the funcref table allocation...

CVE-2018-8174-msf

CVE-2018-8174-msf 这是一个 metasploit 模块，用于创建一个恶意 Word 文档以利用 CVE-2018-8174 — VBScript 内存损坏漏洞。 该模块是对野外发现的漏洞利用样本的快速移植。该漏洞利用仅适用于 32 位 Microsoft Office。 这个模块有很多需要改进的地方，但如果我有时间，将来会更新它。 安装 1. 将 CVE-2018-8174.rb 复制到 /usr/share/metasploit-framework/modules/exploits/windows/fileformat/ 2. 将 CVE-2018-8174.rtf...

CVE-2019-19012

Desbordamiento de enteros en Oniguruma Un desbordamiento de enteros en la función searchinrange en regexec.c en Oniguruma 6.x anterior a 6.9.4rc2 provoca una lectura fuera de los límites, en la que el desplazamiento de esta lectura está bajo el control de un atacante. Esto solo afecta a la versió...

Linux Distros Unpatched Vulnerability : CVE-2026-89579

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf: Harden bloom filter sizing and indexing on 32-bit kernels bloommapalloc has two 32-bit-specific problems when the computed bitmap reaches the U32MAX fallba...

Linux Distros Unpatched Vulnerability : CVE-2026-89490

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ocfs2: fix readdir position truncation on 32-bit kernels In ocfs2dirforeachblkel, the directory cookie position is rebuilt with ctx-pos = ctx-pos & sb-sblocksiz...

Linux Distros Unpatched Vulnerability : CVE-2026-89568

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - kho: fix size calculation in khopreservedmemoryreserve khopreservedmemoryreserve calculates the size of a preservation by doing 1 order + PAGESHIFT. Since the '...

PT-2026-90728

wasm2c in WebAssembly wabt through 1.0.41 allows sandbox escape in some situations that primarily involve 32-bit platforms, aka a "table flip" attack. It does not check the return value of calloc in wasm rt allocate funcref table wasm2c/wasm-rt-impl-tableops.inc. When the funcref table allocation...

CVE-2026-89579

A flaw was found in the Linux kernel's Berkeley Packet Filter BPF component, specifically impacting 32-bit systems. This vulnerability stems from incorrect sizing and indexing of bloom filters, which can lead to out-of-bounds memory access. A local attacker with CAPBPF capabilities could exploit...