CVE-2026-85455

MOOS core-moos through 10.4.0 contains a buffer over-read vulnerability in CMOOSCommPkt where a four-byte packet triggers out-of-bounds memory access during deserialization. Attackers can open a TCP connection to the MOOSDB port and send a crafted short packet to read memory before authentication...

CVE-2026-85444

MOOS-IvP through 24.8.1 contains a buffer over-read vulnerability in isQuoted, isBraced, and isChevroned functions that strip whitespace but index using the original string length. Attackers can send NODEREPORT messages with leading or trailing whitespace to read past buffer bounds and access...

CVE-2026-64200

DASYLab is vulnerable to an out-of-bounds read caused by improper validation of user-supplied data during string conversion when parsing a .DSB file. A malformed file can cause a read past the end of an allocated heap buffer. Exploitation requires a local attacker to trick a user into opening a s...

CVE-2026-64199

CVE-2026-64199 is an out-of-bounds read vulnerability in DASYLab (MEAS X) caused by improper validation of user-supplied data when parsing a .DSB file . Successful exploitation requires a user to open a specially crafted file, making it a local attack vector with no privileges required but user i...

CVE-2026-64198

CVE-2026-64198 is an out-of-bounds read in DASYLab (MEASX) caused by improper validation of user-supplied data during file handling. A read a few bytes past the end of an allocated heap buffer occurs when parsing a .DSB file . Successful exploitation requires a user to open a specially crafted .D...

EUVD-2026-70703

Out of bounds read in CrashReporting in Google Chrome prior to 152.0.7977.82 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-11645

CVE-2026-11645 - V8 в Google Chrome до удаленного выполнения кода Быстрое использование root@kitploit: python3 exploit.py -t "C:\Path\To\Target" -o demo.zip --data-file payload.exe Примечания по эксплуатации Степень опасности: HIGH CVSS: 8.8 Влияние: Конфиденциальность, Целостность, Доступность...

CVE-2026-36834

Краткое описание В src/decoders/pana8.cpp обнаружено чтение за границами массива. Функция GetDBit может вернуть значение 17, если не найдено совпадение в таблице Хаффмана, однако huffcoeff объявлен только с 17 элементами допустимые индексы 0-16. Это приводит к обращению к huffcoeff17, что вызывае...

CVE-2026-85052

A flaw was found in Google Chrome's CrashReporting component. A remote attacker, after compromising the renderer process, could exploit an out-of-bounds read vulnerability by crafting a malicious HTML page. This could lead to information disclosure, allowing the attacker to read memory outside of...

CVE-2025-5777

CVE-2025-5777 Также известен как CitrixBleed 2 — это чтение за пределами выделенной памяти OOB в процессе входа в систему Citrix Gateway. Это доказательство концепции, использующее уязвимость OOB CVE-2025-5777 для получения данных из памяти уязвимого экземпляра Citrix Gateway, что может привести ...

CVE-2026-85052

Out of bounds read in CrashReporting in Google Chrome prior to 152.0.7977.82 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-85052

CVE-2026-85052 is an out-of-bounds read in the CrashReporting component of Google Chrome prior to 152.0.7977.82 . A remote attacker who has already compromised the renderer process can leverage a crafted HTML page to read memory outside the browser's security sandbox, resulting in information dis...

CVE-2024-26160

CVE-2024-26160 vulnérabilité de divulgation d'informations dans cldflt.sys Il y a un petit article sur CVE-2024-26160 , qui peut être trouvé dans le patch de février KB5034765 , Windows 11 22H2, Windows 11 23H2. La vulnérabilité a été corrigée dans le patch de mars KB5035853. Analyse La...

CVE-2026-84968 Heap out-of-bounds read via corrupt nested BSON in field path error message

An out-of-bounds read in the BSON decoding component of the MongoDB PHP driver may allow an unauthenticated party who supplies specially formed input to have a small amount of adjacent process memory copied into an error message that is returned to application code. This may result in unintended...

CVE-2026-84968

An out-of-bounds read in the BSON decoding component of the MongoDB PHP driver can be triggered by an unauthenticated party supplying specially crafted input containing corrupt nested BSON in a field path. This causes a small amount of adjacent process memory to be copied into an error message re...

CVE-2026-11645-Out-of-bounds-Read-Write

CVE-2026-11645 - Chrome V8 Out-of-Bounds Read/Write Exploit ⚠️ AVERTISSEMENT Ce code est UNIQUEMENT à des fins éducatives et de tests autorisés. 📋 Description CVE-2026-11645 est une vulnérabilité de lecture et d'écriture hors limites OOB dans le moteur V8 de Google Chrome. Un attaquant distant peu...

CVE-2026-84966

An incorrect numeric type conversion in the BSON document building component of the MongoDB C++ Driver may cause a length value to be interpreted incorrectly. When an application supplies an extremely large, non-terminated field name to the builder, the library may read memory outside the intende...

CVE-2015-6086

Du crash à l'exploit : CVE-2015-6086 - Lecture hors limites/contournement d'ASLR root@kitploit: $$$$$$\ $$\ $$\ $$$$$$$$\ $$$$$$\ $$$$$$\ $$\ $$$$$$$\ $$$$$$\ $$$$$$\ $$$$$$\ $$ $$\ $$ | $$ |$$ | $$ $$\ $$$ $$\ $$$$ | $$ | $$ $$\ $$$ $$\ $$ $$\ $$ / |$$ | $$ |$$ | / $$ |$$$$\ $$ |$$ | $$ | $$ /...

CVE-2026-84970

A numeric truncation weakness exists in the JSON parsing component of the MongoDB C++ Driver's BSON library. An actor who controls the text that an embedding application hands to the library's public JSON parsing interface, when that text is very large, can cause the library to read memory beyond...

CVE-2026-84966

An incorrect numeric type conversion in the BSON document building component of the MongoDB C++ Driver may cause a length value to be interpreted incorrectly. When an application passes an extremely large, non-terminated field name to the builder, the library may read memory outside the intended ...