aiohttp: AIOHTTP: Denial of Service via malformed HTTP responses

A flaw was found in AIOHTTP, an asynchronous HTTP client/server framework. This vulnerability involves an out-of-bounds heap read in the C response parser when processing malformed HTTP responses. An attacker operating a malicious server, or even an accidental malformed response, could exploit th...

CVE-2026-85455

MOOS core-moos through 10.4.0 contains a buffer over-read in the CMOOSCommPkt component. A crafted four-byte packet sent over a TCP connection to the MOOSDB port triggers an out-of-bounds memory access during deserialization, allowing an unauthenticated attacker to read process memory. The vulner...

CVE-2026-85444

MOOS-IvP through version 24.8.1 contains a buffer over-read vulnerability in the isQuoted(), isBraced(), and isChevroned() functions within MBUtils.cpp. These functions strip whitespace from input but then index using the original string length , causing reads past buffer bounds. An attacker can ...

CVE-2026-85438

MOOS-IvP through version 24.8.1 is affected by a buffer overflow vulnerability in StringToIvPFunction() , where dimension, piece, and degree counts from encoded BHV_IPF payloads are used as allocation sizes and loop bounds without validation. An attacker can supply crafted payloads with mismatche...

CVE-2026-64200

DASYLab is vulnerable to an out-of-bounds read caused by improper validation of user-supplied data during string conversion when parsing a .DSB file. A malformed file can cause a read past the end of an allocated heap buffer. Exploitation requires a local attacker to trick a user into opening a s...

aiohttp: AIOHTTP: Denial of Service via malformed HTTP responses

A flaw was found in AIOHTTP, an asynchronous HTTP client/server framework. This vulnerability involves an out-of-bounds heap read in the C response parser when processing malformed HTTP responses. An attacker operating a malicious server, or even an accidental malformed response, could exploit th...

CVE-2026-64199

CVE-2026-64199 is an out-of-bounds read vulnerability in DASYLab (MEAS X) caused by improper validation of user-supplied data when parsing a .DSB file . Successful exploitation requires a user to open a specially crafted file, making it a local attack vector with no privileges required but user i...

CVE-2026-64198

CVE-2026-64198 is an out-of-bounds read in DASYLab (MEASX) caused by improper validation of user-supplied data during file handling. A read a few bytes past the end of an allocated heap buffer occurs when parsing a .DSB file . Successful exploitation requires a user to open a specially crafted .D...

CVE-2026-64197

CVE-2026-64197 is an out-of-bounds write vulnerability in DASYLab (National Instruments), caused by improper validation of user-supplied data during parsing of .DSB files , resulting in a write past the end of an allocated data structure. Exploitation requires a user to open a specially crafted ....

CVE-2026-64196

DASYLab (NI/MeasurementX) contains an out-of-bounds heap write vulnerability caused by improper validation of user-supplied data during parsing of .DSB files. Successful exploitation requires a local attacker to get a user to open a specially crafted file, yielding High impact on confidentiality,...

CVE-2026-64195

CVE-2026-64195 is an out-of-bounds write vulnerability in DASYLab (by MEAS X), caused by insufficient validation of user-supplied data when parsing a .DSB file . Successful exploitation requires a user to open a specially crafted .DSB file. All versions before 2026.0.0 are affected; updating to 2...

CVE-2022-32932

CVE-2022-32932 : ZinComputeProgramUpdateMutables のダブルフェッチ問題によるOOB書き込み 著者コメント CVE-2022-32932 は、私が ANE カーネルインターフェースで発見した別の脆弱性です。これはダブルフェッチ問題であり、興味深い OOB 書き込みを引き起こします。 分析: H11ANEIn::patchMutableSurface H11ANEIn::ANEProgramSendRequestgated から到達可能 は、model.hwx に可変手続き mutable procedure があり、かつ initInfo...

CVE-2025-24201-WebKit-Vulnerability-Detector-PoC-

CVE-2025-24201 WebKit 취약점 탐지기 PoC 이 PoCproof-of-concept는 WebKit 기반 브라우저가 CVE‑2025‑24201 , 즉 WebGL 구현의 잘못된 기능 검증으로 인해 발생하는 고심각도 범위를 벗어난 쓰기out-of-bounds write 취약점 에 취약한지 여부를 탐지합니다. 🔍 취약점 요약 CVE‑2025‑24201은 WebGLRenderingContextWebGL 1가 GLINVALIDOPERATION 또는 GLINVALIDENUM 오류를 생성하지 않고 WebGL 2에서만 유효한...

CVE-2022-1015-1016

CVE-2022-1015 & CVE-2022-1026 このREADME.mdは、Davidのブログの翻訳です。DavidはLinuxカーネルでCVE-1015および1016を発見しました。原文を読むには彼のウェブサイトをご覧ください。 彼のソーシャルメディアはこちら: Twitter Github nftablesにおけるLinuxの2つの新たな脆弱性の分析 2022年4月2日公開 CVE-2022-1015は、入力引数の検証不足に起因するout-of-boundsアクセスを引き起こし、リモートコード実行やローカル特権昇格につながる可能性があります。...

CVE-2021-44142

CVE-2021-44142 脆弱性チェッカー Samba サーバーが CVE-2021-44142 に対して脆弱かどうかを確認するツール 背景 CVE-2021-44142 は、Pwn2Own Austin 2021 で Western Digital PR4100 に対して使用された、Samba の vfsfruit モジュールにおけるヒープの境界外読み取りおよび書き込みの脆弱性です。この脆弱性は、STAR Labs の Nguyễn Hoàng Thạch 氏と Billy Jheng Bing-Jhong 氏によって最初に発見されました。DEVCORE の Orange Tsai...

CVE-2026-85050

Out of bounds write in WebGL in Google Chrome on on Android prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-85052

Out of bounds read in CrashReporting in Google Chrome prior to 152.0.7977.82 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-85052

A flaw was found in Google Chrome's CrashReporting component. A remote attacker, after compromising the renderer process, could exploit an out-of-bounds read vulnerability by crafting a malicious HTML page. This could lead to information disclosure, allowing the attacker to read memory outside of...

CVE-2025-5777

CVE-2025-5777 일명 CitrixBleed 2은 Citrix Gateway 로그인 프로세스에서의 OOB 읽기입니다. 이것은 취약한 Citrix Gateway 인스턴스로부터 메모리 데이터를 획득하여 쿠키/자격 증명 도난으로 이어질 수 있는 OOBCVE-2025-5777를 악용한 개념 증명입니다. 사용법 스크립트를 사용할 때 venv를 사용하는 것을 적극 권장합니다. root@kitploit: usage: main.py -h -t THREADS -o OUTPUT url positional arguments: url...

CVE-2026-85050

CVE-2026-85050 is an out-of-bounds write in the WebGL component of Google Chrome on Android , affecting versions prior to 152.0.7977.82 . A remote attacker can exploit it via a crafted HTML page to execute arbitrary code outside the sandbox , yielding a CVSS 3.1 score of 9.6 (CRITICAL) with scope...