CVE-2026-81625

CVE-2026-81625 is a stack buffer overflow in Greenbone OS and openvas-scanner . A remote attacker with user privileges can execute a malicious or compromised NASL vulnerability test (VT) to trigger the overflow, potentially gaining full access to the system. The vulnerability is rated HIGH with a...

EUVD-2026-66955

A remote attacker with user privileges may use a malicious or compromised NASL vulnerability test VT on the affected products to trigger a stack buffer overflow and gain full access on the compromised system...

CVE-2025-54574-Squid-Heap-Buffer-Overflow

CVE-2025-54574-Squid-Heap-Buffer-Overflow Vulnerabilità trovata su Squid Proxy. CVE-2025-54574 — Overflow critico del buffer heap in Squid Proxy Questo repository documenta il processo di scoperta, analisi e divulgazione responsabile di CVE-2025-54574, un overflow critico del buffer heap in Squid...

CVE-2026-33147

CVE-2026-33147 CVE-2026-33147 Stack-based Buffer Overflow in gmtremotedatasetid Riepilogo È stata identificata una vulnerabilità di buffer overflow basato su stack nella funzione gmtremotedatasetid all'interno di src/gmtremote.c. Il problema si verifica quando una stringa lunga appositamente...

CVE-2026-80545

A flaw was found in the Linux kernel's s390/zcrypt component. This vulnerability stems from insufficient input validation in the xcrbmsgtotype6ep11cprbmsgx function when handling EP11 Cryptographic Coprocessor Request Block CPRB messages. A local attacker could exploit this by crafting a maliciou...

CVE-2026-32743-PX4-Autopilot-MavlinkLogHandler-Stack-Buffer-Overflow-DoS-

CVE-2026-32743 - Estouro de Buffer na Pilha do MavlinkLogHandler do PX4 Autopilot DoS -orange -blue 📜 Descrição CVE-2026-32743 é um estouro de buffer baseado em pilha no MavlinkLogHandler das versões ≤1.17.0-rc2 do PX4 Autopilot. O buffer LogEntry.filepath tem apenas 60 bytes , mas sscanf analisa...

CVE-2026-32707-PX4-Autopilot-tattu_can-Stack-Buffer-Overflow-DoS-

-orange CVE-2026-32707 - PX4-Autopilot tattucan Stack Buffer Overflow DoS root@kitploit: ╔════════════════════════════════════════════════════════════════════════════════════════════╗ ║ ║ ║ ██████╗ █████╗ ███╗ ██╗██╗ ██╗ █████╗ ███╗ ███╗███████╗██████╗ ║ ║ ██╔══██╗██╔══██╗████╗ ██║╚██╗...

blue-team-capstone

blue-team-capstone CVSS-Berechnung der Adobe Acrobat Buffer-Overflow-Schwachstelle...

CVE-2026-29628

CVE-2026-29628 overflow del buffer nel parser sperimentale di tinyobjloader Riepilogo Overflow del buffer basato su stack in https://github.com/tinyobjloader/tinyobjloader, che interessa solo la versione sperimentale e può portare a risultati imprevisti. Versioni interessate tinyobjloader è...

CVE-2015-8522.RCE

CVE-2015-8522 L'applicazione Tivoli FastBack Server 6.1.4 è vulnerabile a un buffer overflow basato sullo stack che consente agli attaccanti di ottenere esecuzione arbitraria di codice ACE tramite una connessione TCP remota. Il PoC fornito in questo repository sfrutta questa vulnerabilità sia per...

badblood

Bad Blood Bad Blood è un exploit per CVE-2021-20038, un buffer overflow basato su stack nel binario httpd dei sistemi della serie SMA-100 con versioni firmware 10.2.1.x. Ho scritto molti dei dettagli tecnici qui: AttackerKB CVE-2021-20038 L'exploit, così com'è scritto, aprirà una shell telnet bin...

CVE-2026-1457

CVE-2026-1457: TP-Link VIGI C385 Esecuzione Remota di Codice Autenticata Panoramica CVE-2026-1457 è una vulnerabilità di buffer overflow autenticato nell'API web di TP-Link VIGI C385 V1. Questa vulnerabilità consente ad attaccanti autenticati di eseguire codice in remoto RCE. Punteggio CVSS v4.0:...

CVE-2026-80546

A flaw was found in the Linux kernel's s390/zcrypt component, specifically within the xcrbmsgtotype6cprbmsgx function. This vulnerability is due to insufficient input validation, which can lead to integer overflows during memory allocation and arithmetic operations, as well as a lack of minimum...

CVE-2025-46819

CVE-2025-46819 – Lettura fuori dai limiti del delimitatore di stringhe lunghe Lua in Redis Un delimitatore di stringhe lunghe malformato causa una lettura fuori dai limiti del lexer Lua su Redis 8.2.1. Panoramica Il parser di stringhe lunghe di Lua in Redis 8.2.1 gestisce erroneamente sequenze =...

EUVD-2026-66495

In the Linux kernel, the following vulnerability has been resolved: fbdev: bound mode sysfs output to the sysfs buffer modestring uses snprintf which can return a value larger than the remaining buffer space. showmodes accumulates the return value into i without checking whether i has reached...

EUVD-2026-66483

In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - block sinput when F54 queue is busy Changing the input diagnostic report type mid-stream changes the report size. Since V4L2 buffers are allocated based on the size at stream start, changing the input whil...

EUVD-2026-66484

In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - bound the F54 report size to the allocated buffer rmif54work reads a diagnostics report from the device into f54-reportdata, sizing the transfer with rmif54getreportsize: reportsize = rmif54getreportsizef5...

EUVD-2026-66485

In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - zero report size on F54 work error In rmif54work, if an error occurs during report request or command verification, the code jumped directly to the 'error' label, bypassing the 'abort' label where...

EUVD-2026-66461

In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Improve CCA CPRB length and overflow checks The xcrbmsgtotype6cprbmsgx function lacks proper input validation, creating security vulnerabilities: 1. Integer overflow after CEIL4 alignment: Signed int variables could...

EUVD-2026-66460

In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Improve EP11 CPRB length and overflow checks The xcrbmsgtotype6ep11cprbmsgx function lacks proper input validation, creating security vulnerabilities: 1. Missing minimum size validation: The ep11cprb structure and...