CVE-2026-42945

🛡️ CVE-2026-42945 - NGINX Rift Kritischer Heap-basierter Pufferüberlauf in NGINX 📌 Übersicht CVE-2026-42945 auch bekannt als NGINX Rift ist eine kritische Sicherheitslücke im ngxhttprewritemodule von NGINX. Typ : Heap-basierter Pufferüberlauf CWE-122 Entdeckt : Mai 2026 Existierte seit : 18 Jahren...

CVE-2014-0160

CVE-2014-0160 Heartbleed का उपयोग करके वेबऐप्स की मेमोरी लीक करने के लिए लैब सेटअप यह रिपॉजिटरी एक कंटेनर बनाने पर केंद्रित है जो nginx का शोषण करने के लिए Heartbleed तकनीक का उपयोग करके आसान वातावरण प्रदान करती है: Docker का उपयोग करके वातावरण सेटअप सर्वर सेटअप का आरेख डेमो चरण सर्वर आरेख...

CVE-2017-7269

CVE-2017-7269 भेद्यता संख्या: CVE-2017-7269 खोजकर्ता: Zhiniang Peng और Chen Wu दक्षिण चीन प्रौद्योगिकी विश्वविद्यालय, सूचना सुरक्षा प्रयोगशाला, कंप्यूटर विज्ञान और इंजीनियरिंग स्कूल भेद्यता विवरण: IIS 6.0 में डिफ़ॉल्ट रूप से WebDAV सक्षम नहीं है, लेकिन यदि WebDAV समर्थन सक्षम किया जाता है, तो IIS...

ioctlance

IOCTLance Description Presented at CODE BLUE 2023, this project titled Enhanced Vulnerability Hunting in WDM Drivers with Symbolic Execution and Taint Analysis introduces IOCTLance, a tool that enhances its capacity to detect various vulnerability types in Windows Driver Model WDM drivers. In a...

DEBIAN-CVE-2026-77652

A heap-based buffer overflow vulnerability exists in the Dia diagram editor WPG file format importer. In plug-ins/wpg/wpg-import.c, the WPG import renderer allocates a fixed palette with: ren-pPal = gnew0WPGColorRGB, 256; When handling a WPGCOLORMAP record, the parser reads a start index i16 and...

CVE-2026-68863

Dell PowerProtect One, versions 20.1.0.0 and below, contain a Stack-based Buffer Overflow vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Denial of service...

CVE-2026-41089

🚨 CVE-2026-41089 - Exécution de code à distance RCE critique via Netlogon Windows ⚠️ Une vulnérabilité critique du service Netlogon Windows permettant une exécution de code à distance non authentifiée sur les contrôleurs de domaine. 📖 Présentation CVE-2026-41089 est une vulnérabilité critique...

CVE-2026-77652 Dia: dia: heap buffer overflow in wpg colormap parser via out-of-bounds palette index

A heap-based buffer overflow vulnerability exists in the Dia diagram editor WPG file format importer. In plug-ins/wpg/wpg-import.c, the WPG import renderer allocates a fixed palette with: ren-pPal = gnew0WPGColorRGB, 256; When handling a WPGCOLORMAP record, the parser reads a start index i16 and...

EUVD-2026-66675

A heap-based buffer overflow vulnerability exists in the Dia diagram editor WPG file format importer. In plug-ins/wpg/wpg-import.c, the WPG import renderer allocates a fixed palette with: ren-pPal = gnew0WPGColorRGB, 256; When handling a WPGCOLORMAP record, the parser reads a start index i16 and...

CVE-2026-77652

A heap-based buffer overflow in the Dia diagram editor's WPG file importer (plug-ins/wpg/wpg-import.c ) allows out-of-bounds writes into a fixed 256-entry color palette. The WPG_COLORMAP record handler validates the start index only against the WPG record size, not the palette capacity, so a craf...

EUVD-2026-66665

Dell PowerProtect One, versions 20.1.0.0 and below, contain a Stack-based Buffer Overflow vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Denial of service...

CVE-2026-68863

Dell PowerProtect One versions 20.1.0.0 and below contain a Stack-based Buffer Overflow vulnerability. An unauthenticated attacker with remote network access can exploit it with low complexity and no user interaction, resulting in Denial of Service . The CVSS 3.1 score is 7.5 (HIGH) , reflecting ...

CVE-2026-68863

Dell PowerProtect One, versions 20.1.0.0 and below, contain a Stack-based Buffer Overflow vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Denial of service...

CVE-2026-79216

A flaw was found in Blink, a rendering engine used in Google Chrome. A remote attacker, who has already compromised the renderer process, could exploit a buffer overflow vulnerability by crafting a malicious HTML page. This could lead to the execution of arbitrary code within the browser's sandbo...

CVE-2026-14664

A flaw was found in PostgreSQL. A heap buffer overflow vulnerability exists in the regexp component, which can be triggered by a query author providing text that does not pass encoding validation. This can lead to unanticipated data growth, allowing the attacker to execute arbitrary code as the...

AZL-97809 CVE-2026-80580 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: fbdev: bound mode sysfs output to the sysfs buffer modestring uses snprintf which can return a value larger than the remaining buffer space. showmodes accumulates the return value into i without checking whether i has reached...

CVE-2026-80580

In the Linux kernel, the following vulnerability has been resolved: fbdev: bound mode sysfs output to the sysfs buffer modestring uses snprintf which can return a value larger than the remaining buffer space. showmodes accumulates the return value into i without checking whether i has reached...

CVE-2026-80570

In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - zero report size on F54 work error In rmif54work, if an error occurs during report request or command verification, the code jumped directly to the 'error' label, bypassing the 'abort' label where...

CVE-2026-80568

In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - block sinput when F54 queue is busy Changing the input diagnostic report type mid-stream changes the report size. Since V4L2 buffers are allocated based on the size at stream start, changing the input whil...

AZL-97803 CVE-2026-80569 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - bound the F54 report size to the allocated buffer rmif54work reads a diagnostics report from the device into f54-reportdata, sizing the transfer with rmif54getreportsize: reportsize = rmif54getreportsizef5...