CVE-2026-77658

A stack-based buffer overflow vulnerability exists in the Dia diagram editor when processing Network Bus objects from Dia XML project files. In objects/network/bus.c, busload reads the number of bus handles from the file attribute "bushandles" using attributenumdata without validating an upper...

CVE-2026-78891

A flaw was found in WebRTC in Google Chrome. A buffer overflow vulnerability allows a remote attacker to execute arbitrary code within the sandbox environment by enticing a user to visit a specially crafted HTML page. This could lead to unauthorized control over the affected system...

CVE-2026-77658

A stack-based buffer overflow vulnerability exists in the Dia diagram editor when processing Network Bus objects from Dia XML project files. In objects/network/bus.c, busload reads the number of bus handles from the file attribute "bushandles" using attributenumdata without validating an upper...

CVE-2026-77532

A malicious actor with access to an adjacent network could exploit a Buffer Overflow vulnerability found in a DHCPv6-enabled EdgeMAX EdgeSwitch to initiate a Remote Code Execution on such device...

CVE-2026-77532

A malicious actor with access to an adjacent network could exploit a Buffer Overflow vulnerability found in a DHCPv6-enabled EdgeMAX EdgeSwitch to initiate a Remote Code Execution on such device...

CVE-2026-77532

A Buffer Overflow vulnerability in the DHCPv6 functionality of Ubiquiti EdgeMAX EdgeSwitch devices allows an unauthenticated actor on an adjacent network to achieve Remote Code Execution . The CNA-assigned CVSS 3.1 score is 9.6 (CRITICAL) , with low attack complexity, no required privileges or us...

FreeRDP: FreeRDP: Remote code execution or denial of service via audio input integer overflow

A flaw was found in FreeRDP, an open-source implementation of the Remote Desktop Protocol RDP. This vulnerability, an integer overflow in the audio input redirection channel, allows a remote attacker to supply a malicious FramesPerPacket value. This can lead to a heap-based buffer overflow,...

Vulnerabilities in DrayTek VigorSwitch

DrayTek has addressed several vulnerabilities in the VigorSwitch product line. These vulnerabilities primarily involve command injection, buffer overflows, null pointer dereferencing, directory traversal, and insufficient authorization checks in various functions of the DrayTek VigorSwitch device...

sqlite: SQLite: Arbitrary code execution and crash via heap-based buffer overflow in FTS5

A flaw was found in SQLite, specifically within its FTS5 full-text search extension. Attackers can exploit a heap-based buffer overflow by providing a specially crafted database. This crafted database contains malicious metadata that triggers an integer underflow during FTS5 MATCH query processin...

sqlite: SQLite: Arbitrary code execution via crafted FTS5 full-text search data

A flaw was found in SQLite's FTS5 full-text search extension. This vulnerability involves memory corruption, specifically an out-of-bounds read and a heap buffer overflow, which can be triggered by supplying a crafted database with malformed FTS5 page data. When an FTS5 MATCH query is executed...

Important: Red Hat Security Advisory: sqlite security update

An update for sqlite is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

CVE-2025-5548

🐞 CVE-2025-5548: Overflow del Buffer in FreeFloat FTP Server 1.0 Ricerca professionale e sviluppo di exploit per un classico overflow del buffer basato sullo stack in FreeFloat FTP Server 1.0. Questo laboratorio dimostra il passaggio dal reverse engineering binario a un RCE completamente...

baron-samedit

Prova de Conceito Baron Samedit Descrição Este é um exploit de Prova de Conceito PoC para a vulnerabilidade Baron Samedit CVE-2021-3156 testado no Ubuntu 20.04 com a versão 1.8.31 do sudo e versão 2.31 da glibc. O exploit aproveita um estouro de buffer baseado em heap no tratamento de argumentos ...

CTFs

Writeup di CTF Ciao, sono Sean e mi piace fare problemi CTF nel mio tempo libero. La mia attuale posizione mi porta a fare molto binary exploitation e reverse engineering del software, quindi tendo a concentrarmi su queste categorie. La maggior parte dei writeup che vedo online fanno schifo e spe...

CVE-2018-20343

CVE-2018-20343 Questa è una PoC per CVE-2018-20343, una vulnerabilità nel Build Engine di Ken Silverman. Il file .map generato innesca un buffer overflow e sovrascrive lo stack come mostrato di seguito: Open Watcom sotto DosBox 0.74-2: l'analista controlla lo stack Sotto FreeDos 1.2: l'analista...

Review.CVE-2021-3156

👑 CVE-2021-3156 Baron Samedit — Escalation dei privilegi tramite heap overflow in sudo 📅 Data: 2025-06-08 ✍️ Autore: @TopskiyPavelQwertyGang 🧠 Ricercatore di sicurezza | Appassionato di Red Team 🧠 Panoramica CVE CVE-ID: CVE-2021-3156 Tipo: Heap-based Buffer Overflow Componente: sudoedit sudo...

ROOT-OS-DEBIAN-12-CVE-2026-55973 CVE-2026-55973 in unbound - Patched by Root

Root has patched CVE-2026-55973 in the unbound package for Root:Debian:12. Multiple fixed versions available...

CVE-2026-58097

mpSetEnddisc copied a user-supplied PSN endpoint value without length validation, allowing a buffer overflow via the ppp8 command interface. A local user with access to the ppp8 command interface can crash ppp8 or potentially execute arbitrary code as root...

CVE-2026-58095

mpEnddisc used incorrect length calculations when formatting endpoint discriminator addresses for display, allowing a received endpoint option to overflow a global result buffer. A malicious PPP peer can crash ppp8 or potentially execute arbitrary code as root...

gstreamer1-plugins-base security update

An update is available for gstreamer1-plugins-base. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list GStreamer is a streaming media framework based on graphs of...