CVE-2026-21093

Stack-based buffer overflow in PROCA trustlet prior to SMR Sep-2026 Release 1 allows local privileged attackers to write out-of-bounds memory...

CVE-2026-21096

Heap-based buffer overflow in JPEG decoder of libimagecodec.quram.so prior to SMR Sep-2026 Release 1 allows remote attackers to execute arbitrary code...

CVE-2026-21095

Heap-based buffer overflow in DNG decoder of libimagecodec.quram.so prior to SMR Sep-2026 Release 1 allows remote attackers to execute arbitrary code...

CVE-2025-27363-proof-of-concept

Prueba de concepto para CVE-2025-27363 que hace fallar FreeType 2.13.0. Esta modifica Roboto Flex, una fuente variable, de modo que el carácter "%" glifo 8 pasa a ser un glifo compuesto con 0xfffd subglifos. Al renderizar la fuente editada con FreeType 2.13.0 la última versión anterior a la...

CVE-2026-21104

CVE-2026-21104 is a heap-based buffer overflow in the KnoxVault trustlet on Samsung mobile devices, affecting firmware prior to SMR Sep-2026 Release 1 . The flaw allows a local privileged attacker to achieve arbitrary code execution . The CVSS 4.0 base score is 7.1 (HIGH) , with a local attack ve...

EUVD-2026-74645

Heap-based buffer overflow in KnoxVault trustlet prior to SMR Sep-2026 Release 1 allows local privileged attackers to execute arbitrary code...

CVE-2026-21096

Heap-based buffer overflow in JPEG decoder of libimagecodec.quram.so prior to SMR Sep-2026 Release 1 allows remote attackers to execute arbitrary code...

CVE-2026-21096

Heap-based buffer overflow in JPEG decoder of libimagecodec.quram.so prior to SMR Sep-2026 Release 1 allows remote attackers to execute arbitrary code...

EUVD-2026-74637

Heap-based buffer overflow in JPEG decoder of libimagecodec.quram.so prior to SMR Sep-2026 Release 1 allows remote attackers to execute arbitrary code...

EUVD-2026-74636

Heap-based buffer overflow in DNG decoder of libimagecodec.quram.so prior to SMR Sep-2026 Release 1 allows remote attackers to execute arbitrary code...

CVE-2026-21095

Heap-based buffer overflow in DNG decoder of libimagecodec.quram.so prior to SMR Sep-2026 Release 1 allows remote attackers to execute arbitrary code...

CVE-2026-21095

CVE-2026-21095 is a heap-based buffer overflow in the DNG decoder of the libimagecodec.quram.so library on Samsung mobile devices. The vulnerability allows remote attackers to achieve arbitrary code execution by supplying a crafted DNG image file, with the attack vector rated as network-based, lo...

CVE-2026-21093

Stack-based buffer overflow in PROCA trustlet prior to SMR Sep-2026 Release 1 allows local privileged attackers to write out-of-bounds memory...

CVE-2014-0160

CVE-2014-0160 Lab setup using Heartbleed to leak memory from webapps This repo focuses on building a container to create an environment that can easily exploit nginx using the Heartbleed technique, focusing on: Setting up the environment using Docker Server setup diagram Demo steps Server diagram...

CVE-2018-4407-iOS-exploit

CVE-2018-4407 iOS 攻击利用 CVE-2018-4407 是一种简单且非常快速的 BOF 攻击，针对 iOS/mac，可导致 DOS。该漏洞是 XNU 操作系统内核网络代码中的堆缓冲区溢出。XNU 被 iOS 和 macOS 共同使用，因此 iPhone、iPad 和 Macbook 均受影响。 测试环境 macOS High Sierra 10.13.6 Python 3.6 iOS 11.2.6 注意：scapy 需要从 Github 仓库下载并运行 shell 命令 'python3 setup.py install'...

MGASA-2026-0384 Updated spice-vdagent packages fix security vulnerabilities

Integer overflow in udscswrite leading to heap buffer overflow. CVE-2026-57965 Path traversal in file transfer via unsanitized filename. CVE-2026-57966...

Updated spice-vdagent packages fix security vulnerabilities

Integer overflow in udscswrite leading to heap buffer overflow. CVE-2026-57965 Path traversal in file transfer via unsanitized filename. CVE-2026-57966...

CVE-2021-3156

CVE-2021-3156 Rol de Ansible que parchea CVE-2021-3156 para CentOS Introducción Sudo anterior a 1.9.5p2 tiene un desbordamiento de búfer basado en montón, que permite la escalada de privilegios a root mediante "sudoedit -s" y un argumento de línea de comandos que termina con un único carácter de...

CVE-2013-2028_Checker

CVE-2013-2028 - Desbordamiento de búfer en la pila por codificación fragmentada chunked en Nginx HTTP Server 1.3.9-1.4.0 Descripción La función ngxhttpparsechunked en http/ngxhttpparse.c en nginx 1.3.9 hasta 1.4.0 permite a atacantes remotos causar una denegación de servicio bloqueo y ejecutar...

kernel: scsi: target: iscsi: Validate CHAP_R length before base64 decode

A flaw was found in the Linux kernel's iSCSI target functionality. This vulnerability allows a remote attacker to cause a buffer overflow by sending a specially crafted Challenge-Handshake Authentication Authentication Protocol CHAP response. The system fails to validate the length of the...