CVE-2026-104115

The illumos reparse point daemon (reparsed ) is vulnerable to a stack-based buffer overflow in the nfs-basic reparse plugin . The get_fs_locations() function in libnfs_basic.c fails to perform bounds checking when copying host and path components of a reparse string into a fixed 1024-byte stack b...

EUVD-2026-95804

A stack-based buffer overflow in the illumos reparse point daemon reparsed allows a local user to crash the daemon. getfslocations in usr/src/cmd/fs.d/nfs/rpbasic/libnfsbasic.c, part of the nfs-basic reparse plugin, copies the host and path components of a reparse string into a fixed 1024-byte...

CVE-2026-104115 Stack buffer overflow in illumos reparsed nfs-basic plugin allows local users to crash the daemon

A stack-based buffer overflow in the illumos reparse point daemon reparsed allows a local user to crash the daemon. getfslocations in usr/src/cmd/fs.d/nfs/rpbasic/libnfsbasic.c, part of the nfs-basic reparse plugin, copies the host and path components of a reparse string into a fixed 1024-byte...

CVE-2026-104115 Stack buffer overflow in illumos reparsed nfs-basic plugin allows local users to crash the daemon

A stack-based buffer overflow in the illumos reparse point daemon reparsed allows a local user to crash the daemon. getfslocations in usr/src/cmd/fs.d/nfs/rpbasic/libnfsbasic.c, part of the nfs-basic reparse plugin, copies the host and path components of a reparse string into a fixed 1024-byte...

CVE-2024-27815

CVE-2024-27815 Débordement de tampon du noyau XNU. Introduit dans xnu-10002.1.13, corrigé dans xnu-10063.121.3. Analyse : https://jprx.io/cve-2024-27815 gcc TURPENTINE.c -o TURPENTINE ./TURPENTINE Empreinte $ sha256sum TURPENTINE.c f7160a6ad7d52f32d64b86cf3006c98a217954d80c3fc71a8f27595e227d0fa0...

cve-2022-27255

CVE-2022-27255 - Débordement de tampon dans SIP ALG du SDK Realtek eCos Ce dépôt contient les supports de la présentation "Exploring the hidden attack surface of OEM IoT devices: pwning thousands of routers with a vulnerability in Realtek’s SDK for eCos OS.", présentée au DEFCON30. Le contenu de ...

CVE-2025-0282-Ivanti-exploit

CVE-2025-0282-Ivanti-exploit CVE-2025-0282 est une vulnérabilité critique trouvée dans Ivanti Connect Secure, permettant l'exécution de commandes à distance RCE via une exploitation de débordement de tampon. Cette vulnérabilité permet aux attaquants de télécharger des fichiers malveillants par...

NGINX-ngx_http_rewrite_module-heap-buffer-overflow-CVE-2026-9256

CVE-2026-9256 NGINX ngxhttprewritemodule : dérivation du PoC et réflexions Champ d'application : à utiliser uniquement sur des environnements de test locaux, des environnements de reproduction autorisés, pour la validation de vulnérabilités et l'analyse de règles de protection. Ne pas utiliser su...

CVE-2026-106437

A flaw was found in mongo-c-driver. An attacker who can influence the buffer length supplied by an embedding application can trigger an integer underflow by passing an undersized value to the Binary JSON BSON buffer-reservation function. This issue leads to out-of-bounds memory reads and writes...

CVE-2022-48474_CVE-2022-48475

CVE-2022-48474 & CVE-2022-48475 PoC et exploits pour CVE-2022-48474 et CVE-2022-48475 « Control de Ciber » est un logiciel de gestion de cybercafé. Plusieurs vulnérabilités de déni de service DoS dans les versions antérieures à 1.650. Un attaquant distant non authentifié peut envoyer une requête...

CVE-2026-96396

The Affinity by Canva application for macOS before 3.3.1 October 2026 release did not safely calculate the size of an image buffer when generating QuickLook thumbnails and previews of Affinity document files, leading to an integer overflow and a heap-based buffer overflow. A threat actor could...

CVE-2026-101130

The Affinity by Canva application before 3.3.1 October 2026 release did not perform adequate bounds checking when parsing arrays of strings in Affinity document files, leading to a heap buffer over-read. A threat actor could craft an Affinity document that, when opened by a user in Affinity, coul...

CVE-2026-101094

The Affinity by Canva application before 3.3.1 October 2026 release did not correctly handle incomplete UTF-8 character sequences when parsing text in Affinity document files, leading to a heap buffer over-read. A threat actor could craft an Affinity document that, when opened by a user in...

PoC-CVE-2025-69419

CVE-2025-69419 – Reproducteur de dépassement de tampon de tas OpenSSL Aperçu Ce dépôt contient un reproducteur minimal de preuve de concept pour la CVE-2025-69419 affectant les versions vulnérables d'OpenSSL. Le PoC démontre l'écriture hors limites de tas signalée pour PKCS12getfriendlyname lors ...

CVE-2022-24903-Heap-based-buffer-overflow-Hand-On-Lab

Laboratoire pratique CVE-2022-24903 Auteur : Andrew Beshay Mousa Un atelier pratique illustrant la vulnérabilité de débordement de tampon du tas dans rsyslog. Un environnement de laboratoire pratique pour reproduire et comprendre la vulnérabilité de débordement de tampon du tas de rsyslog...

CVE-2017-15950

CVE-2017-15950 Exploit PoC pour la vulnérabilité CVE-2017-15950 SyncBreeze XML Parser et/ou fonctionnalité Sync Stack-Based Buffer Overflow. Utilisation Lors de l'exécution du générateur de payload XML, le script générera un fichier XML xplSyncBreeze.xml contenant le payload à importer via...

CVE-2026-101130

The Affinity by Canva application (versions prior to 3.3.1 , October 2026 release) is vulnerable to a heap buffer over-read due to inadequate bounds checking when parsing arrays of strings in Affinity document files. Specifically, the flaw exists in Kernel::InSerialiser::LoadTypes involving a pro...

EUVD-2026-95753

The Affinity by Canva application before 3.3.1 October 2026 release did not perform adequate bounds checking when parsing arrays of strings in Affinity document files, leading to a heap buffer over-read. A threat actor could craft an Affinity document that, when opened by a user in Affinity, coul...

CVE-2026-101130

The Affinity by Canva application before 3.3.1 October 2026 release did not perform adequate bounds checking when parsing arrays of strings in Affinity document files, leading to a heap buffer over-read. A threat actor could craft an Affinity document that, when opened by a user in Affinity, coul...

CVE-2026-101094

The Affinity by Canva application, prior to version 3.3.1 (October 2026 release), contains an unbounded over-read vulnerability in Story::GlyphString::Add . The issue stems from the software's failure to correctly handle incomplete UTF-8 character sequences while parsing text within Affinity docu...