CVE-2019-18634-writeup

Analisi della CVE-2019-18634 https://www.exploit-db.com/exploits/47995 Sudo 1.8.25p - 'pwfeedback' Buffer Overflow PoC L'opzione pwfeedback di Sudo può essere utilizzata per fornire un feedback visivo quando l'utente inserisce la propria password. Ad ogni pressione di un tasto, viene stampato un...

CVE-2026-0300

PAN-OS CVE-2026-0300 Nicht-destruktives Expositions-Survey-Tool Überblick Dieses Tool ist ein nicht-destruktives Expositions-Survey-Dienstprogramm zur Bewertung, ob ein Ziel-PAN-OS-Dienst netzwerkzugängliche Oberflächen im Zusammenhang mit CVE-2026-0300 exponiert. Das Tool ist für autorisierte...

PAN-OS-User-ID-Buffer-Overflow-PoC

🛡️ CVE-2026-0300: Analisi RCE del Portale User-ID™ di PAN-OS Proof-of-Concept di Ricerca: CWE-787 Scrittura Fuori dai Limiti 📌 Panoramica CVE-2026-0300 è una vulnerabilità di buffer overflow ad alta gravità identificata nel Portale di Autenticazione User-ID™ Captive Portal di Palo Alto Networks...

CVE-2026-34159-Vulnerability-Research-Analysis-Detection

CVE-2026-34159-Ricerca-Analisi-Rilevamento-Vulnerabilità Bypass critico della validazione del buffer in deserializetensor llama.cpp b8492. Il buffer tensore nullo salta il controllo dei limiti, consentendo R/W arbitrario non autenticato tramite GRAPHCOMPUTE. Bypass ASLR + RCE su TCP 50052...

CVE-2026-31431-mitigacion

CVE-2026-31431 — Analisi Tecnica Completa Classificazione: Local Privilege Escalation LPE — Kernel Linux CVSS: 7.8 Alto Impatto: utente senza privilegi → root Modulo interessato: algifaead sottosistema AFALG del kernel Indice 1. Perché è vulnerabile? 2. Quali versioni sono interessate? 3. Come...

cve-2026-31431-algif-aead-remediator

CVE-2026-31431 / GHSA-2274-3hgr-wxv6 — Remediatore algifaead Gravità: Alta CVSS 7.8 — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Contesto CVE-2026-31431 è una vulnerabilità di escalation dei privilegi locale nel modulo algifaead del kernel Linux interfaccia socket crittografica AFALG AEAD. Un...

cve-2026-0300-audit

Strumenti di Audit per CVE-2026-0300 Strumenti di audit in sola lettura per CVE-2026-0300 — il buffer overflow non autenticato nel Portale di Autenticazione User-ID di PAN-OS precedentemente noto come "Captive Portal" sui firewall delle serie PA e VM. Questo repository accompagna l'advisory di...

CVE-2026-106437

The BSON buffer-reservation API in the MongoDB C Driver can record a length smaller than the five-byte BSON minimum. Later append or comparison operations can underflow unsigned length calculations and read or write outside the document buffer. An actor who can influence the length supplied by an...

CVE-2026-82335 IBM Guardium Data Protection Buffer Overflow

IBM Guardium Data Protection 12.0, 12.1, 12.2 is vulnerable to a heap-based buffer overflow in the MongoDB protocol parser. A remote attacker could send a specially crafted MongoDB SCRAM username containing an excessive length and cause memory corruption, potentially resulting in denial of servic...

CVE-2026-82335

IBM Guardium Data Protection versions 12.0, 12.1, and 12.2 are vulnerable to a heap-based buffer overflow within the Sniffer component 's MongoDB protocol parser. A remote attacker can exploit this by sending a specially crafted MongoDB SCRAM username with an excessive length, leading to memory c...

EUVD-2026-95247

IBM Guardium Data Protection 12.0, 12.1, 12.2 is vulnerable to a heap-based buffer overflow in the MongoDB protocol parser. A remote attacker could send a specially crafted MongoDB SCRAM username containing an excessive length and cause memory corruption, potentially resulting in denial of servic...

CVE-2026-82344 IBM Guardium Data Protection Buffer Overflow

IBM Guardium Data Protection 12.0, 12.1 is vulnerable to a heap-based buffer overflow in the S-TAP TrafficTap TDS login reassembly functionality. An unauthenticated remote attacker can send crafted TDS login fragments that exceed the fixed-size reassembly buffer, potentially resulting in denial o...

EUVD-2026-95246

IBM Guardium Data Protection 12.0, 12.1 is vulnerable to a heap-based buffer overflow in the S-TAP TrafficTap TDS login reassembly functionality. An unauthenticated remote attacker can send crafted TDS login fragments that exceed the fixed-size reassembly buffer, potentially resulting in denial o...

CVE-2026-82344

IBM Guardium Data Protection versions 12.0, 12.1, and 12.2 are vulnerable to a heap-based buffer overflow within the S-TAP TrafficTap TDS login reassembly functionality. An unauthenticated remote attacker can exploit this by sending crafted TDS login fragments that exceed the fixed-size reassembl...

CVE-2026-106432

The MongoDB PHP Driver contains a heap buffer overflow vulnerability within its BSON encoder . The root cause is the conversion of string lengths to 32-bit values without proper validation; when encoding strings near 4 GiB , the allocation size can wrap while the copy operation maintains the orig...

CVE-2026-106432 Heap buffer overflow via 32-bit string-length truncation in MongoDB PHP Driver

The BSON encoder in the MongoDB PHP Driver converts a string length to a 32-bit value without validation. When an affected application encodes a string near 4 GiB, the allocation size can wrap while the copy operation uses the original length. The resulting heap buffer overflow can corrupt proces...

Heap buffer overflow via 32-bit string-length truncation in MongoDB PHP Driver

The BSON encoder in the MongoDB PHP Driver converts a string length to a 32-bit value without validation. When an affected application encodes a string near 4 GiB, the allocation size can wrap while the copy operation uses the original length. The resulting heap buffer overflow can corrupt proces...

DiagSpill

DiagSpill CVE-2026-74469 Writeup !WARNING Der PoC wird ausschließlich bereitgestellt, um Verteidigern, Maintainern und autorisierten Sicherheitsteams dabei zu helfen, Patches, Gegenmaßnahmen, Erkennungen und Exposition auf Systemen zu validieren, die sie besitzen oder für deren Test sie...

CVE-2021-3156-Sudo-Buffer-Overflow-Linux

CVE-2021-3156 – Overflow del Buffer di Sudo Linux Exploit di Escalation dei Privilegi Baron Samedit 📌 Panoramica Questo progetto dimostra lo sfruttamento di CVE-2021-3156 Baron Samedit , una vulnerabilità critica di overflow del buffer basato su heap nell'utilità Linux sudo. La vulnerabilità...

CVE-2025-5548

🧪 Laboratorio di Buffer Overflow su FreeFloat FTP Server CVE-2025-5548 📌 Descrizione Questo laboratorio dimostra come sfruttare una vulnerabilità di Stack Buffer Overflow in FreeFloat FTP Server , identificata come CVE-2025-5548. L'obiettivo è comprendere il processo completo di sfruttamento in...