EUVD-2026-95153

The BSON buffer-reservation API in the MongoDB C Driver can record a length smaller than the five-byte BSON minimum. Later append or comparison operations can underflow unsigned length calculations and read or write outside the document buffer. An actor who can influence the length supplied by an...

CVE-2026-106437

The BSON buffer-reservation API in the MongoDB C Driver can record a length smaller than the five-byte BSON minimum. Later append or comparison operations can underflow unsigned length calculations and read or write outside the document buffer. An actor who can influence the length supplied by an...

CVE-2026-106437

The MongoDB C Driver contains an out-of-bounds read and write vulnerability within its BSON buffer-reservation API. The root cause is an integer underflow (CWE-191) that occurs when the API records a length smaller than the five-byte BSON minimum. Subsequent append or comparison operations can tr...

CVE-2026-106437 Out-of-bounds read and write via undersized BSON buffer reservation in MongoDB C Driver

The BSON buffer-reservation API in the MongoDB C Driver can record a length smaller than the five-byte BSON minimum. Later append or comparison operations can underflow unsigned length calculations and read or write outside the document buffer. An actor who can influence the length supplied by an...

Out-of-bounds read and write via undersized BSON buffer reservation in MongoDB C Driver

The BSON buffer-reservation API in the MongoDB C Driver can record a length smaller than the five-byte BSON minimum. Later append or comparison operations can underflow unsigned length calculations and read or write outside the document buffer. An actor who can influence the length supplied by an...

CVE-2026-106431

The MongoDB C Driver contains a one-byte heap buffer overflow in the BSON bulk document writer . An off-by-one error allows a zero byte to be written past a heap allocation when a document ends at a specific buffer boundary. This vulnerability can lead to process memory corruption or a process te...

CVE-2026-106431 One-byte heap buffer overflow in BSON bulk document writer in MongoDB C Driver

An off-by-one error in the BSON bulk document writer in the MongoDB C Driver can write one zero byte immediately past a heap allocation when a document ends at a specific buffer boundary. An actor who can influence the size of documents serialized by an embedding application can corrupt adjacent...

One-byte heap buffer overflow in BSON bulk document writer in MongoDB C Driver

An off-by-one error in the BSON bulk document writer in the MongoDB C Driver can write one zero byte immediately past a heap allocation when a document ends at a specific buffer boundary. An actor who can influence the size of documents serialized by an embedding application can corrupt adjacent...

CVE-2021-1965

CVE-2021-1965 CVE-2021-1965 WiFi Zero Click RCE Trigger PoC Dies ist ein schneller und unsauberer Proof-of-Concept-Code, um zu überprüfen, ob dein Telefon verwundbar ist. Nach dem Ausführen des PoC-Codes sollte dein Telefon innerhalb von Sekunden abstürzen und neu starten. Falls du weitere...

CVE-2026-33147

CVE-2026-33147 CVE-2026-33147 Stack-basierter Pufferüberlauf in gmtremotedatasetid Zusammenfassung Eine Schwachstelle mit stack-basiertem Pufferüberlauf wurde in der Funktion gmtremotedatasetid innerhalb von src/gmtremote.c identifiziert. Dieses Problem tritt auf, wenn eine speziell konstruierte...

badblood

Bad Blood Bad Blood ist ein Exploit für CVE-2021-20038, einen stack-basierten Pufferüberlauf in der httpd-Binärdatei von SMA-100-Serien-Systemen mit Firmware-Versionen 10.2.1.x. Ich habe viele der technischen Details hier dokumentiert: AttackerKB CVE-2021-20038 Der Exploit öffnet, wie geschrieben...

CVE-2026-32707-PX4-Autopilot-tattu_can-Stack-Buffer-Overflow-DoS-

-orange CVE-2026-32707 - Estouro de Buffer na Pilha do tattucan do PX4-Autopilot DoS ╔════════════════════════════════════════════════════════════════════════════════════════════╗ ║ ║ ║ ██████╗ █████╗ ███╗ ██╗██╗ ██╗ █████╗ ███╗ ███╗███████╗██████╗ ║ ║ ██╔══██╗██╔══██╗████╗ ██║╚██╗...

CVE-2026-32743-PX4-Autopilot-MavlinkLogHandler-Stack-Buffer-Overflow-DoS-

CVE-2026-32743 - PX4 Autopilot MavlinkLogHandler Stack Buffer Overflow DoS -orange -blue 📜 Beschreibung CVE-2026-32743 ist ein stack-basierter Pufferüberlauf im MavlinkLogHandler der PX4 Autopilot-Versionen ≤1.17.0-rc2. Der LogEntry.filepath-Puffer ist nur 60 Bytes groß, aber sscanf parst...

CVE-2026-29628

CVE-2026-29628 Pufferüberlauf im experimentellen Parser von tinyobjloader Zusammenfassung Stapelbasierter Pufferüberlauf in https://github.com/tinyobjloader/tinyobjloader, der nur die experimentelle Version betrifft und zu unerwarteten Ergebnissen führen kann. Betroffene Versionen tinyobjloader i...

blue-team-capstone

Blue Team Capstone Project Overview This project is a Blue Team cybersecurity capstone focused on vulnerability assessment, risk evaluation, and remediation. The assessment focuses on CVE-2009-0658 , a vulnerability affecting Adobe Acrobat and Reader. The goal of the project was to evaluate the...

CVE-2026-7482

🚨 CVE-2026-7482: Heap Buffer Over-Read in Ollama 📝 Beschreibung Die CVE-2026-7482 identifiziert eine kritische Heap-Puffer-Überlese-Schwachstelle Heap Buffer Over-Read in den Endpunkten /api/create und /api/push von Ollama , einem Open-Source-Framework zur Ausführung lokaler Sprachmodelle. Diese...

CVE-2026-28858

⚠️ CVE-2026-28858 — Buffer Overflow in Apple iOS/iPadOS ╔══════════════════════════════════════════════════════════════╗ ║ SEVERITÄT: KRITISCH │ CVSS: 9.8 │ CWE-120 │ REMOTE ║ ╚══════════════════════════════════════════════════════════════╝ Ein entfernter Benutzer kann ohne Benutzerinteraktion ode...

CVE-2026-4747

/ /\ \ / / | | \ / \ \ \ \ | || | || || \ | | \ \ / /| | | | | | | \ \ | | / /| || | | | | \ V / | ||| / /| || / / \ \ | || | / / | |/ / | / | ||/| \ / // |||| CVE-2026-4747 — FreeBSD Remote Kernel RCE Stack Buffer Overflow inkgssapi.ko → Root Shell in 4 Stunden "Der erste...

CVE-2026-107302

msgpack5 is a msgpack v5 implementation for node.js and the browser. Prior to 6.1.0, the decoder reads the four-byte length of a map32 value before validating that the complete five-byte header is available. A truncated map32 header therefore causes a checked out-of-bounds buffer read and throws...

CVE-2026-1457

CVE-2026-1457: TP-Link VIGI C385 Authentifizierte Remote-Codeausführung Überblick CVE-2026-1457 ist eine authentifizierte Pufferüberlauf-Schwachstelle in der Web-API des TP-Link VIGI C385 V1. Diese Schwachstelle ermöglicht es authentifizierten Angreifern, Remote-Codeausführung RCE durchzuführen...