394789 matches found
DEBIAN-CVE-2026-75818
GNU Aspell prezip-bin contains a heap-based buffer overflow vulnerability in the decompressor in prog/prezip.c. The decompressor does not properly check buffer space, so a crafted compressed file can cause out-of-bounds read and write operations on the heap. An attacker who convinces a user to...
CVE-2026-75818
GNU Aspell prezip-bin contains a heap-based buffer overflow vulnerability in the decompressor in prog/prezip.c. The decompressor does not properly check buffer space, so a crafted compressed file can cause out-of-bounds read and write operations on the heap. An attacker who convinces a user to...
CVE-2026-75818 Heap Buffer Overflow in GNU Aspell's prezip utility
GNU Aspell prezip-bin contains a heap-based buffer overflow vulnerability in the decompressor in prog/prezip.c. The decompressor does not properly check buffer space, so a crafted compressed file can cause out-of-bounds read and write operations on the heap. An attacker who convinces a user to...
CVE-2026-75818 Heap Buffer Overflow in GNU Aspell's prezip utility
GNU Aspell prezip-bin contains a heap-based buffer overflow vulnerability in the decompressor in prog/prezip.c. The decompressor does not properly check buffer space, so a crafted compressed file can cause out-of-bounds read and write operations on the heap. An attacker who convinces a user to...
CVE-2026-75818 Heap Buffer Overflow in GNU Aspell's prezip utility
GNU Aspell prezip-bin contains a heap-based buffer overflow vulnerability in the decompressor in prog/prezip.c. The decompressor does not properly check buffer space, so a crafted compressed file can cause out-of-bounds read and write operations on the heap. An attacker who convinces a user to...
CVE-2026-75818
The GNU Aspell prezip-bin utility contains a heap-based buffer overflow vulnerability within the decompressor located in prog/prezip.c. The root cause is an insufficient check of buffer space, allowing a crafted compressed file to trigger out-of-bounds read and write operations on the heap. An at...
EUVD-2026-93364
GNU Aspell prezip-bin contains a heap-based buffer overflow vulnerability in the decompressor in prog/prezip.c. The decompressor does not properly check buffer space, so a crafted compressed file can cause out-of-bounds read and write operations on the heap. An attacker who convinces a user to...
CVE-2026-75818
GNU Aspell prezip-bin contains a heap-based buffer overflow vulnerability in the decompressor in prog/prezip.c. The decompressor does not properly check buffer space, so a crafted compressed file can cause out-of-bounds read and write operations on the heap. An attacker who convinces a user to...
Blackash-CVE-2025-48593
🚨 CVE-2025-48593 안드로이드 시스템 제로클릭 원격 코드 실행 🚨 "단 하나의 악성 패킷이 당신의 기기를 장악할 수 있습니다." — Android Security Team, 2025년 11월 🎯 취약점 스냅샷 속성| 세부 내용 ---|--- CVE ID| CVE-2025-48593 심각도| 🔴 치명적 RCE, 제로클릭 CVSS 추정| 9.8 NVD 확인 중 공격 경로| 🌐 네트워크 원격 사용자 상호작용| ❌ 필요 없음 필요 권한| ❌ 없음 익스플로잇 상태| 🟡 공개 PoC 없음 2025년 11월 4일 기준 🛡️ 영향받...
cve-2025-29384
CVE-2025-29384 개념 증명 익스플로잇 개요 이 저장소는 Tenda AC9 라우터펌웨어 버전 V15.03.05.14multi에서 발견된 심각한 스택 기반 버퍼 오버플로우 취약점인 CVE-2025-29384 에 대한 고급 개념 증명PoC 익스플로잇을 포함합니다. 이 취약점은 인증되지 않은 원격 공격자 가 라우터의 웹 서버를 다운시키고서비스 거부, DoS 잠재적으로 임의 코드를 실행할 수 있게 합니다원격 코드 실행, RCE. 이 프로젝트의 목적은 익스플로잇 개발 기술을 시연 하고, 사이버보안 커뮤니티에 기여하며, 사이버보...
CVE-2026-84854
In the WibuKey driver for Windows below Version 6.72, insufficient validation of user input when calculating the size of a kernel buffer could cause small amounts of data to be written outside the intended kernel buffer. This can lead to a system crash. Under unfavorable circumstances, adjacent...
CVE20265172poc
CVE20265172poc CVE-2026-5172: 제작된 리소스 레코드에서 extractaddresses의 버퍼 오버플로우 PoC 토폴로지는 여기서 읽기 https://medium.com/@yanyuyingshu/reproduction-journal-dnsmasq-ecs-validation-and-buffer-overflow-flaws-e0fe0f66f60c 단계 1. vi /etc/dnsmasq.conf port=5353 listen-address=xxx.xxx.xxx.x bind-interfaces...
CVE-2026-38426
CVE-2026-38426: Tasmota fetchjpg boundary40 における strcpy スタックバッファオーバーフロー CVE: CVE-2026-38426 深刻度: 緊急 CVSS 9.8 製品: Arendst Tasmota 影響を受けるバージョン: 39 chars char cp = strchrboundary.cstr, '='; if cp strcpyglobscriptmem.jpgtask.boundary, cp + 1; // NO LENGTH CHECK — OVERFLOW! ヒープメモリレイアウト ESP32 struct...
SUSE-SU-2026:4546-1 Security update for libtcnative-1-0, tomcat, tomcat10
This update for libtcnative-1-0, tomcat, tomcat10 fixes the following issues: Security issues fixed: libtcnative-1-0: - CVE-2026-86243: buffer overread during the TLS handshake permits a malicious user to trigger a DoS via a JVM crash bsc1282623. - CVE-2026-86246: insecure ALLOWCLIENTRENEGOTIATIO...
Security update for libtcnative-1-0, tomcat11
This update for libtcnative-1-0, tomcat11 fixes the following issues: Security issues fixed: libtcnative-1-0: CVE-2026-86243: buffer overread during the TLS handshake permits a malicious user to trigger a DoS via a JVM crash bsc1282623. CVE-2026-86246: insecure ALLOWCLIENTRENEGOTIATION,...
CVE-2026-84854
The WibuKey driver for Windows versions below 6.72 contains an out-of-bounds write vulnerability due to insufficient validation of user input when calculating the size of a kernel buffer. This flaw could lead to a system crash or, under unfavorable circumstances, the modification of adjacent kern...
EUVD-2026-93359
In the WibuKey driver for Windows below Version 6.72, insufficient validation of user input when calculating the size of a kernel buffer could cause small amounts of data to be written outside the intended kernel buffer. This can lead to a system crash. Under unfavorable circumstances, adjacent...
CVE-2026-42945-Reverse-Shell-POC
CVE-2026-42945 NGINX Rift リバースシェル付き RCE PoC CVE-2026-42945 のリモートコード実行 RCE 概念実証 PoC です。これは NGINX の ngxhttprewritemodule におけるヒープバッファオーバーフローです。このフォークは、公開されているトリガー PoC を拡張し、組み込みのリバースシェルリスナーと、CTF や隔離されたラボ環境向けの設定可能な悪用パラメータを追加しています。 脆弱性概要 CVE ID: CVE-2026-42945 別名: NGINX Rift 影響を受けるコンポーネント:...
CVE-2026-9256-Poc
nginx ngxhttprewritemodule 힙 버퍼 오버플로우 설명 nginx Plus 및 nginx 오픈 소스 ngxhttprewritemodule에 힙 버퍼 오버플로우 취약점이 존재합니다. rewrite 지시문이 중첩된 PCRE 캡처 그룹예: ^/.$이 있는 정규식과 여러 캡처를 참조하는 대체 문자열예: $1&y=$2을 사용할 때, 정적 경로 버퍼 크기 계산이 필요한 공간을 과소평가하여 실제 쓰기가 할당된 크기Pool Slip를 초과하게 됩니다. 인증되지 않은 공격자는 조작된 HTTP 요청을 통해 이를 트리거하여 작업...
thm-cybersec-portfolio
TryHackMe 노트 — 사이버 보안 포트폴리오 완료한 TryHackMe 룸에 대한 개인 노트 및 요약. IT 보안 역할을 위한 학습 참고 자료 및 포트폴리오로 작성되었습니다. 완료된 룸 | 룸| 주제 ---|---|--- 01| Linux Privilege Escalation| Linux 권한 상승 기술 02| Sudo Buffer Overflow| CVE-2019-18634 03| OWASP Top 10 2025: IAAA Failures| 손상된 접근 제어, 인증 실패, 로깅 04| OWASP Top 10 2025:...