Stack-based Buffer Overflow in Certificate Parsing Service of Brocade Fabric OS

: A stack-based buffer overflow vulnerability exists in the security library component of Brocade Fabric OS versions before 10.0.1. When parsing uploaded X.509 PEM certificates for management display, the system improperly validates the length of the Authority Key Identifier AKI extension before...

Buffer Overflow vulnerability exists in the Brocade Fabric OS WebTools management (CVE-2026-94587)

: A buffer overflow vulnerability exists in the WebTools administrative interface handling configuration download or file transfer operations of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. An authenticated user with permissions to perform configuration downloads using...

A flaw was found in the GLib Base64 encoding routine when processing very large input data (CVE-2026-1484)

A flaw was found in the GLib Base64 encoding routine when processing very large input data. Due to incorrect use of integer types during length calculation, the library may miscalculate buffer boundaries. This can cause memory writes outside the allocated buffer. Applications that process untrust...

Rocky Linux 10.2 [CIQ] Security Update: kernel / kernel-64k / kernel-64k-core / kernel-64k-debug / etc Multiple Vulnerabilities (crlsa-2026_57251)

The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202657251 advisory. kernel: drm/amdkfd: Fix out-of-bounds write in kfdeventpageset CVE-2026-43206 kernel: drm/amdgpu: Refactor amdgpugemvaioctl for Handling Last Fence...

ROS-20261006-73-0407

The vulnerability of the ext4extcorrectindexes function in the fs/ext4/extents.c module of the Ext4 file system in the Linux operating system is related to the execution of operations outside of the buffer boundaries. Exploitation of this vulnerability could allow an attacker to compromise the...

ALSA-2026:76747 Important: freerdp security update

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox. Security Fixes: FreeRDP: FreeRDP: Denial of Service via crafted Surface Bits command...

PT-2026-107206

Name of the Vulnerable Software and Affected Versions ClearPass Policy Manager affected versions not specified Description A buffer overflow occurs in the OnGuard agent. This issue allows an authenticated local user to execute arbitrary code with elevated privileges on the host or cause a denial ...

Heap-Based Buffer Overflow in Port List Parsing within Brocade Fabric OS

: When Brocade Fabric OS versions before 10.0.1 processes trunk configuration operations, the application parses user-supplied list strings into dynamically allocated heap arrays without enforcing boundary checks on the maximum allowable number of elements. An authenticated administrator can...

PT-2026-107249

Name of the Vulnerable Software and Affected Versions HDF5 versions prior to 2.2.0 Description A heap-based buffer overflow occurs in the H5VM array fill function within src/H5VM.c. This issue arises when H5D fill init fills the fill-value buffer using datatype and dataspace metadata from a craft...

The vulnerability of Remote Desktop Services (RDS) for Windows operating systems allows attackers to escalate their privileges.

The vulnerability of Remote Desktop Services RDS for Windows operating systems lies in the fact that operations are performed outside of the buffer in memory. Exploiting this vulnerability allows an attacker to increase their privileges remotely...

Windows-CVE-2024-38063

Windows CVE-2024-38063 ID de CVE: CVE-2024-38063 Puntuación CVSS 3.1: 9.8 Crítico Puntuación EPSS: Baja - 0.088% https://www.cvedetails.com/epss/CVE-2024-38063/epss-score-history.html Impacto: Ejecución Remota de Código Componentes Afectados: Pila TCP/IP de Windows Vector de Ataque: Red Remoto...

CVE-2025-5548

🐞CVE-2025-5548 FreeFloat FTP Server 1.0 中的缓冲区溢出 🎯 栈缓冲区溢出利用 本仓库包含一个网络安全项目的文档和实际开发过程，该项目专注于在 32 位 Windows 环境中进行逆向工程和内存级漏洞（栈缓冲区溢出）的利用。 📌 项目目标 本项目的目标是审计、分析并成功利用 Freefloat FTP Server v1.00 软件，该软件已知缺乏现代安全缓解措施（如 ASLR 或 DEP）。本仓库记录了攻击的完整生命周期：从使用专业工具搭建实验室环境，到漏洞发现（模糊测试），再到劫持程序执行流程以获得远程控制台（反向 Shell）。 📂 仓库结构...

CVE-2025-65018-Heap-buffer-overflow-in-libpng-ps4-ps5-

Poc para CVE-2025-65018-Heap-buffer-overflow-in-libpng-ps4-ps5- Uso: 1-presiona el botón share y toma una captura de pantalla 2-con ftp ve a la ruta:/user/avcontents/photo/NPXS20001/NPXS20001/XXX/ encontrarás la captura de pantalla que tomaste. 3-cópialo a la pc y ejecútalo con makepng.py, genera...

CVE-2004-1561-Icecast-Header-Overwrite-buffer-overflow-RCE-2.0.1-Win32-

CVE-2004-1561-Icecast-Header-Overwrite-buffer-overflow-RCE-2.0.1-Win32- 使用 使用 Ncat 监听反向 Shell root@Kali:/TryHackme/Ice nc -nlvp 443 listening on any 443 ... connect to 192.168.92.128 from UNKNOWN 192.168.92.133 49211 Microsoft Windows Version 6.1.7601 Copyright c 2009 Microsoft Corporation. All...

CVE-2003-0264

CVE-2003-0264 SLmail 5.5 のバッファオーバーフローエクスプロイト CVE-2003-0264 ベース: https://github.com/Gallopsled/pwntools https://github.com/rapid7/metasploit-framework 出力例: $ ./slmail-into-shell.py + Opening connection to 192.168.15.100 on port 110: Done + Trying to bind to 0.0.0.0 on port 4444: Done + Waiting for...

CVE-2013-3664_MAC

Sketchup MAC Pict Material Palette Stack Corruption - CVE-2013-3664 SketchUpは、埋め込まれたMACPictテクスチャを解析する際に入力の検証に失敗します。悪意のあるテクスチャ、サムネイル、または背景画像がスタックオーバーフローを引き起こすことで、任意のコード実行が可能であることが証明されています。この問題は、Windows Explorerが.skpファイル内の埋め込みサムネイルを読み取るときにも引き起こされる可能性があります。 Summary Title: Sketchup MAC Pict Material...

EUVD-2026-87856

vm2: NodeVM zlib Buffers expose pooled host memory across the VM boundary...

CVE-2022-38601

建议描述 发现 Lotsia Soft Lotsia PDM PLUS v5.80.220414 存在缓冲区溢出漏洞。 漏洞类型 缓冲区溢出 产品供应商 Lotsia Soft 受影响的产品代码库 Lotsia PDM PLUS - 5.80.220414 攻击类型 本地 影响代码执行 是 影响拒绝服务 是 参考 http://lotsia.com...

EUVD-2026-81596

vm2: Sandboxed code can read and write host-realm memory via Node's shared Buffer pool...

vm2: Sandboxed code can read and write host-realm memory via Node's shared Buffer pool

Summary Sandboxed code is able to disclose host memory used by small allocations by Buffer.from, Buffer.concat. Details vm2 exposes Buffer object to sandboxed code by default. Small Buffer allocations for example, Buffer.allocUnsafe, Buffer.fromarray, Buffer.fromstring, and Buffer.concat use the...