Security update for expat

This update for expat fixes the following issues: CVE-2025-59375: denial of service resource consumption caused by processing malformed small documents bsc1249584. CVE-2026-24515: NULL dereference CWE-476 due to function XMLExternalEntityParserCreate failing to copy the encoding handler data pass...

SUSE-SU-2026:4619-1 Security update for expat

This update for expat fixes the following issues: - CVE-2025-59375: denial of service resource consumption caused by processing malformed small documents bsc1249584. - CVE-2026-24515: NULL dereference CWE-476 due to function XMLExternalEntityParserCreate failing to copy the encoding handler data...

Security update for expat

This update for expat fixes the following issues: CVE-2025-59375: denial of service resource consumption caused by processing malformed small documents bsc1249584. CVE-2026-24515: NULL dereference CWE-476 due to function XMLExternalEntityParserCreate failing to copy the encoding handler data pass...

SUSE-SU-2026:4615-1 Security update for expat

This update for expat fixes the following issues: - CVE-2025-59375: denial of service resource consumption caused by processing malformed small documents bsc1249584. - CVE-2026-24515: NULL dereference CWE-476 due to function XMLExternalEntityParserCreate failing to copy the encoding handler data...

CVE-2006-6184

CVE-2006-6184 This is a python-based standalone exploit for CVE-2006-6184. This exploit triggers a stack-based buffer overflow in Allied Telesyn TFTP Server AT-TFTP 1.9, and possibly earlier, allowing remote attackers to cause a denial of service or execute arbitrary code. Quick Start 0. let...

CVE-2023-48194

CVE-2023-48194 Overview Firmware download website: https://www.tenda.com.cn/download/detail-3683.html https://down.tenda.com.cn/uploadfile/AC8/V16.03.34.09.zip https://static.tenda.com.cn/tdcweb/download/uploadfile/AC8/V16.03.34.09.zip Affected version AC8/V16.03.34.09 Vulnerability details Tenda...

CVE-2015-8299

knAx20150101 Title: Remote code execution vulnerability in the KNX management software ETS Category/Abstract: Buffer overflow vulnerability Product: ETS Engineering Tool Software Affected versions: ETS 4.1.5 Build 3246 no other versions tested Fixed in version: unknown Vendor: KNX Association...

CVE-2025-22457

PoC for CVE-2025-22457 A remote unauthenticated stack based buffer overflow affecting Ivanti Connect Secure, Pulse Connect Secure, Ivanti Policy Secure, and ZTA Gateways Overview This is a proof of concept exploit to demonstrate exploitation of CVE-2025-22457. For a complete technical analysis of...

CVE-2023-21716-Analysis-ICT287

CVE-2023-21716 Analysis-ICT287: Microsoft Word Remote Code Execution Overview This repository documents the analysis and reproduction of CVE-2023-21716, a heap-based buffer overflow vulnerability in Microsoft Word's RTF parser with a CVSS score of 9.8 Critical. What's Inside File| Description...

CVE-2022-27666

CVE-2022-27666 Heap buffer overflow in Linux kernel's IPsec ESP6 implementation linux 5.13.19. Setup Assuming root user 1. Build Kernel inside VM Install dependencies: apt update && apt install -y \ build-essential bc bison flex \ libssl-dev libelf-dev libncurses-dev \ dwarves pahole gcc make wge...

-Win10-x64-CloudMe-Sync-1.10.9-Buffer-Overflow-SEH-DEP-Bypass

-Win10-x64-CloudMe-Sync-1.10.9-Buffer-Overflow-SEH-DEP-Bypass My version - Win10 x64 CloudMe-Sync-1.10.9-Buffer-Overflow-SEH-DEP-Bypass...

CVE-2003-0264_EXPLOIT

CVE-2003-0264EXPLOIT Buffer Overflow in Seattle Lab Mail SLmail 5.5 - POP3 Simple STACK BAsed BUffer Overflow Step By Step 1 FUZZ The Application In the very First Step we will Fuzz The Application With a Simple Spike Script meanwhile we wil also have SLmail attachedand running to immunity Debugg...

poppler: poppler: Denial of Service via stack-based buffer overflow in PDF decryption

A flaw was found in Poppler. A stack-based buffer overflow vulnerability exists in the decryption routine when processing encrypted PDF documents. By providing an overly long password during document decryption, an attacker can overwrite memory buffers. This issue primarily leads to a Denial of...

flatpak: flatpak: Buffer overflow in OCI delta stream path names on 32-bit systems

The OCI delta stream parser read sizes as guint64 but passed them to GLib I/O and allocation functions expecting gsize 32 bits on 32-bit systems, causing undersized allocations while subsequent operations use the original 64-bit size, leading to heap buffer overflows. An attacker controlling an O...

Important: Red Hat Security Advisory: flatpak security update

An update for flatpak is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

CVE-2026-108104

A flaw was found in snappy-java. A remote attacker can cause information disclosure or data corruption by supplying framed data with an excessively large chunk length. This input triggers an out-of-memory condition during buffer reallocation in SnappyFramedInputStream, causing pooled memory buffe...

cve-2022-46395-qemu

CVE-2022-46395 QEMU r36p0 Lab This repository contains a QEMU/no-Mali lab for reproducing the portable trigger condition of CVE-2022-46395 against the Arm Mali r36p0 driver lineage. The lab is intended for local vulnerability research and regression testing. It does not carry the Pixel-specific...

CVE-2026-53921

🚨 CVE-2026-53921 - odhcpd Critical Stack-Based Buffer Overflow in OpenWrt odhcpd A remote unauthenticated stack-based buffer overflow allowing potentialRemote Code Execution RCE with root privileges. 📖 Overview Property| Value ---|--- CVE ID| CVE-2026-53921 Severity| 🔴 Critical CVSS v3.1| 9.8 CWE...

CVE-2025-69720

CVE-2025-69720: ncurses infocmp -i Stack Buffer Overflow CWE-121 Reporter: Yixuan Cao Shenzhen University, [email protected] Environment Host: openEuler 22.03 LTS Linux aarch64 Toolchain: system clang 12.0.1 + AddressSanitizer Source: ncurses-6.4 and ncurses-6.5 prior to patch 20251213 Summa...

flatpak: flatpak: Buffer overflow in OCI delta stream path names on 32-bit systems

The OCI delta stream parser read sizes as guint64 but passed them to GLib I/O and allocation functions expecting gsize 32 bits on 32-bit systems, causing undersized allocations while subsequent operations use the original 64-bit size, leading to heap buffer overflows. An attacker controlling an O...