CVE-2026-32707-PX4-Autopilot-tattu_can-Stack-Buffer-Overflow-DoS-

-orange CVE-2026-32707 - PX4-Autopilot tattucan Stack Buffer Overflow DoS ╔════════════════════════════════════════════════════════════════════════════════════════════╗ ║ ║ ║ ██████╗ █████╗ ███╗ ██╗██╗ ██╗ █████╗ ███╗ ███╗███████╗██████╗ ║ ║ ██╔══██╗██╔══██╗████╗ ██║╚██╗ ██╔╝██╔══██╗████╗...

CVE-2026-32743-PX4-Autopilot-MavlinkLogHandler-Stack-Buffer-Overflow-DoS-

CVE-2026-32743 - PX4 Autopilot MavlinkLogHandler Stack Buffer Overflow DoS -orange -blue 📜 Description CVE-2026-32743 is a stack‑based buffer overflow in the MavlinkLogHandler of PX4 Autopilot versions ≤1.17.0-rc2. The LogEntry.filepath buffer is only 60 bytes , but sscanf parses log directory...

CVE-2026-29628

CVE-2026-29628 tinyobjloader experimental parser buffer overflow Summary Stack-based buffer overflow overflow in https://github.com/tinyobjloader/tinyobjloader, it only affects the experimental version, which can lead to unexpected results. Affected versions tinyobjloader is affected in all...

blue-team-capstone

Blue Team Capstone Project Overview This project is a Blue Team cybersecurity capstone focused on vulnerability assessment, risk evaluation, and remediation. The assessment focuses on CVE-2009-0658 , a vulnerability affecting Adobe Acrobat and Reader. The goal of the project was to evaluate the...

CVE-2026-7482

🚨 CVE-2026-7482: Heap Buffer Over-Read in Ollama 📝 Description CVE-2026-7482 identifies a critical heap buffer over-read vulnerability in the /api/create and /api/push endpoints of Ollama , an open-source framework for running local language models. This vulnerability allows a remote,...

CVE-2026-28858

⚠️ CVE-2026-28858 — Buffer Overflow in Apple iOS/iPadOS ╔══════════════════════════════════════════════════════════════╗ ║ SEVERITY: CRITICAL │ CVSS: 9.8 │ CWE-120 │ REMOTE ║ ╚══════════════════════════════════════════════════════════════╝ A remote user can cause unexpected system termination or...

CVE-2026-4747

/ /\ \ / / | | \ / \ \ \ \ | || | || || \ | | \ \ / /| | | | | | | \ \ | | / /| || | | | | \ V / | ||| / /| || / / \ \ | || | / / | |/ / | / | ||/| \ / // |||| CVE-2026-4747 — FreeBSD Remote Kernel RCE Stack Buffer Overflow inkgssapi.ko → Root Shell in 4 hours "The first remote kernel RCE...

CVE-2026-107302

msgpack5 is a msgpack v5 implementation for node.js and the browser. Prior to 6.1.0, the decoder reads the four-byte length of a map32 value before validating that the complete five-byte header is available. A truncated map32 header therefore causes a checked out-of-bounds buffer read and throws...

CVE-2026-1457

CVE-2026-1457: TP-Link VIGI C385 Authenticated Remote Code Execution Overview CVE-2026-1457 is an authenticated buffer overflow vulnerability in the web API of TP-Link VIGI C385 V1. This vulnerability allows authenticated attackers to perform remote code execution RCE. CVSS v4.0 Score: 8.5 High...

CVE-2025-46819

CVE-2025-46819 – Redis Lua Long-String Delimiter Out-of-Bounds Read Malformed long-string delimiter causing Lua lexer OOBs read on Redis 8.2.1. Overview Lua's long-string parser in Redis 8.2.1 mishandles malformed =... sequences, returning sentinel values that lead to buffer underflows or excessi...

openssl security update

An update is available for openssl. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list OpenSSL is a toolkit that implements the Secure Sockets Layer SSL and...

RLSA-2026:76918 Important: openssl security update

OpenSSL is a toolkit that implements the Secure Sockets Layer SSL and Transport Layer Security TLS protocols, as well as a full-strength general-purpose cryptography library. Security Fixes: openssl: compat-openssl: DTLS Retransmits Handshake Messages From a Stale Buffer Offset CVE-2026-84782 For...

CVE-2026-6643

CVE-2026-6643 — ASUSTOR ADM 5.1.2 RCE Format String CWE-134 + Stack Buffer Overflow CWE-121 in vpnupload.cgi Vulnerability Summary Field| Value ---|--- Product| ASUSTOR ADM ASUSTOR Data Master Affected Version| ADM 5.1.2.REO1 X64G3, 2026-02-25 Component| /portal/apis/settings/vpnupload.cgi —...

CVE-2026-42945

CVE-2026-42945 Security Detection Tool This is a CVE-2026-42945 static detection tool for defense and internal network investigation, used to check whether there are high-risk rewrite combinations in NGINX ngxhttprewritemodule related configurations. This project does not provide exploit code, do...

Heartbleed-PoC-Exploit-Script

Heartbleed-PoC-Exploit-Script Este script de prueba de concepto PoC en Python detecta la vulnerabilidad Heartbleed CVE-2014-0160 realizando un handshake TLS con la extensión heartbeat y enviando una solicitud heartbeat manipulada. Analiza las respuestas del servidor para identificar memoria...

CVE-2025-34096

🐞 CVE-2025-34096: Easy File Sharing Web Server 7.2 - Stack-Based Buffer Overflow SEH SEH-based buffer overflow in Easy File Sharing Web Server 7.2, reachable through the password recovery endpoint. 📑 Table of Contents Why this repository exists Why this vulnerability is interesting Context and...

CVE-2025-5548

🐞 CVE-2025-5548: FreeFloat FTP Server 1.0 Buffer Overflow Professional research and exploit development for a classic stack-based buffer overflow in FreeFloat FTP Server 1.0. This laboratory demonstrates the transition from binary reversing to a fully functional RCE. 📖 Executive Summary This...

RLSA-2026:76755 Important: freerdp security update

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox. Security Fixes: FreeRDP: FreeRDP: Denial of Service via crafted Surface Bits command...

freerdp security update

An update is available for freerdp. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released...

GHSA-QW35-55VC-RHGJ msgpack5: Decoding negative int64 values mutates the input buffer

Impact Decoding a negative signed 64-bit integer modifies the corresponding bytes in the caller-provided input buffer. Applications that retain or reuse encoded input for integrity checks, logging, or subsequent processing may observe silently corrupted data. Positive integers and other MessagePa...