CVE-2026-102556 Libsoup: libsoup: heap buffer overflow from websocket pong signal type confusion

A flaw was found in libsoup. When handling an incoming WebSocket Pong frame, SoupWebsocketConnection emitted the ::pong signal with a GByteArray pointer even though the signal is declared to pass a GBytes. Applications connecting a handler that follows the documented GBytes API can trigger heap...

CVE-2026-41089

CVE-2026-41089 — Exploit RCE de desbordamiento de búfer de pila en Windows Netlogon CLDAP CVE-ID: CVE-2026-41089 CVSS: 9.8 Crítico CWE: CWE-121 Desbordamiento de búfer basado en pila Vector de ataque: UDP/389 CLDAP SearchRequest Impacto: Ejecución remota de código RCE / Denegación de servicio DoS...

CVE-2026-102633

The libexpat library (versions 2.7.2 through 2.8.5 ) contains an integer overflow vulnerability within the expat_realloc() function on 32-bit platforms . This flaw occurs during the computation of allocation sizes. An attacker providing malicious XML to an application using a vulnerable version c...

CVE-2026-102633 libexpat 2.7.2 through 2.8.5 Integer Overflow in expat_realloc

libexpat versions 2.7.2 through 2.8.5 contain an integer overflow vulnerability in expatrealloc function on 32-bit platforms when computing allocation sizes. Attackers supplying malicious XML to applications parsing with vulnerable libexpat can cause heap buffer overflow, memory corruption, or...

EUVD-2026-89028

libexpat versions 2.7.2 through 2.8.5 contain an integer overflow vulnerability in expatrealloc function on 32-bit platforms when computing allocation sizes. Attackers supplying malicious XML to applications parsing with vulnerable libexpat can cause heap buffer overflow, memory corruption, or...

CVE-2025-60751

CVE-2025-60751 PoC for CVE-2025-60751 Affected product: Geographiclib = v2.5.1 The full writeup article is available at https://zer0matt.blogspot.com/2026/05/cve-2025-60751-geographiclib-stack.html Description A stack buffer overflow occurs when GeoConvert receives a crafted input. The overflow...

CVE-2026-35330

CVE-2026-35330 strongSwan EAP-SIM / EAP-AKA attribute parser pre-auth heap buffer overflow via integer underflow. Description parseattributes in src/libsimaka/simakamessage.c:419 reads TLV headers whose length byte counts 4-byte words. For the ATRAND / ATENCRDATA branch: if hdr-length 4 in.len ||...

EUVD-2026-89021

TeamViewer Full Client and Host for Linux and macOS prior version 15.82 contain a heap-based buffer overflow vulnerability in the processing of .tvs session recording files. A size mismatch during decompression of recorded session data can result in out-of-bounds heap writes. By convincing a user...

CVE-2026-92368 Heap-Based Buffer Overflow in TeamViewer Session Recording Playback Leads to Remote Code Execution

TeamViewer Full Client and Host for Linux and macOS prior version 15.82 contain a heap-based buffer overflow vulnerability in the processing of .tvs session recording files. A size mismatch during decompression of recorded session data can result in out-of-bounds heap writes. By convincing a user...

CVE-2026-92368

Prior versions of TeamViewer Full Client and Host for Linux and macOS (before 15.82) are vulnerable to a heap-based buffer overflow during the processing of .tvs session recording files . The flaw is caused by a size mismatch during the decompression of recorded session data, which can lead to ou...

CVE-2026-54873

The QUIC stack in OpenSSL is vulnerable to a Denial of Service (DoS) condition (CWE-770 ) because it may retain QUIC packet buffer memory for an extended period. To optimize performance, the stack leaves stream data on the packet buffer until copied to the application buffer. An attacker can expl...

CVE-2015-1578-PoC-Metasploit

CVE-2015-1578 Metasploit Module Overview This is a Metasploit module for CVE-2015-1578 , a buffer overflow vulnerability in Achat 0.150 beta7 on Windows. Exploitation leads to remote code execution via a crafted UDP packet. Purpose This module is designed to serve as a clean, minimal, and...

CVE-2025-47981

🔵 CVE-2025-47981 — Windows SPNEGO NEGOEX Vulnerability Assessment Script Type: Vulnerability Assessment — Detection / Compliance Check CVE: CVE-2025-47981 CVSS: 9.8 Critical AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CWE: CWE-122 — Heap-based Buffer Overflow Alias: "SPNEGO Nightmare" / "Windows...

CVE-2026-102566

CTranslate2 before 4.8.1 contains a heap-based buffer overflow in the binary model loader that fails to validate payload length against allocated buffer size. Attackers can craft malicious model files with oversized payload lengths to write past heap allocation boundaries, causing crashes or...

CVE-2026-95392

A flaw was found in the MBIM protocol dissector in Wireshark. This issue occurs when malformed packets are decoded from a pcap file or the network, causing a buffer over-read, resulting in a denial of service. Mitigation If the MBIM protocol dissector is not being used, it can be disabled via the...

CVE-2026-95389

A flaw was found in the SCTP protocol dissector in Wireshark. This issue occurs when malformed packets are decoded from a pcap file or the network, causing a heap-based buffer overflow, resulting in a denial of service or potentially allowing code execution. Mitigation If the SCTP protocol...

LooneyPwner

LooneyPwner Herramienta de explotación para CVE-2023-4911, dirigida a la vulnerabilidad 'Looney Tunables' de glibc en varias distribuciones de Linux. LooneyPwner es una herramienta de explotación de prueba de concepto PoC que apunta a la vulnerabilidad crítica de desbordamiento de búfer, apodada...

fgt-cve-2023-27997-exploit

fgt-cve-2023-27997-exploit FortiGate SSL‑VPN CVE‑2023‑27997 Exploit PoC Script with ROP Chain Table of Contents Description Affected Versions Installation Usage Example Output Technical Details Warnings References Description fgt-cve-2023-27997-exploit.py is a Proof‑of‑Concept PoC exploit script...

CVE-2024-0582

RU GenIoURingExploit 是一个针对 Linux 内核特定漏洞 CVE-2024-0582 的 PoC 利用程序。该 PoC 利用 iouring 机制，通过操纵套接字缓冲区并触发某些内核行为，获取未授权访问并可能提升权限。 特性 利用 iouring 实现高效的缓冲区操作。 演示 KASLR（内核地址空间布局随机化）泄漏。 利用与套接字缓冲区管理相关的漏洞。 通过受控的 IOCTL 调用触发利用。 提供通过内核操作执行任意 shell 命令的路径。 前提条件 基于 Linux 的系统（已在最新的发行版上测试）。 访问所需资源的 root 或管理员权限。 用于编译 C...

CVE-2021-38297

Exploiting CVE-2021-38297: Vulnerability in GO Wasm Buffer Overflow Overview of the Vulnerability WebAssembly WASM serves as a binary instruction format executable in most modern web browsers. It acts as a compilation target for various high-level languages like C, C++, Rust, and GO, allowing cod...