CVE-2026-102559

A flaw was found in libsoup. When constructing a masked WebSocket client frame for a very large outgoing payload, size values passed to GByteArray allocation APIs could be truncated while the masking routine still used the full length, causing a heap buffer overflow. Mitigation To mitigate this...

CVE-2026-102558

A flaw was found in libsoup. When max-incoming-payload-size is unlimited 0, SoupWebsocketConnection could grow its incoming GByteArray based on an attacker-controlled frame length until the length wrapped, causing a heap buffer overflow while reading frame data. Mitigation To mitigate this...

CVE-2026-102555 Libsoup: libsoup: heap buffer overflow via uninitialized length in data-uri base64 decoding

A flaw was found in libsoup. The soupuridecodedatauri function incorrectly treated base64 data-URI payloads as NUL-terminated strings when calling gbase64decodeinplace. If the percent-decoded payload contained embedded NUL bytes, the decoded length could remain uninitialized and be used as the si...

CVE-2026-102555

A heap buffer overflow exists in libsoup within the soup_uri_decode_data_uri() function. The vulnerability occurs because the function incorrectly treats base64 data-URI payloads as NUL-terminated strings when invoking g_base64_decode_inplace() . If a percent-decoded payload contains embedded NUL...

CVE-2026-31024

CVE-2026-31024 Informe de Vulnerabilidad: Desbordamiento de Búfer Basado en Pila y Divulgación de Información en Steghide Campo| Valor ---|--- Aplicación Objetivo| Steghide Binario Linux Versión Afectada| 0.5.1 Confirmado; versiones anteriores probablemente afectadas Tipo de Vulnerabilidad|...

CVE-2025-5548

CVE-2025-5548 Investigación de seguridad y análisis técnico de CVE-2025-5548, una vulnerabilidad de desbordamiento de búfer que afecta a FreeFloat FTP Server 1.0. Este repositorio documenta el comportamiento de la vulnerabilidad, el análisis de la superficie de ataque, las pruebas controladas de...

CVE-2018-1000117-Exploit

CVE-2018-1000117 La versión de CPython de Python Software Foundation, desde 3.2 hasta 3.6.4 en Windows, contiene una vulnerabilidad de desbordamiento de búfer en la función os.symlink en Windows que puede resultar en ejecución de código arbitrario, probablemente escalada de privilegios. Este ataq...

CVE-2024-6387

CVE-2024-6387 CVE-2024-6387 es un ejemplo hipotético, pero supongamos que se trata de una vulnerabilidad real en la implementación del servidor OpenSSH. Esta vulnerabilidad podría implicar un desbordamiento de búfer o un problema de corrupción de memoria que permite a atacantes remotos ejecutar...

CVE-2025-32756-POC

CVE-2025-32756: Fortinet RCE PoC Una prueba de concepto para la vulnerabilidad crítica de desbordamiento de búfer basado en pila CVE-2025-32756 que afecta a los productos Fortinet. Vulnerabilidad CVSS : 9.8 Crítico Tipo : Desbordamiento de búfer basado en pila en el procesamiento de la cookie...

CVE-2024-0582

Introducción Este exploit implementa un método de ataque Dirty Cred para obtener acceso de escritura no autorizado a /etc/passwd. A diferencia de muchos exploits similares que crean numerosas páginas o rocían agresivamente descriptores de archivo, este enfoque toma una ruta más específica para...

CVE-2017-11882

CVE-2017-11882 Overview From the perspective of exploit effectiveness, it can kill all versions of Office from 2003 to 2016, and the entire attack environment is very simple to build. This vulnerability is caused by the Equation Editor in Office software. Because the editor process does not...

Security update for python-pymongo

This update for python-pymongo fixes the following issues: CVE-2026-96747: improper handling of key management endpoint values ending in .sock allows users with write access to the encryption key metadata to open connections to local sockets on the application host bsc1282844. CVE-2026-96748: hos...

CVE-2026-92368

TeamViewer Full Client and Host for Linux and macOS prior version 15.82 contain a heap-based buffer overflow vulnerability in the processing of .tvs session recording files. A size mismatch during decompression of recorded session data can result in out-of-bounds heap writes. By convincing a user...

CVE-2026-54873

Issue summary: QUIC process may keep memory for QUIC packet buffer for much longer period than necessary. Impact summary: Remote peer can exploit this vulnerability by sending maliciously crafted packets, making the local QUIC stack to keep the memory for packet buffers allocated. The time for...

DEBIAN-CVE-2026-54873

Issue summary: QUIC process may keep memory for QUIC packet buffer for much longer period than necessary. Impact summary: Remote peer can exploit this vulnerability by sending maliciously crafted packets, making the local QUIC stack to keep the memory for packet buffers allocated. The time for...

CVE-2026-102557

A heap buffer overflow exists in libsoup during the reassembly of fragmented WebSocket messages into a GByteArray . The vulnerability occurs because the implementation fails to adequately cap the total message size against the underlying buffer type's limits. A remote peer can send fragments that...

CVE-2026-102557 Libsoup: libsoup: heap buffer overflow during websocket message reassembly

A flaw was found in libsoup. When reassembling fragmented WebSocket messages into a GByteArray, libsoup did not adequately cap total message size against the limits of the underlying buffer type. A remote peer could send fragments that caused size truncation while the implementation still used th...

CVE-2026-102556

A heap buffer overflow vulnerability exists in libsoup due to a signal type confusion during the handling of incoming WebSocket Pong frames. Specifically, SoupWebsocketConnection emits the ::pong signal with a GByteArray pointer despite being declared to pass a GBytes object. Applications that co...

CVE-2026-102556 Libsoup: libsoup: heap buffer overflow from websocket pong signal type confusion

A flaw was found in libsoup. When handling an incoming WebSocket Pong frame, SoupWebsocketConnection emitted the ::pong signal with a GByteArray pointer even though the signal is declared to pass a GBytes. Applications connecting a handler that follows the documented GBytes API can trigger heap...

CVE-2026-102556 Libsoup: libsoup: heap buffer overflow from websocket pong signal type confusion

A flaw was found in libsoup. When handling an incoming WebSocket Pong frame, SoupWebsocketConnection emitted the ::pong signal with a GByteArray pointer even though the signal is declared to pass a GBytes. Applications connecting a handler that follows the documented GBytes API can trigger heap...