367606 matches found
CVE-2021-23017
CVE-2021-23017 PoC Scanner NGINX DNS Overflow Vulnerability Check - CVE-2021-23017 PoC This Python script checks if an nginx server is potentially vulnerable to the critical CVE-2021-23017 vulnerability, which affects the integrated DNS resolver in nginx and can cause a buffer overflow. 🔍 What do...
CVE-2026-97617
A flaw was found in the Linux kernel's ring buffer subsystem. A race condition occurs when updating the buffer configuration concurrently with memory mapping operations. Because the kernel applies the new buffer order before verifying that resizing is permitted across all processors, the system c...
porfolio-Baron-Samedit
porfolio-Baron-Samedit this is a study about CVE-2021-3156: Heap-Based Buffer Overflow in Sudo Baron Samedit...
CVE-2026-97618
A flaw was found in the Linux kernel's iouring subsystem. This vulnerability allows a local user to cause a denial of service DoS or buffer corruption. When handling network receive operations configured with the packet truncation flag MSGTRUNC, the kernel calculates buffer consumption based on t...
CVE-2026-97621
A flaw was found in the Linux kernel's Rockchip Analogix DP driver. The driver formats a device tree path into a fixed-size stack buffer without verifying the input length. A local user capable of providing an excessively long device tree path can trigger a stack-based buffer overflow, leading to...
CVE-2026-102633
libexpat versions 2.7.2 through 2.8.5 contain an integer overflow vulnerability in expatrealloc function on 32-bit platforms when computing allocation sizes. Attackers supplying malicious XML to applications parsing with vulnerable libexpat can cause heap buffer overflow, memory corruption, or...
CVE-2026-102560
A flaw was found in libsoup. When the permessage-deflate WebSocket extension compresses a very large outgoing message, truncated size calculations used for GByteArray growth could wrap, causing zlib to write past the allocated buffer and resulting in a heap buffer overflow...
CVE-2026-102560 Libsoup: libsoup: heap buffer overflow during outgoing permessage-deflate buffer growth
A flaw was found in libsoup. When the permessage-deflate WebSocket extension compresses a very large outgoing message, truncated size calculations used for GByteArray growth could wrap, causing zlib to write past the allocated buffer and resulting in a heap buffer overflow...
CVE-2026-102560 Libsoup: libsoup: heap buffer overflow during outgoing permessage-deflate buffer growth
A flaw was found in libsoup. When the permessage-deflate WebSocket extension compresses a very large outgoing message, truncated size calculations used for GByteArray growth could wrap, causing zlib to write past the allocated buffer and resulting in a heap buffer overflow...
CVE-2026-102560
A heap buffer overflow vulnerability exists in libsoup within the permessage-deflate WebSocket extension . When processing very large outgoing messages, truncated size calculations for GByteArray growth can wrap, leading zlib to write past the allocated buffer. This issue can impact the availabil...
EUVD-2026-89105
A flaw was found in libsoup. When the permessage-deflate WebSocket extension compresses a very large outgoing message, truncated size calculations used for GByteArray growth could wrap, causing zlib to write past the allocated buffer and resulting in a heap buffer overflow...
CVE-2026-102559
A flaw was found in libsoup. When constructing a masked WebSocket client frame for a very large outgoing payload, size values passed to GByteArray allocation APIs could be truncated while the masking routine still used the full length, causing a heap buffer overflow...
CVE-2026-102559
A heap buffer overflow vulnerability exists in libsoup during the construction of a masked WebSocket client frame . When processing very large outgoing payloads, size values passed to GByteArray allocation APIs may be truncated while the masking routine continues to use the full length. This coul...
CVE-2026-102559 Libsoup: libsoup: heap buffer overflow during websocket client-frame masking
A flaw was found in libsoup. When constructing a masked WebSocket client frame for a very large outgoing payload, size values passed to GByteArray allocation APIs could be truncated while the masking routine still used the full length, causing a heap buffer overflow...
EUVD-2026-89104
A flaw was found in libsoup. When constructing a masked WebSocket client frame for a very large outgoing payload, size values passed to GByteArray allocation APIs could be truncated while the masking routine still used the full length, causing a heap buffer overflow...
CVE-2026-102559 Libsoup: libsoup: heap buffer overflow during websocket client-frame masking
A flaw was found in libsoup. When constructing a masked WebSocket client frame for a very large outgoing payload, size values passed to GByteArray allocation APIs could be truncated while the masking routine still used the full length, causing a heap buffer overflow...
CVE-2026-102558 Libsoup: libsoup: heap buffer overflow during websocket receive-buffer growth
A flaw was found in libsoup. When max-incoming-payload-size is unlimited 0, SoupWebsocketConnection could grow its incoming GByteArray based on an attacker-controlled frame length until the length wrapped, causing a heap buffer overflow while reading frame data...
CVE-2026-102558
A heap buffer overflow vulnerability exists in libsoup within the SoupWebsocketConnection component. When the max-incoming-payload-size is set to unlimited (0), an attacker can provide a controlled frame length that causes the length to wrap during the growth of the incoming GByteArray . This res...
CVE-2026-102558
A flaw was found in libsoup. When max-incoming-payload-size is unlimited 0, SoupWebsocketConnection could grow its incoming GByteArray based on an attacker-controlled frame length until the length wrapped, causing a heap buffer overflow while reading frame data...
EUVD-2026-89103
A flaw was found in libsoup. When max-incoming-payload-size is unlimited 0, SoupWebsocketConnection could grow its incoming GByteArray based on an attacker-controlled frame length until the length wrapped, causing a heap buffer overflow while reading frame data...