Winrar-CVE-2023-40477-POC

CVE-2023-4047 PoC By Wild Pointer Read Research: https://wildptr.io/winrar-cve-2023-40477-poc-new-vulnerability-winrar-security-research/ Recvol3.cpp Vulnerability: https://www.rarlab.com/vulnrev3names.html, https://www.win-rar.com/ Vulnerable: WinRAR = 6.22 How to Test? You can generate your own...

CVE-2023-38632

CVE-2023-38632 async-sockets-cpp through 0.3.1 contains a remote buffer overflow vulnerability in static void ReceiveTCPSocket socket at tcpsocket.hpp, lines 102-110. The buffer overflow affects all corresponding TCP servers. The remote buffer overflow can be triggered by connecting to a socket a...

RemoteAssistance-Cpp

RemoteAssistance-Cpp RemoteAssistance like TeamViewer C++ version https://dydtjr1128.github.io/RemoteAssistance-Cpp/ It also made java swing version = Link This version is only implemented up to local mirroring, which has not yet used network. ToDo - x Screen capture - x Double buffering - Add...

CVE-2023-40296

CVE-2023-40296 async-sockets-cpp through 0.3.1 contains an off-by-one buffer overflow vulnerability in static void ReceiveFromUDPSocket udpSocket at udpsocket.hpp, around lines 160-167. The buffer overflow affects all corresponding UDP servers. The remote buffer overflow can be triggered by...

x86-cpp-reversing-skill

x86-cpp-reversing A Claude Code skill for reverse-engineering 32-bit little-endian x86 IA-32 binaries and disassembly compiled from C++. Recovers class layouts, vtables, virtual dispatch, and RTTI/inheritance hierarchies from ELF or PE binaries, and covers the workflows that come up once you have...

Apache ActiveMQ CPP 3.9.5 Remote Denial of Service

Apache ActiveMQ CPP version 3.9.5 contains an uncontrolled memory allocation vulnerability in OpenWire byte-array unmarshalling that allows a malicious broker to crash a client. !/usr/bin/env python Apache ActiveMQ CPP 3.9.5 OpenWireFormat::unmarshal Denial of Service Vendor: The Apache Software...

Apache ActiveMQ CPP 3.9.5 (OpenWireFormat::unmarshal) Denial of Service

Summary ActiveMQ CPP is a messaging library that can use multiple protocols to talk to a MOM e.g. ActiveMQ. Description Apache ActiveMQ CPP suffers from an uncontrolled memory allocation vulnerability in its OpenWire byte-array unmarshalling. The unmarshal routines read a 32-bit size from the wir...

OESA-2026-4524 cpp-httplib security update

A C++11 single-file header-only cross platform HTTP/HTTPS library. It's extremely easy to setup. Just include httplib.h file in your code! Security Fixes: cpp-httplib is a C++ header-only HTTP/HTTPS library. Prior to 0.51.0, createredirectclient removes Host, Proxy-Authorization, and Authorizatio...

OESA-2026-4523 cpp-httplib security update

A C++11 single-file header-only cross platform HTTP/HTTPS library. It's extremely easy to setup. Just include httplib.h file in your code! Security Fixes: cpp-httplib is a C++ header-only HTTP/HTTPS library. Prior to 0.51.0, createredirectclient removes Host, Proxy-Authorization, and Authorizatio...

OESA-2026-4522 cpp-httplib security update

A C++11 single-file header-only cross platform HTTP/HTTPS library. It's extremely easy to setup. Just include httplib.h file in your code! Security Fixes: cpp-httplib is a C++ header-only HTTP/HTTPS library. Prior to 0.51.0, createredirectclient removes Host, Proxy-Authorization, and Authorizatio...

OESA-2026-4521 cpp-httplib security update

A C++11 single-file header-only cross platform HTTP/HTTPS library. It's extremely easy to setup. Just include httplib.h file in your code! Security Fixes: cpp-httplib is a C++ header-only HTTP/HTTPS library. Prior to 0.51.0, createredirectclient removes Host, Proxy-Authorization, and Authorizatio...

CVE-2026-103634 Apache DataSketches: datasketches-cpp: Out-of-bounds read and write in Count-Min sketch deserialization allows memory corruption via a crafted sketch

Out-of-bounds read and write in the Count-Min sketch deserialization of Apache DataSketches C++ repo: datasketches-cpp. countminsketch::deserialize did not include the preamble in its input size check, so a truncated sketch could cause a read of up to 16 bytes past the end of the input. In...

CVE-2026-103634 Apache DataSketches: datasketches-cpp: Out-of-bounds read and write in Count-Min sketch deserialization allows memory corruption via a crafted sketch

Out-of-bounds read and write in the Count-Min sketch deserialization of Apache DataSketches C++ repo: datasketches-cpp. countminsketch::deserialize did not include the preamble in its input size check, so a truncated sketch could cause a read of up to 16 bytes past the end of the input. In...

CVE-2026-103634 Apache DataSketches: datasketches-cpp: Out-of-bounds read and write in Count-Min sketch deserialization allows memory corruption via a crafted sketch

Out-of-bounds read and write in the Count-Min sketch deserialization of Apache DataSketches C++ repo: datasketches-cpp. countminsketch::deserialize did not include the preamble in its input size check, so a truncated sketch could cause a read of up to 16 bytes past the end of the input. In...

CVE-2026-103634

The Apache DataSketches C++ library (repo: datasketches-cpp ) is vulnerable to an out-of-bounds read and write in the count_min_sketch::deserialize() function. The flaw exists because the function fails to include the preamble in its input size check, allowing a truncated sketch to cause a read o...

cpp-httplib create_redirect_client Unauthorized Access

The vulnerability of the createredirectclient function in the cpp-httplib library is related to insufficient protection of registration data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

Graphify Fortran extractor: incomplete cpp #include hardening allows arbitrary host-file read/exfiltration when indexing an untrusted repo

Summary The Fortran extractor's C-preprocessor step graphify/extractors/fortran.py, cpppreprocess applies an incomplete include hardening. The -nostdinc -I /dev/null flags it relies on comment "Security F-007" do not stop a capital-F Fortran source file from including absolute paths include...

GHSA-PCC4-RVHR-2PR8 Graphify Fortran extractor: incomplete cpp #include hardening allows arbitrary host-file read/exfiltration when indexing an untrusted repo

Summary The Fortran extractor's C-preprocessor step graphify/extractors/fortran.py, cpppreprocess applies an incomplete include hardening. The -nostdinc -I /dev/null flags it relies on comment "Security F-007" do not stop a capital-F Fortran source file from including absolute paths include...

Linux Distros Unpatched Vulnerability : CVE-2026-102944

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - cpp-httplib is a C++ header-only HTTP/HTTPS library. Prior to 0.51.0, createredirectclient removes Host, Proxy-Authorization, and Authorization headers when...

Linux Distros Unpatched Vulnerability : CVE-2026-103930

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - cpp-httplib is a C++ header-only HTTP/HTTPS library. From 0.29.0 until 0.51.0, Client::openstream in httplib.h accepts a caller-controlled path that reaches...