CVE-2019-19204

CVE-2019-19204 An issue was discovered in Oniguruma 6.x before 6.9.4rc2. In the function fetchintervalquantifier formerly known as fetchrangequantifier in regparse.c, PFETCH is called without checking PEND. This leads to a heap-based buffer over-read. Researcher: ManhND of The Tarantula Team,...

POC-CVE-2012-1831

POC-CVE-2012-1831 Proof Of Concept for the CVE-2012-1831 Kingview Touchview 6.53 Background on Kingview KingView® is a powerful Windows-based industrial SCADA software for monitoring & controlling industrial processes. With over 25 years of development, it's now known for being the best selling...

CVE-2026-42533

CVE-2026-42533 — nginx map/regex capture clobbering tracking site Source for the CVE-2026-42533 patch-status tracker: a single-page site recording which distributions have shipped a fix for the nginx map/regex capture-clobbering heap overflow. Where the facts live Everything about the bug —...

CVE-2023-27997-check

CVE-2023-27997 Vulnerability Assessment Tool Safely detect whether a FortiGate SSL VPN instance is vulnerable to CVE-2023-27997 based on response timing. See the full write-up at the Bishop Fox blog, including a complete walkthrough of the methodology behind this tool. Description CVE-2023-27997 ...

CVE-2024-38077-MadLicense-exploit

CVE-2024-38077 MadLicense - Complete Exploitation Framework 📚 Technical Documentation for Presentation This document explains each component of the framework, why it exists , and how the heap buffer overflow exploitation works in modern Windows. 🎯 What Is CVE-2024-38077? The Vulnerability Windows...

cve-2021-3156

CVE-2021-3156 -- Baron Samedit Vulnerability Environment Create the image using Dockerfile docker build -t cve-2021-3156:ubuntu2004 . Create a container using the image docker run --rm -it cve-2021-3156:ubuntu2004 /bin/bash Vulnerability Cause In Sudo versions prior to 1.9.5p2 , there is an...

iOS-Kernel-Crash

CVE-2018-4407 Memory Corruption The vulnerability is a heap buffer overflow in the networking code in the XNU operating system kernel. XNU is used by both iOS and macOS, which is why iPhones, iPads, and Macbooks are all affected. My exploit PoC just overwrites the heap with garbage, which causes ...

CVE-2025-54574-Squid-Heap-Buffer-Overflow

CVE-2025-54574-Squid-Heap-Buffer-Overflow Vulnerability Found on Squid Proxy. CVE-2025-54574 — Critical Heap Buffer Overflow in Squid Proxy This repository documents the discovery, analysis, and responsible disclosure process of CVE-2025-54574, a critical heap-based buffer overflow in Squid 6.4...

CVE-2015-8088

CVE-2015-8088 Source of PoC code. Detail of the CVE: https://vulners.com/cve/CVE-2015-8088 Detail of the Vulnerability: http://kernfunny.org/blog/cve-2015-8088-heap-based-buffer-overflow-in-the-hifi-driver-of-huawei-smart-phone.html...

CVE-2019-20326

CVE-2019-20326 GNOME gThumb and Linux Mint Pix use the cairoio module for displaying several image formats with the Cairo graphics library. In gThumb versions 3.8.3 and Pix versions 2.4.5, cairoio is vulnerable to a heap buffer overflow via a JPEG image with either a width or height greater than...

EUVD-2026-103198

Text::CSVXS versions before 1.65 for Perl read before the start of an all-blank field under allowwhitespace in striptrailwhitespace. Under allowwhitespace, striptrailwhitespace removes trailing spaces and tabs from each unquoted field without stopping at the start of the field. For a field of onl...

libXi -- multiple vulnerabilities

X.Org reports: Multiple issues have been found in the X client library implementations published by X.Org for which we are releasing security fixes for. CVE-2026-93541: Out-of-bounds read in libXi's XQueryDeviceState CVE-2026-93542: Out-of-bounds read in libXi's XI2 class parsing via sizeclasses...

CVE-2026-110758

Text::CSVXS versions before 1.65 for Perl read before the start of an all-blank field under allowwhitespace in striptrailwhitespace. Under allowwhitespace, striptrailwhitespace removes trailing spaces and tabs from each unquoted field without stopping at the start of the field. For a field of onl...

CVE-2026-89088

A heap-based buffer overflow exists in libparted 's file system resizing logic when handling FAT16 volumes, specifically within the duplicate_legacy_root_dir function. An attacker can trigger an oversized read into a fixed-size memory buffer by convincing a user or administrator to resize a speci...

CVE-2026-89088 Parted: parted: denial of service via heap buffer overflow during fat16 resize

A flaw was found in parted. A heap-based buffer overflow exists in libparted's file system resizing logic when handling FAT16 volumes. By convincing a user or administrator to resize a specially crafted FAT16 file system image with malformed directory metadata, an attacker can trigger an oversize...

CVE-2026-89085

A flaw was found in parted. A heap-based buffer overflow can occur when processing a specially crafted FAT32 filesystem due to an integer calculation error during buffer allocation. A local attacker could exploit this by enticing a user or automated service to open a malicious filesystem image,...

[slackware-security] libXi

New libXi packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/libXi-1.8.4-i586-1slack15.0.txz: Upgraded. This update fixes security issues: Out-of-bounds read in libXi's XQueryDeviceState...

CVE-2018-4407

CVE-2018-4407 Massive IOS/MAC Attack Exploit CVE-2018-4407 is a Simple and Very Fast BOF attack Against IOS/MAC that can lead to DOS. The vulnerability is a heap buffer overflow in the networking code in the XNU operating system kernel. XNU is used by both iOS and macOS, which is why iPhones,...

CVE-2026-110758

The Text::CSV_XS module for Perl is vulnerable in versions prior to 1.65 due to a buffer under-read (CWE-127). When the allow_whitespace option is enabled, the strip_trail_whitespace function incorrectly removes trailing spaces and tabs without stopping at the start of a field. For fields consist...

CVE-2026-110758 Text::CSV_XS versions before 1.65 for Perl read before the start of an all-blank field under allow_whitespace in strip_trail_whitespace

Text::CSVXS versions before 1.65 for Perl read before the start of an all-blank field under allowwhitespace in striptrailwhitespace. Under allowwhitespace, striptrailwhitespace removes trailing spaces and tabs from each unquoted field without stopping at the start of the field. For a field of onl...