CVE-2024-22532

CVE-2024-22532 Description XnSoft XnView Classic 2.51.5 and NConvert 7.163 are vulnerable to Heap-based Buffer Overflow via a crafted .xwd file Vendor XnSoft Affected Products XnView Classic 2.51.5 NConvert 7.163 Impact Denial of Service Remote Code Execution PoC Denial of Service cmdline used...

CVE-2021-3156

CVE-2021-3156 CVE-2021-3156 भेद्यता की जाँच और पैचिंग स्क्रिप्ट CVE-2021-3156 विवरण: Sudo 1.9.5p2 से पहले के संस्करण में Heap-आधारित बफर ओवरफ्लो Heap-based Buffer Overflow है, जो "sudoedit -s" और एक कमांड-लाइन तर्क के माध्यम से रूट तक विशेषाधिकार वृद्धि की अनुमति देता है जो एक एकल बैकस्लैश वर्ण क...

CVE-2026-40369

🚨 CVE-2026-40369 - विंडोज कर्नेल विशेषाधिकार उन्नति भेद्यता विंडोज कर्नेल हीप-आधारित बफर ओवरफ्लो जो स्थानीय हमलावरों को विशेषाधिकारों कोNT AUTHORITY\SYSTEM तक बढ़ाने की अनुमति देता है। 📖 अवलोकन CVE-2026-40369 एक उच्च गंभीरता वाली विशेषाधिकार उन्नति भेद्यता है जो माइक्रोसॉफ्ट विंडोज कर्नेल घटकों क...

nginx-rift-detect

nginx-rift-detect Behavioral detection script for CVE-2026-42945 NGINX Rift — a heap buffer overflow in ngxhttprewritemodule present in nginx since 2008. ⚠️ Disclaimer This tool is intended solely for authorized security testing and research. Only run this against systems you own or have explicit...

nginx-rift-scanner

nginx-rift-scanner Dependency-free Python 3 scanner for CVE-2026-42945 "NGINX Rift" — a CVSS v4.0 9.2 CRITICAL heap-based buffer overflow CWE-122 in ngxhttprewritemodule. What it detects Two independent checks are run on every invocation:...

CVE-2026-0006-openapv-poc

CVE-2026-0006: Heap Buffer Overflow in libopenapv Android APV Codec Patch Analysis & Reproduction by Mobile Hacking Lab CVSS 9.8 Critical | Actively exploited in the wild | Patched March 2026 Note: We did not discover this vulnerability. All credit for finding and responsibly reporting...

CVE-2021-39863

CVE-2021-39863 Adobe Acrobat Reader DC 21.005.20048.43252 32 bit Down load this version : https://ardownload2.adobe.com/pub/adobe/reader/win/AcrobatDC/2100520048/AcroRdrDC2100520048enUS.exe Bypass ASLR, DEP Non Bypass CFG Analysis Team Blog Team Member Blog - mntly Adobe root cause.pdf : Explain...

CVE-2026-42945-POC

CVE-2026-42945 NGINX Rift - HTB-Ready Exploit Standalone exploit for the NGINX heap buffer overflow vulnerability discovered in 2024. This version is optimized for HackTheBox and CTF environments where you can't set up Docker containers. Vulnerability Details CVE-2026-42945 is a critical heap...

CVE-2019-19204

CVE-2019-19204 An issue was discovered in Oniguruma 6.x before 6.9.4rc2. In the function fetchintervalquantifier formerly known as fetchrangequantifier in regparse.c, PFETCH is called without checking PEND. This leads to a heap-based buffer over-read. शोधकर्ता: The Tarantula Team, VinCSS Vingroup...

CVE-2023-4911

glibc Heap Buffer Overflow Vulnerability CVE-2023-4911 Item| Description ---|--- CVE ID| CVE-2023-4911 Attack Type| Heap Buffer Overflow → Local Privilege Escalation CVSS 3.1| 7.8 High Disclosure Date| 2023-10-03 Vulnerability Point| glibc dynamic loader ld.so GLIBCTUNABLES parser Affected...

CVE-2026-42945-nginx-rift-poc

NGINX Rift — CVE-2026-42945 RCE proof-of-concept for CVE-2026-42945 , a critical heap buffer overflow in NGINX's ngxhttprewritemodule introduced in 2008. Enables unauthenticated remote code execution against servers using rewrite ... ?... + set capture combinations. Original vulnerability...

CVE-2026-42533

CVE-2026-42533 — nginx Heap Buffer Overflow PoC Exploit Pre-Authentication Remote Code Execution via Two-Pass Capture Clobbering Public PoC released 2026-07-27 — Don't wait, patch now. | ---|--- CVE| CVE-2026-42533 CVSS 4.0| 9.2 Critical Type| Heap Buffer Overflow CWE-122 Affected| nginx 0.9.6 –...

CVE-2026-42945

CVE-2026-42945 Nginx Rift - PoC Toolkit A comprehensive proof-of-concept toolkit for CVE-2026-42945 Nginx Rift, a critical heap buffer overflow vulnerability in Nginx's ngxhttprewritemodule. Vulnerability Summary Field| Details ---|--- CVE ID| CVE-2026-42945 Name| Nginx Rift Type| Heap Buffer...

CVE-2026-42945

NGINX Rift RCE Proof of concept for CVE-2026-42945 , a critical heap buffer overflow in NGINX's ngxhttprewritemodule introduced in 2008. The bug enables unauthenticated remote code execution against servers using rewrite and set directives. This vulnerability — along with three other memory...

Baron-Samedit-Heap-Buffer-Overflow-CVE-2021-3156

Baron-Samedit-Heap-Buffer-Overflow-CVE-2021-3156 शोषण के लिए संवेदनशील संस्करण बैरन सेमेडिट भेद्यता CVE-2021-3156 sudo के लीगेसी संस्करण 1.8.2 से 1.8.31p2 और स्थिर संस्करण 1.9.0 से 1.9.5p1 को प्रभावित करती है। यह हीप-आधारित बफर ओवरफ्लो दोष जुलाई 2011 में कमिट 8255ed69 के माध्यम से पेश किया गया था...

CVE-2024-4323

🇮🇱 BringThemHome NeverAgainIsNow 🇮🇱 We demand the safe return of all citizens who have been taken hostage by the terrorist group Hamas. We will not rest until every hostage is released and returns home safely. You can help bring them back home.https://stories.bringthemhomenow.net/ CVE-2024-4323...

CVE-2026-42533

CVE-2026-42533 — nginx map/regex capture clobbering tracking site Source for the CVE-2026-42533 patch-status tracker: a single-page site recording which distributions have shipped a fix for the nginx map/regex capture-clobbering heap overflow. Where the facts live Everything about the bug —...

CVE-2026-5201

CVE-2026-5201 gdk-pixbuf JPEG लोडर में हीप-आधारित बफर अतिप्रवाह नमस्ते, मैं Kağan Çapar हूँ। मैंने gdk-pixbuf के JPEG छवि लोडर में एक हीप-आधारित बफर अतिप्रवाह भेद्यता की खोज की है जो व्यावहारिक रूप से सभी लिनक्स डेस्कटॉप वातावरणों को प्रभावित करती है। इस भेद्यता को CVE-2026-5201 निर्दिष्ट किया गय...

lab-cve-2023-4863

CVE-2023-4863 — libwebp Exploitation Lab Reproduction of CVE-2023-4863 heap buffer overflow in libwebp in a fully isolated automated Docker environment. Based on the practice from the Ethical Hacking module of CEFIRE. What this lab does Spins up eight containers on a private network:...

CVE-2021-3156

CVE-2021-3156 - Heap-Based Buffer Overflow in Sudo ⚠️ For educational and authorized security research purposes only Original Exploit Authors Very grateful to the original PoC author Qualys Research Team Description Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based...