CVE-2026-18393 Ffmpeg: ffmpeg: heap buffer overflow in tdsc_load_cursor() via cur_fmt_mono cursor

A flaw was found in FFmpeg. The tdscloadcursor function writes beyond the bounds of a heap-allocated buffer when processing crafted TDSC cursor data. A remote attacker could exploit this by supplying a specially crafted video file, potentially leading to a denial of service or arbitrary code...

CVEs-for-picoc-3.2.2

CVEs-for-picoc-3.2.2 File di riproduzione per le CVE da CVE-2022-44312 a CVE-2022-44321 Riferimenti CVE PicoC v3.2.2 Heap Overflow nella funzione ExpressionCoerceInteger in expression.c CVE-2022-44312 PicoC v3.2.2 Heap Overflow nella funzione ExpressionCoerceUnsignedInteger in expression.c...

CVE-2026-38347

A flaw was found in FFmpeg. A heap overflow vulnerability exists in the ffswsalphablendaway function. This flaw allows attackers to cause a Denial of Service DoS by providing a specially crafted input. Successful exploitation could lead to the application becoming unresponsive or crashing...

CVE-2026-80710

In the Linux kernel, the following vulnerability has been resolved: s390/dasd: Fix undersized format-check buffer fmtbuffersize in dasdeckdcheckdeviceformat is declared as int, even though one of the multiplicands, sizeofstruct eckdcount, is a sizet. The expression trkcount rptmax sizeofstruct...

CVE-2021-3156

CVE-2021-3156 PoC Introduzione Questo è un exploit per la vulnerabilità CVE-2021-3156 in sudo soprannominata Baron Samedit da Qualys. Modalità d'uso build: root@kitploit: $ make lista dei target: root@kitploit: $ ./sudo-hax-me-a-sandwich run: root@kitploit: $ ./sudo-hax-me-a-sandwich modalità...

EUVD-2026-67445

In the Linux kernel, the following vulnerability has been resolved: s390/dasd: Fix undersized format-check buffer fmtbuffersize in dasdeckdcheckdeviceformat is declared as int, even though one of the multiplicands, sizeofstruct eckdcount, is a sizet. The expression trkcount rptmax sizeofstruct...

CVE-2026-80710

CVE-2026-80710 affects the s390/dasd subsystem of the Linux kernel. In dasd_eckd_check_device_format(), the variable fmt_buffer_size is declared as a 32-bit int, but the expression trkcount * rpt_max * sizeof(struct eckd_count) is evaluated at 64-bit width. When the track range (controlled by cal...

CVE-2026-80710 s390/dasd: Fix undersized format-check buffer

In the Linux kernel, the following vulnerability has been resolved: s390/dasd: Fix undersized format-check buffer fmtbuffersize in dasdeckdcheckdeviceformat is declared as int, even though one of the multiplicands, sizeofstruct eckdcount, is a sizet. The expression trkcount rptmax sizeofstruct...

CVE-2026-80671

CVE-2026-80671 affects the Linux kernel 's perf sched subsystem, specifically the register_pid() function. When processing untrusted perf.data input, four issues exist: an integer overflow in the allocation size calculation on 32-bit systems, a heap buffer overflow via unbounded strcpy into a fix...

CVE-2025-49844-RediShell-AI-made-Revshell

CVE-2025-49844 RediShell Von KI erstellter Revshell PoC Ungetestete Vervollständigung des Redishell PoC, erstellt von KI. Original PoC: https://github.com/raminfp/redisexploit/blob/main/exploitpoc.py Korean Piece: https://github.com/dwisiswant0/CVE-2025-49844/blob/master/CVE-2025-49844.lua...

cve-2021-3156

Vulnerabilità di heap overflow in sudo CVE-2021-3156 Panoramica della vulnerabilità Un team di ricerca internazionale ha scoperto una vulnerabilità di heap overflow in sudo CVE-2021-3156, rimasta nascosta per dieci anni. Un utente normale può sfruttare questa vulnerabilità per ottenere privilegi ...

CVE-2021-3156

CVE-2021-3156 Sudo Baron Samedit Questo repository contiene un exploit per CVE-2021-3156 che ha come target Linux x64. Per l'analisi tecnica, visita https://datafarm-cybersecurity.medium.com/exploit-writeup-for-cve-2021-3156-sudo-baron-samedit-7a9a4282cb31 Crediti a Braon Samedit di Qualys per...

Winrar-CVE-2023-40477-POC

CVE-2023-4047 PoC Di Wild Pointer Leggi la ricerca: https://wildptr.io/winrar-cve-2023-40477-poc-new-vulnerability-winrar-security-research/ Vulnerabilità Recvol3.cpp: https://www.rarlab.com/vulnrev3names.html, https://www.win-rar.com/ Vulnerabile: WinRAR = 6.22 Come testare? Puoi generare il tuo...

CVE-2026-38698-and-CVE-2026-38699

Pesquisa sobre Wyze Cam Pan v3 Slides Referência CVE-2026-38698 Nome do Ataque Estouro de heap na função tutkpacketalloc em tutkavserver Detalhes Adicionais Produto Afetado TUTK SDK v.3.1.10.0 até v.4.3.8.1 Componente Afetado função tutkpacketAlloc Vetor de Ataque Um atacante autenticado deve...

CVE-2026-2005

CVE-2026-2005 - Exploit Heap Overflow in pgcrypto di PostgreSQL Exploit PoC per un buffer overflow basato su heap nel parsing delle chiavi di sessione PGP dell'estensione pgcrypto di PostgreSQL, che porta a lettura/scrittura arbitraria della memoria e escalation dei privilegi a superuser. Per tut...

CVE-2026-19313

An heap overflow vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker to execute arbitrary code by sending specially crafted network traffic...

EUVD-2026-67320

A heap overflow in the ffswsalphablendaway function libswscale/alphablend.c of FFmpeg git-master commit 722a217 allows attackers to cause a Denial of Service DoS via a crafted input...

Exim-CVE-2019-15846

Exim CVE-2019-15846 PoC-Materialien zur Ausnutzung von CVE-2019-15846. Ein Blogpost, der das PoC erklärt, ist auf dem Synacktiv Blog verfügbar. Dieses PoC hilft, Spool-Dateien zu erzeugen, die zur Ausnutzung eines Heap-Overflows in exim verwendet werden. Zwei Beispiel-Spool-Dateien sind in...

CVE-2021-3156

CVE-2021-3156 PoC para CVE-2021-3156 overflow de heap no sudo. Exploit por @gf256, também conhecido como cts. Agradecimentos a r4j do super guesser pela ajuda. Créditos a Braon Samedit da Qualys pelo aviso original. Vídeo de demonstração Nota importante A hora de modificação de /etc/passwd precis...

CVE-2026-19313 Fireware OS Pre-Authentication Heap Buffer Overflow in iked Allows Remote Code Execution

An heap overflow vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker to execute arbitrary code by sending specially crafted network traffic...