40217 matches found
DNS-Mayhem-CVE-2026-41096-Deep-Dive
DNS-Mayhem-CVE-2026-41096-Deep-Dive In‑depth technical analysis of CVE‑2026‑41096, a critical heap overflow in Windows DNSAPI.dll enabling remote code execution via crafted DNS responses. Includes attack vectors, patch insights, and defensive guidance for security teams. Overview CVE‑2026‑41096 i...
NGINX-Rift
NGINX Rift — Herramienta de escaneo y verificación de vulnerabilidades CVE-2026-42945 / CVE-2026-9256 NGINX Rift es una herramienta de código abierto de escaneo y verificación para CVE-2026-42945 y CVE-2026-9256 vulnerabilidades de desbordamiento de montón en el módulo ngxhttprewritemodule de...
CVE-2026-54334
UEFI Firmware Parser parses BIOS, Intel ME, and UEFI firmware structures including volumes, file systems, and files. Prior to 1.14, ReadCLen in uefifirmware/compression/Tiano/Decompress.c reads Number from GetBitsSd, CBIT with CBIT = 9 and can obtain 511 entries for the 510-element Sd-mCLen heap...
CVE-2021-3156
CVE-2021-3156 CVE-2021-3156: Exploit de desbordamiento de heap en Sudo para Debian 10 Análisis de vulnerabilidad y desarrollo del exploit: https://syst3mfailure.io/sudo-heap-overflow Exploit diseñado para: Sudo: root@kitploit: Versión 1.8.27 1.8.27-1+deb10u1 Checksum sha256:...
OESA-2026-3726 glib2 security update
GLib is a bundle of three formerly five low-level system libraries written in C and developed mainly by GNOME. GLib's code was separated from GTK, so it can be used by software other than GNOME and has been developed in parallel ever since. Security Fixes: A vulnerability was discovered in the...
CVE-2022-23967
CVE-2022-23967 In TightVNC 1.3.10, there is an integer signedness error and resultant heap-based buffer overflow in InitialiseRFBConnection in rfbproto.c for the vncviewer component. There is no check on the size given to malloc, e.g., -1 is accepted. This allocates a chunk of size zero, which wi...
CVE-2014-1303
CVE-2014-1303 PoC para Linux CVE-2014-1303 WebKit Heap based BOF prueba de concepto para Linux. Este repositorio demuestra la vulnerabilidad de desbordamiento de búfer en el heap de WebKit CVE-2014-1303 en Linux. Utilizado en la conferencia seccamp. NOTA: El exploit original está escrito para Mac...
CVE-2021-3156
CVE-2021-3156 Sudo Baron Samedit Este repositorio es un exploit para CVE-2021-3156 dirigido a Linux x64. Para el análisis, visite https://datafarm-cybersecurity.medium.com/exploit-writeup-for-cve-2021-3156-sudo-baron-samedit-7a9a4282cb31 Crédito a Braon Samedit de Qualys por el aviso original...
cve-2016-7190
Resumen CVE-2016-7190 0 es un desbordamiento de montón en la función Array.map de ChakraCore que permite sobrescribir memoria adyacente. La idea principal para obtener acceso arbitrario de lectura/escritura es primero asignar una serie de Arrays de enteros JavaScript consecutivos y explotar el...
cve-2022-42475
Vulnerabilidad de desbordamiento de búfer en SSL-VPN de FortiOS cve-2022-42475 https://nvd.nist.gov/vuln/detail/CVE-2022-42475 Código POC para explotar el desbordamiento de montón Heap overflow en el demonio SSLVPN de Fortinet Notas Este es un POC rápido y sucio que probablemente no funcione en...
cve-2022-42475
cve-2022-42475 Código POC para explotar el desbordamiento de heap en el daemon SSLVPN de Fortinet Notas Este es un POC rápido y sucio que probablemente no funcione en ningún sitio a menos que tengas mucha suerte. Depende de la versión y contiene algunos offsets codificados que muy probablemente...
exr-imageio-poc
exr-imageio-poc PoC para una vulnerabilidad de desbordamiento de enteros en ImageIO parcheada en iOS/macOS 26.5 CVE-2026-28990 Error descubierto por Jiri Ha y Arni Hardarson La vulnerabilidad Había un desbordamiento de enteros en la función EXRReadPlugin::decodeBlockAppleEXR antes de iOS/macOS 26...
EUVD-2026-77471
A flaw was found in GIMP's ICO file loader. When processing an ICO file containing an embedded PNG image, an integer overflow can occur during the calculation of the required buffer size. This leads to an undersized buffer being allocated, causing a heap-based buffer overflow when the decoded pix...
CVE-2024-38077
CVE-2024-38077 Aquí hay una posible descripción de GitHub para CVE-2024-38077: CVE-2024-38077: Vulnerabilidad de ejecución remota de código en el servicio de licencias de escritorio remoto de Windows Resumen: CVE-2024-38077 es una vulnerabilidad crítica en el Servicio de licencias de escritorio...
Astra Linux – Vulnerability in openexr
OpenEXR 3.1.x before 3.1.4 has a heap-based buffer overflow in Imf31::LineCompositeTask::execute called from IlmThread31::NullThreadPoolProvider::addTask and IlmThread31::ThreadPool::addGlobalTask. NOTE: db217f2 may be inapplicable...
Astra Linux – Vulnerability in libde265
It was discovered that Libde265 v1.0.8 contains a heap-buffer-overflow vulnerability through the use of mcluma in the motion.cc library. This vulnerability allows attackers to cause a Denial of Service DoS attack by using a specially crafted video file...
Astra Linux – Vulnerability in Chromium
A heap buffer overflow vulnerability in Google Chrome’s Media component on Linux, prior to version 88.0.4324.182, allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page...
Astra Linux – Vulnerability in freerdp3
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.2, there was a heap-buffer-overflow vulnerability at 24 bytes before the allocation, in the function winpralignedoffsetrecalloc. This issue has been fixed in version 3.24.2...
Astra Linux – Vulnerability in Chromium
A heap buffer overflow in tab groups in Google Chrome prior to version 89.0.4389.90 allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page...