Exploitarium-Detections

Exploitarium KQL Detection Coverage KQL detection rules for Microsoft Sentinel and Defender XDR covering the bikini/exploitarium anonymous disclosure — a personal research archive of 15+ distinct vulnerability targets across 109+ tracked files, released without vendor notification on June 23, 202...

CentOS Linux 6 [TuxCare] Security Update: cpio Multiple Vulnerabilities (CENTOS6:CLSA-2026:1793167254)

The CentOS Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the TuxCare CENTOS6:CLSA-2026:1793167254 advisory. - In all versions of cpio before 2.13 does not properly validate input files when generating TAR archives. When cpio is used to create T...

CVE_2025_24257----NOT-MINE

🔧 CVE202524257----NOT-MINE - Run the Windows PoC Safely 🧾 Overview CVE202524257----NOT-MINE is a Windows proof of concept that shows a kernel memory bug in IOGPUFamily. It is based on a bitmapmask underflow that can lead to a kernel heap out-of-bounds write. This project is the first public PoC...

CVE-2026-80757

A flaw was found in the Linux kernel's Security-Enhanced Linux SELinux component. When an SELinux policy is loaded, the system fails to properly validate the number of permissions declared by a class that inherits permissions from a common set. This oversight can lead to an out-of-bounds heap...

Amazon Linux 2 : perl (ALAS-2026-4026)

The version of perl installed on the remote host is prior to 5.16.3-299. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-4026 advisory. Perl versions through 5.45.1 have out-of-bounds heap reads and writes during regular expression matching via an undersized...

Medium: perl

Issue Overview: Perl versions through 5.45.1 have out-of-bounds heap reads and writes during regular expression matching via an undersized superlinear cache in Sregmatch. The regex engine's superlinear cache holds one bit per subject position for each participating WHILEM node, so the bit count i...

Medium: perl

Issue Overview: Perl versions through 5.45.1 have out-of-bounds heap reads and writes during regular expression matching via an undersized superlinear cache in Sregmatch. The regex engine's superlinear cache holds one bit per subject position for each participating WHILEM node, so the bit count i...

Exploit for CVE-2026-111497

CVE-2026-111497 — Node2Shell Research Arkango Security Re...

CLEANSTART-2026-VK14120 Issue summary: OpenSSL CMS decryption sizes the key-unwrap output buffer based on querying the unwrapped key size, but the AES-WRAP-PAD unwrap primitive can write and cleanse more bytes than that q...

CVE-2026-63072 affects multiple packages. Issue summary: OpenSSL CMS decryption sizes the key-unwrap output buffer based on querying the unwrapped key size, but the AES-WRAP-PAD unwrap primitive can write and cleanse more bytes than that query reports, causing an 8-byte out-of-bounds heap write...

CVE-2026-114045

A flaw was found in FreeRDP. An integer wraparound in rdpsndserverselectformat DVIADPCM block-alignment arithmetic bypasses validation in the server-side rdpsnd channel. A malicious RDP client can send crafted SNDCFORMATS PDUs, causing an unbounded heap write during server audio playback that may...

CLSA-2026-1792567671 mutt: Fix of 2 CVEs

CVE-2026-43861: reject embedded nul in urlpctdecode - CVE-2026-107570: fix out-of-bounds heap write in convertfilefromto...

Unity Linux 20.1070a Security Update: libXfont2 (UTSA-2026-141785)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-141785 advisory. fsreadglyphs in the libXfont2 font-server client src/fc/fserve.c indexes the per-character encoding array using numchars from the FSQueryXBitmaps16 reply, but that...

CVE-2026-91041

Mounting an attacker-controlled FAT image with fault tolerance enabled causes an out-of-bounds heap write during log replay. The write is attacker-positioned and attacker-valued, and on a common embedded memory layout it reaches the FXMEDIA driver callback, giving control of the instruction point...

CVE-2026-91041 FileX fault-tolerant log replay writes past the destination sector when mounting a crafted FAT image

Mounting an attacker-controlled FAT image with fault tolerance enabled causes an out-of-bounds heap write during log replay. The write is attacker-positioned and attacker-valued, and on a common embedded memory layout it reaches the FXMEDIA driver callback, giving control of the instruction point...

CVE-2026-91041 FileX fault-tolerant log replay writes past the destination sector when mounting a crafted FAT image

Mounting an attacker-controlled FAT image with fault tolerance enabled causes an out-of-bounds heap write during log replay. The write is attacker-positioned and attacker-valued, and on a common embedded memory layout it reaches the FXMEDIA driver callback, giving control of the instruction point...

EUVD-2026-104999

Mounting an attacker-controlled FAT image with fault tolerance enabled causes an out-of-bounds heap write during log replay. The write is attacker-positioned and attacker-valued, and on a common embedded memory layout it reaches the FXMEDIA driver callback, giving control of the instruction point...

CVE-2026-91041

The FileX filesystem component is vulnerable to an out-of-bounds heap write during log replay when mounting a crafted FAT image with fault tolerance enabled. The vulnerability is caused by the system writing past the destination sector, allowing an attacker to control the position and value of th...

CVE-2026-91041 FileX fault-tolerant log replay writes past the destination sector when mounting a crafted FAT image

Mounting an attacker-controlled FAT image with fault tolerance enabled causes an out-of-bounds heap write during log replay. The write is attacker-positioned and attacker-valued, and on a common embedded memory layout it reaches the FXMEDIA driver callback, giving control of the instruction point...

PT-2026-118370

Mounting an attacker-controlled FAT image with fault tolerance enabled causes an out-of-bounds heap write during log replay. The write is attacker-positioned and attacker-valued, and on a common embedded memory layout it reaches the FX MEDIA driver callback, giving control of the instruction...

Eclipse ThreadX FileX input validation error vulnerability

Versions 6.5.1.202602 and earlier of Eclipse ThreadX FileX contain a security vulnerability. This vulnerability arises when an attacker with control over the FAT image that enables fault tolerance mounts a filesystem, leading to an out-of-bounds heap write during log replay. Both the location and...