Lucene search
+L

20765 matches found

Kitploit
Kitploit
added 2026/08/26 7:56 p.m.6 views

CVE-2026-47729

🦑 CVE-2026-47729 - Squidbleed ⚠️ Der alte Cousin von Heartbleed, versteckt in Squid seit 1997. ✨ Funktionen Single-file PoC — Keine Abhängigkeiten Böswilliger FTP-Server, der NetWare-Banner nachahmt + abgeschnittene LIST-Antwort Echtzeit-Erkennung und -Dekodierung von Basic Auth - und Bearer...

6.5CVSS6.5AI score0.01503EPSS
SaveExploits1References1
Kitploit
Kitploit
added 2026/08/26 7:53 p.m.3 views

CVE-2026-40369

🚨 CVE-2026-40369 - Vulnerabilità di Elevazione dei Privilegi del Kernel di Windows Buffer Overflow Heap-Based del Kernel di Windows che consente a un attaccante locale di elevare i privilegi aNT AUTHORITY\SYSTEM. 📖 Panoramica CVE-2026-40369 è una vulnerabilità di elevazione dei privilegi di Alta...

7.8CVSS7.6AI score0.04725EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/08/26 7:45 p.m.3 views

CVE-2026-42945

🛡️ CVE-2026-42945 - NGINX Rift Overflow del buffer heap critico in NGINX 📌 Panoramica CVE-2026-42945 noto anche come NGINX Rift è una vulnerabilità di sicurezza critica nel modulo ngxhttprewritemodule di NGINX. Tipo : Heap-based Buffer Overflow CWE-122 Scoperta : Maggio 2026 Esiste da : 18 anni...

9.2CVSS8.2AI score0.68047EPSS
SaveExploits42
CVE
CVE
added 2026/08/26 7:21 p.m.18 views

CVE-2026-77652

A heap-based buffer overflow in the Dia diagram editor's WPG file importer (plug-ins/wpg/wpg-import.c ) allows out-of-bounds writes into a fixed 256-entry color palette. The WPG_COLORMAP record handler validates the start index only against the WPG record size, not the palette capacity, so a craf...

7.8CVSS
SaveExploits0References4
Kitploit
Kitploit
added 2026/08/26 5:16 p.m.2 views

PoC-in-GitHub

PoC in GitHub 2026 CVE-2026-0009 2026-06-01 In multiple locations, there is a possible tapjacking due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

8.4CVSS8.1AI score0.00143EPSS
SaveExploits2References2
CVE
CVE
added 2026/08/26 2:37 p.m.9 views

CVE-2026-80570

In the Linux kernel synaptics-rmi4 input driver, a bug in rmi_f54_work() allowed an error path to bypass the point where f54->report_size was normally zeroed. This left a stale value from a prior successful operation. If a user then resized the V4L2 format to a smaller size and a subsequent F5...

5.4AI score
SaveExploits0References8
CVE
CVE
added 2026/08/26 2:37 p.m.8 views

CVE-2026-80568

CVE-2026-80568 affects the Linux kernel 's synaptics-rmi4 driver (V4L2 interface). The root cause is a heap buffer overflow that occurs when the diagnostic report type is changed mid-stream via VIDIOC_S_INPUT . Because V4L2 buffers are allocated based on the size at stream start, switching to a l...

5.8AI score
SaveExploits0References8
RedhatCVE
RedhatCVE
added 2026/08/26 1:44 p.m.2 views

CVE-2026-19385

A flaw was found in PostgreSQL pgdump. A heap buffer overflow vulnerability exists when processing long function transform lists. An authenticated object creator can exploit this by providing a specially crafted transform list. This allows the attacker to execute arbitrary code as the operating...

8.8CVSS8.7AI score0.00427EPSS
SaveExploits0References4
Kitploit
Kitploit
added 2026/08/26 11:55 a.m.3 views

CVE-2015-8088

CVE-2015-8088 Fonte del codice PoC. Dettaglio del CVE: https://vulners.com/cve/CVE-2015-8088 Dettaglio della vulnerabilità: http://kernfunny.org/blog/cve-2015-8088-heap-based-buffer-overflow-in-the-hifi-driver-of-huawei-smart-phone.html...

9.3CVSS7.5AI score0.03811EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/08/26 10:56 a.m.2 views

CVE-2019-19203

CVE-2019-19203 È stato scoperto un problema in Oniguruma 6.x prima della 6.9.4rc2. Nella funzione gb18030mbcenclen nel file gb18030.c, un puntatore UChar viene dereferenziato senza verificare se ha superato la fine della stringa confrontata. Ciò porta a una sovralettura del buffer basata su heap...

7.5CVSS6.9AI score0.04052EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/08/26 10:35 a.m.4 views

CVE-2023-6931

CVE-2023-6931 PoC di Kernel Panic per CVE-2023-6931 Descrizione CVE-2023-6931 è una vulnerabilità in perfevent che porta a un heap buffer overflow causato da un integer overflow nel readsize di un gruppo. Cos'è un Performance Event perf event? perfevents è un framework di monitoraggio e analisi...

7.8CVSS6.3AI score0.00715EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/08/26 9:44 a.m.3 views

CVE-2019-20326

CVE-2019-20326 GNOME gThumb e Linux Mint Pix utilizzano il modulo cairoio per visualizzare diversi formati immagine con la libreria grafica Cairo. Nelle versioni di gThumb 3.8.3 e di Pix 2.4.5, cairoio è vulnerabile a un heap buffer overflow tramite un'immagine JPEG con larghezza o altezza maggio...

7.8CVSS7.6AI score0.02149EPSS
SaveExploits2References1
RedHat Linux
RedHat Linux
added 2026/08/26 9:40 a.m.4 views

FreeRDP: FreeRDP: Remote code execution or denial of service via audio input integer overflow

A flaw was found in FreeRDP, an open-source implementation of the Remote Desktop Protocol RDP. This vulnerability, an integer overflow in the audio input redirection channel, allows a remote attacker to supply a malicious FramesPerPacket value. This can lead to a heap-based buffer overflow,...

7.7CVSS8.4AI score0.00238EPSS
SaveExploits0References6
Kitploit
Kitploit
added 2026/08/26 8:55 a.m.1 views

Baron-Samedit-Heap-Buffer-Overflow-CVE-2021-3156

Baron-Samedit-Heap-Buffer-Overflow-CVE-2021-3156 Gegen die Schwachstelle anfällige Versionen Die Baron-Samedit-Schwachstelle CVE-2021-3156 betrifft die Legacy-Versionen von sudo 1.8.2 bis 1.8.31p2 und die stabilen Versionen 1.9.0 bis 1.9.5p1. Dieser Heap-basierte Pufferüberlauffehler wurde im Jul...

7.8CVSS6.8AI score0.99969EPSS
SaveExploits83
Kitploit
Kitploit
added 2026/08/26 8:55 a.m.2 views

Blackash-CVE-2025-54574

🛑 CVE-2025-54574 — Overflow del buffer heap in Squid ≤ 6.3 🛑 Gravità: Critica CVSS 9.3 Software interessato: Squid Proxy versioni 6.3 e precedenti Tipo di vulnerabilità: Overflow del buffer basato su heap Rilevata in: elaborazione URN Uniform Resource Name Impatto: Possibile esecuzione di codice ...

9.8CVSS8.8AI score0.22918EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/08/26 8:55 a.m.1 views

CVE-2026-35330

CVE-2026-35330 strongSwan EAP-SIM / EAP-AKA Attribut-Parser Pre-Auth Heap Buffer Overflow via Integer Underflow. Beschreibung parseattributes in src/libsimaka/simakamessage.c:419 liest TLV-Header, deren length-Byte 4-Byte-Wörter zählt. Für den ATRAND / ATENCRDATA-Zweig: root@kitploit: if hdr-leng...

4.2AI score
SaveExploits3
Kitploit
Kitploit
added 2026/08/26 8:55 a.m.2 views

nginx-rce-cve-2026-42945

5. CVE-2026-42945 - RCE critica in NGINX CVSS 9.2 Classificazione Categoria: 0-Day / Remote Code Execution CVE: CVE-2026-42945 CVSS: 9.2 Critico Data di scoperta: 12 maggio 2026 Data della patch: maggio 2026 rilascio trimestrale di sicurezza F5 Fonte: GitHub DepthFirstDisclosures/Nginx-Rift...

9.2CVSS8.4AI score0.68047EPSS
SaveExploits42
Kitploit
Kitploit
added 2026/08/26 8:55 a.m.2 views

CVE-2022-27666

CVE-2022-27666 Overflow del buffer heap nell'implementazione IPsec ESP6 del kernel Linux linux 5.13.19. Configurazione supponendo utente root 1. Compilare il kernel nella VM Installa le dipendenze: root@kitploit: apt update && apt install -y \ build-essential bc bison flex \ libssl-dev libelf-dev...

7.8CVSS6.8AI score0.05524EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/08/26 8:55 a.m.2 views

CVE-2023-21716-Analysis-ICT287

CVE-2023-21716 Analisi-ICT287: Esecuzione Remota di Codice in Microsoft Word Panoramica Questo repository documenta l'analisi e la riproduzione di CVE-2023-21716, una vulnerabilità di overflow del buffer basato su heap nel parser RTF di Microsoft Word con un punteggio CVSS di 9.8 Critico. Contenu...

9.8CVSS8.9AI score0.82302EPSS
SaveExploits11
Kitploit
Kitploit
added 2026/08/26 8:55 a.m.1 views

CVE-2022-24903-Heap-based-buffer-overflow-Hand-On-Lab

CVE-2022-24903 Praktisches Labor Autor: Andrew Beshay Mousa Ein praktisches Labor, das die Heap-Pufferüberlauf-Schwachstelle in rsyslog demonstriert. Eine praktische Laborumgebung, um die rsyslog Heap-Pufferüberlauf -Schwachstelle CVE-2022-24903 über das Octet-Count-Framing beim TCP-Syslog-Empfan...

8.1CVSS6.5AI score0.03933EPSS
SaveExploits1
Rows per page
Query Builder