CVE-2026-46570

In NTFS-3G before 2026.7.7, a heap buffer overflow exists in ntfsindexwalkdown in libntfs-3g/index.c that allows an attacker to corrupt heap memory in the SUID-root ntfs-3g binary by crafting a malicious NTFS image. The overflow is triggered by reading the special crafted file metadata...

CVE-2026-42945-POC

CVE-2026-42945 NGINX Rift — Эксплойт для HTB Автономный эксплойт для уязвимости переполнения кучи NGINX, обнаруженной в 2024 году. Эта версия оптимизирована для окружений HackTheBox и CTF, где невозможно настроить Docker-контейнеры. Детали уязвимости CVE-2026-42945 — это критическое переполнение...

CVE-2026-106564

The open-source image processing software ImageMagick is vulnerable to a Heap Buffer Over-Write in its EXR decoder . Specifically, processing a crafted EXR image can cause the decoder to write beyond the heap buffer, leading to a process crash . This issue affects versions prior to 7.1.2-32 . The...

EUVD-2026-94379

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-32, a crafted EXR image can cause the EXR decoder to write beyond a heap buffer, causing the process to crash. This issue is fixed in version 7.1.2-32...

CVE-2026-106564 ImageMagick: Heap Buffer Over-Write in EXR decoder

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-32, a crafted EXR image can cause the EXR decoder to write beyond a heap buffer, causing the process to crash. This issue is fixed in version 7.1.2-32...

CVE-2026-77214

The libexpat library (versions prior to commit 13c5f63 ) contains a heap buffer over-read vulnerability in xmlparse.c. The XML_ParseBuffer function fails to validate the caller-supplied len against the allocated buffer size when updating parser->m_bufferEnd. Consecutive calls to XML_ParseBuffe...

CVE-2026-77214

libexpat before commit 13c5f63 contains a heap buffer over-read vulner...

EUVD-2026-94368

libexpat before commit 13c5f63 contains a heap buffer over-read vulnerability in xmlparse.c. XMLParseBuffer advances the parse buffer end with parser-mbufferEnd += len using a caller-supplied length that is not validated against the allocated buffer size, so repeated XMLParseBuffer calls move...

CVE-2026-106064 Gimp: gimp: heap buffer overflow in gif export on oversized image dimensions

A heap-based buffer overflow was found in GIMP’s GIF export plug-in. Exporting an image with very large width and height can cause 32-bit overflow when computing the pixel buffer size. The plug-in allocates a buffer based on the wrapped value while GEGL writes using the true image extent, rooted ...

CVE-2026-106064

A heap-based buffer overflow exists in the GIMP GIF export plug-in . The vulnerability is rooted in an integer overflow occurring during the calculation of the pixel buffer size when processing images with very large dimensions. Specifically, the plug-in allocates a buffer based on a wrapped 32-b...

CVE-2026-46572

In NTFS-3G before 2026.7.7, a heap buffer overflow exists in ntfsibcuttail in libntfs-3g/index.c that allows an attacker to corrupt heap memory in the SUID-root ntfs-3g binary by crafting a malicious NTFS image. The overflow is triggered by creating a file in a specially crafted directory...

CVE-2026-46569

In NTFS-3G before 2026.7.7, a heap buffer overflow exists in ntfsibcopytail, in libntfs-3g/index.c, that allows an attacker to corrupt heap memory in the SUID-root ntfs-3g binary by crafting a malicious NTFS image. The overflow is triggered by extending a directory, e.g., by creating a file...

CVE-2026-42616

In NTFS-3G before 2026.7.7, a heap buffer overflow exists in cat in ntfscat.c that allows an attacker to corrupt heap memory in the ntfscat binary by crafting a malicious NTFS image. The overflow is triggered by reading a file...

CVE-2026-42617

In NTFS-3G before 2026.7.7, a heap buffer overflow exists in ntfsirtoib in index.c that allows an attacker to corrupt heap memory in the SUID-root ntfs-3g binary by crafting a malicious NTFS image. The overflow is triggered by extending a directory, e.g., by creating a file...

CVE-2026-42618

In NTFS-3G before 2026.7.7, a heap buffer overflow exists in ntfsdecompress in compress.c that allows an attacker to corrupt one byte of heap memory in the SUID-root ntfs-3g binary by crafting a malicious NTFS image. The overflow is triggered by reading the special crafted file...

nGixshell

nGixShell 은 nginx CVE 스캐너이자 RCE 익스플로잇 프레임워크입니다. CVE-2026-42945F5/NVD 기준 CVSS 3.1 8.1 HIGH — ngxhttprewritemodule의 힙 버퍼 오버플로 — 에 대한 개념 증명PoC과 함께, 자동화된 HTTP 프로브, 핑거프린팅, WAF 탐지/우회, 웹 보안 감사, 보고서 생성을 지원하는 64개의 nginx CVE 를 커버하는 스캐너를 제공합니다. 외부 의존성 없음. 순수 Python 3 표준 라이브러리만 사용합니다. 익스플로잇 전제 조건 먼저 읽어보세요...

nginx-rift-private-lab

NGINX Rift CVE-2026-42945 에 대한 RCE 개념 증명PoC으로, 2008년에 도입된 NGINX ngxhttprewritemodule의 치명적인 힙 버퍼 오버플로입니다. 이 버그는 rewrite 및 set 지시문을 사용하는 서버에 대해 인증 없이 원격 코드 실행을 가능하게 합니다. 이 포크는 NGINX 오버플로를 일반적인 동일 호스트 LFI/임의 파일 읽기 프리미티브와 결합한 ASLR 우회 체인으로 기존 PoC를 확장합니다. 파일 읽기 프리미티브는 nginx 워커 맵, libc, 그리고 라이브...

CVE-2023-38545-POC

CVE-2023-38545 POC для инструмента командной строки curl Этот POC основан на более раннем POC, созданном UTsweetyfish, опубликованном в этом репозитории:https://github.com/UTsweetyfish/CVE-2023-38545. В отличие от того POC, этот предназначен для инструмента командной строки, а не для библиотеки...

nginx: Fix of 5 CVEs

CVE-2026-27651: properly clear s-passwd in mail auth http requests to fix a null pointer dereference on CRAM-MD5/APOP retry - CVE-2026-27654: validate the Destination length for Dav COPY and MOVE to prevent an integer underflow and heap buffer overwrite when alias is used - CVE-2026-27654: also...

Apple-Remote-Crash-Tool-CVE-2018-4407

Apple-Remote-Crash-Tool-CVE-2018-4407 동일한 WiFi 네트워크에 있는 모든 macOS High Sierra 또는 iOS 11 장치를 충돌시킵니다 공개된 '힙 버퍼 오버플로 취약점'CVE-2018-4407을 사용하여 전체 네트워크를 더 쉽게 공격할 수 있게 해주는 작은 도구입니다. 요구 사항 MacOS Python 설치 Scapy 설치 pip install scapy 기본 원리 대상 장치의 IP 주소로 악성 ICMP 패킷을 전송합니다 지원 대상 Apple iOS 11 및 이전 버전: 모든 장치 iO...