CVE-2026-75818

The GNU Aspell prezip-bin utility contains a heap-based buffer overflow vulnerability within the decompressor located in prog/prezip.c. The root cause is an insufficient check of buffer space, allowing a crafted compressed file to trigger out-of-bounds read and write operations on the heap. An at...

CVE-2026-75818 Heap Buffer Overflow in GNU Aspell's prezip utility

GNU Aspell prezip-bin contains a heap-based buffer overflow vulnerability in the decompressor in prog/prezip.c. The decompressor does not properly check buffer space, so a crafted compressed file can cause out-of-bounds read and write operations on the heap. An attacker who convinces a user to...

CVE-2026-75818 Heap Buffer Overflow in GNU Aspell's prezip utility

GNU Aspell prezip-bin contains a heap-based buffer overflow vulnerability in the decompressor in prog/prezip.c. The decompressor does not properly check buffer space, so a crafted compressed file can cause out-of-bounds read and write operations on the heap. An attacker who convinces a user to...

CVE-2026-75818 Heap Buffer Overflow in GNU Aspell's prezip utility

GNU Aspell prezip-bin contains a heap-based buffer overflow vulnerability in the decompressor in prog/prezip.c. The decompressor does not properly check buffer space, so a crafted compressed file can cause out-of-bounds read and write operations on the heap. An attacker who convinces a user to...

CVE-2026-42945-Reverse-Shell-POC

CVE-2026-42945 NGINX Rift リバースシェル付き RCE PoC CVE-2026-42945 のリモートコード実行 RCE 概念実証 PoC です。これは NGINX の ngxhttprewritemodule におけるヒープバッファオーバーフローです。このフォークは、公開されているトリガー PoC を拡張し、組み込みのリバースシェルリスナーと、CTF や隔離されたラボ環境向けの設定可能な悪用パラメータを追加しています。 脆弱性概要 CVE ID: CVE-2026-42945 別名: NGINX Rift 影響を受けるコンポーネント:...

CVE-2026-9256-Poc

nginx ngxhttprewritemodule 힙 버퍼 오버플로우 설명 nginx Plus 및 nginx 오픈 소스 ngxhttprewritemodule에 힙 버퍼 오버플로우 취약점이 존재합니다. rewrite 지시문이 중첩된 PCRE 캡처 그룹예: ^/.$이 있는 정규식과 여러 캡처를 참조하는 대체 문자열예: $1&y=$2을 사용할 때, 정적 경로 버퍼 크기 계산이 필요한 공간을 과소평가하여 실제 쓰기가 할당된 크기Pool Slip를 초과하게 됩니다. 인증되지 않은 공격자는 조작된 HTTP 요청을 통해 이를 트리거하여 작업...

Security Bulletin: Vulnerabilities exists in IBM Cloud Pak for Data System (Yosemite 1.0)

Summary Vulnerabilities identified in IBM Cloud Pak for Data System Yosemite 1.0 - NRS have been addressed in version 3.0.5.4 Vulnerability Details CVEID:CVE-2026-62574 DESCRIPTION: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Ja...

DEBIAN-CVE-2026-98184

In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: prevent authentication frame length truncation mwifiexcfg80211authenticate derives the authentication frame length from req-ielen and req-authdatalen, both of type sizet, but stores it in a u16. NL80211ATTRAUTHDATA...

CVE-2026-98184

In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: prevent authentication frame length truncation mwifiexcfg80211authenticate derives the authentication frame length from req-ielen and req-authdatalen, both of type sizet, but stores it in a u16. NL80211ATTRAUTHDATA...

UBUNTU-CVE-2026-98184

In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: prevent authentication frame length truncation mwifiexcfg80211authenticate derives the authentication frame length from req-ielen and req-authdatalen, both of type sizet, but stores it in a u16. NL80211ATTRAUTHDATA...

CVE-2026-98184

In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: prevent authentication frame length truncation mwifiexcfg80211authenticate derives the authentication frame length from req-ielen and req-authdatalen, both of type sizet, but stores it in a u16. NL80211ATTRAUTHDATA...

EUVD-2026-93112

In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: prevent authentication frame length truncation mwifiexcfg80211authenticate derives the authentication frame length from req-ielen and req-authdatalen, both of type sizet, but stores it in a u16. NL80211ATTRAUTHDATA...

CVE-2026-98184

The Linux kernel contains a heap buffer overflow in the mwifiex driver. The mwifiex_cfg80211_authenticate() function incorrectly stores the sum of req->ie_len and req->auth_data_len (both size_t) into a u16 variable. Because NL80211_ATTR_AUTH_DATA lacks a maximum length policy, the sum can ...

CVE-2026-98184 wifi: mwifiex: prevent authentication frame length truncation

In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: prevent authentication frame length truncation mwifiexcfg80211authenticate derives the authentication frame length from req-ielen and req-authdatalen, both of type sizet, but stores it in a u16. NL80211ATTRAUTHDATA...

CVE-2026-98184 wifi: mwifiex: prevent authentication frame length truncation

In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: prevent authentication frame length truncation mwifiexcfg80211authenticate derives the authentication frame length from req-ielen and req-authdatalen, both of type sizet, but stores it in a u16. NL80211ATTRAUTHDATA...

CVE-2025-21333

CVE-2025-21333 Hyper-V NT Kernel Integration VSP（vkrnlintvsp.sys）Paged Pool 힙 오버플로 → 로컬 권한 상승（LPE）。 본 디렉토리는 lab용 PoC 소스 코드（MrAle98/CVE-2025-21333-POC 기반, 로컬 패치 포함）。 1. 취약점 요약 항목| 내용 ---|--- CVE| CVE-2025-21333 유형| Heap-based Buffer Overflow 영향| 로컬 권한 상승（EoP）；야생 이용 표시됨 구성 요소| vkrnlintvsp.sys 취약 함수...

CVE-2026-48095

CVE-2026-48095 7-Zip은 높은 압축률을 제공하는 파일 아카이버입니다. 버전 26.00 이하에는 NTFS 압축 스트림 버퍼의 과소 할당GetCuSize 시프트 UB으로 인한 힙 버퍼 오버플로우 취약점이 존재하며, 공격자가 임의 코드 실행 또는 애플리케이션 크래시를 유발할 수 있습니다. NTFS 핸들러의 CInStream::GetCuSize는 압축 단위 버퍼 크기를 UInt321 = 28 및 CompressionUnit == 4인 조작된 이미지는 지수를 32로 만들어 정의되지 않은 동작을 유발하고 x86/x64에서...

RLSA-2026:75582 Important: librabbitmq security update

The librabbitmq packages provide an Advanced Message Queuing Protocol AMQP client library that allows you to communicate with AMQP servers using protocol version 0-9-1. Security Fixes: rabbitmq-c: rabbitmq-c: Heap buffer overflow leading to denial of service CVE-2026-44236 For more details about...

librabbitmq security update

An update is available for librabbitmq. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The librabbitmq packages provide an Advanced Message Queuing Protocol AMQ...

CVE-2026-42945

🛡️ CVE-2026-42945 - NGINX Rift NGINX의 심각한 힙 기반 버퍼 오버플로우 📌 개요 CVE-2026-42945NGINX Rift 로도 알려짐는 NGINX의 ngxhttprewritemodule에서 발견된 심각한 보안 취약점입니다. 유형 : 힙 기반 버퍼 오버플로우 CWE-122 발견 : 2026년 5월 존속 기간 : 약 18년 악용 가능 : 원격, 인증 불필요, 단일 조작된 HTTP 요청을 통해 이 취약점은 URI 재작성 규칙을 처리할 때 길이 검사 단계와 실제 복사/이스케이프 단계 간의 불일치하는 버퍼...