POC-CVE-2012-1831

POC-CVE-2012-1831 Prueba de Concepto para el CVE-2012-1831 Kingview Touchview 6.53 Antecedentes sobre Kingview KingView® es un potente software SCADA industrial basado en Windows para monitorear y controlar procesos industriales. Con más de 25 años de desarrollo, ahora es conocido por ser el...

libvirt security, bug fix, and enhancement update

An update is available for libvirt. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The libvirt library contains a C API for managing and interacting with the...

RLSA-2026:74424 Important: libvirt security, bug fix, and enhancement update

The libvirt library contains a C API for managing and interacting with the virtualization capabilities of Linux and other operating systems. In addition, libvirt provides tools for remote management of virtualized systems. Security Fixes: libvirt: swtpm privilege escalation via symlink following...

ghostscript security update

An update is available for ghostscript. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The Ghostscript suite contains utilities for rendering PostScript and PDF...

RLSA-2026:74457 Moderate: ghostscript security update

The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats so that the code can be displayed or printed. Security Fixes: ghostscript: ghostscript: Heap buffer overflow via JPEG 2000 output adapter...

Exploit for Out-of-bounds Write in Libtiff

libtiff CVE-2022-0891 — local build/diff + regression lab Bui...

CVE-2023-27997-check

Herramienta de Evaluación de Vulnerabilidad CVE-2023-27997 Detecte de forma segura si una instancia de FortiGate SSL VPN es vulnerable a CVE-2023-27997 basándose en el tiempo de respuesta. Consulte el artículo completo en el blog de Bishop Fox, que incluye un recorrido completo de la metodología...

CVE-2024-38077-MadLicense-exploit

CVE-2024-38077 MadLicense - Framework de Explotación Completo 📚 Documentación Técnica para Presentación Este documento explica cada componente del framework, por qué existe , y cómo funciona la explotación de heap buffer overflow en Windows moderno. 🎯 ¿Qué Es CVE-2024-38077? La Vulnerabilidad El...

cve-2021-3156

CVE-2021-3156 -- Baron Samedit Entorno de la vulnerabilidad Crear una imagen usando Dockerfille docker build -t cve-2021-3156:ubuntu2004 . Crear un contenedor usando la imagen docker run --rm -it cve-2021-3156:ubuntu2004 /bin/bash Causa de la vulnerabilidad En versiones anteriores a Sudo 1.9.5p2 ...

iOS-Kernel-Crash

CVE-2018-4407 Corrupción de memoria La vulnerabilidad es un desbordamiento de búfer en el montículo en el código de red del kernel del sistema operativo XNU. XNU es utilizado tanto por iOS como por macOS, por lo que los iPhones, iPads y Macbooks están todos afectados. Mi PoC del exploit simplemen...

CVE-2025-54574-Squid-Heap-Buffer-Overflow

CVE-2025-54574-Squid-Heap-Buffer-Overflow Vulnerabilidad encontrada en Squid Proxy. CVE-2025-54574 — Desbordamiento de Búfer Heap Crítico en Squid Proxy Este repositorio documenta el proceso de descubrimiento, análisis y divulgación responsable de CVE-2025-54574, un desbordamiento de búfer heap...

CVE-2015-8088

CVE-2015-8088 Fuente del código PoC. Detalle del CVE: https://vulners.com/cve/CVE-2015-8088 Detalle de la vulnerabilidad: http://kernfunny.org/blog/cve-2015-8088-heap-based-buffer-overflow-in-the-hifi-driver-of-huawei-smart-phone.html...

CVE-2019-20326

CVE-2019-20326 GNOME gThumb y Linux Mint Pix utilizan el módulo cairoio para mostrar varios formatos de imagen con la biblioteca gráfica Cairo. En versiones de gThumb 3.8.3 y Pix 2.4.5, cairoio es vulnerable a un desbordamiento del búfer del montón mediante una imagen JPEG con un ancho o alto...

Rocky Linux 10.2 [CIQ] Security Update: ghostscript / ghostscript-debuginfo / ghostscript-debugsource / etc (crlsa-2026_74464)

The Rocky Linux 10.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202674464 advisory. ghostscript: ghostscript: Heap buffer overflow via JPEG 2000 output adapter CVE-2026-39919 Tenable has extracted the preceding description block directly from t...

RockyLinux 9 : libvirt (RLSA-2026:74424)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:74424 advisory. libvirt: swtpm privilege escalation via symlink following CVE-2026-63622 libvirt: Integer overflow in NodeGetFreePages RPC handler leading to heap buffe...

Fedora 43 : unbound (2026-41f949afc4)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-41f949afc4 advisory. Update to 1.26.1 rhbz2535076 Security fix list from upstream: - Fix CVE-2026-81642, Heap buffer overflow and possible Remote Code Execution when...

RockyLinux 9 : ghostscript (RLSA-2026:74457)

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:74457 advisory. ghostscript: ghostscript: Heap buffer overflow via JPEG 2000 output adapter CVE-2026-39919 Tenable has extracted the preceding description block directly from th...

K000163528: Vim vulnerability CVE-2026-25749

Security Advisory Description Vim is an open source, command line text editor. Prior to version 9.1.2132, a heap buffer overflow vulnerability exists in Vim's tag file resolution logic when processing the 'helpfile' option. The vulnerability is located in the gettagfname function in src/tag.c. Wh...

CVE-2021-3156

CVE-2021-3156 Sudo anterior a 1.9.5p2 contiene un error de desfase de uno que puede resultar en un desbordamiento de búfer en el heap, lo que permite la escalada de privilegios a root mediante sudoedit -s y un argumento de línea de comandos que termina con un solo carácter de barra invertida...

OPENSUSE-SU-2026:22016-1 Security update for rustup

This update for rustup fixes the following issues: - CVE-2024-12224: idna: idna accepts Punycode labels that do not produce any non-ASCII when decoded bsc1243862. - CVE-2025-58160: tracing-subscriber: Tracing log pollution bsc1249008. - CVE-2026-25541: bytes: integer overflow in 'BytesMut:reserve...