CVE-2024-38077-MadLicense-exploit

CVE-2024-38077 MadLicense - Complete Exploitation Framework 📚 Technical Documentation for Presentation This document explains each component of the framework, why it exists , and how the heap buffer overflow exploitation works in modern Windows. 🎯 What Is CVE-2024-38077? The Vulnerability Windows...

cve-2021-3156

CVE-2021-3156 -- Baron Samedit Vulnerability Environment Create the image using Dockerfile docker build -t cve-2021-3156:ubuntu2004 . Create a container using the image docker run --rm -it cve-2021-3156:ubuntu2004 /bin/bash Vulnerability Cause In Sudo versions prior to 1.9.5p2 , there is an...

iOS-Kernel-Crash

CVE-2018-4407 Memory Corruption The vulnerability is a heap buffer overflow in the networking code in the XNU operating system kernel. XNU is used by both iOS and macOS, which is why iPhones, iPads, and Macbooks are all affected. My exploit PoC just overwrites the heap with garbage, which causes ...

CVE-2025-54574-Squid-Heap-Buffer-Overflow

CVE-2025-54574-Squid-Heap-Buffer-Overflow Vulnerability Found on Squid Proxy. CVE-2025-54574 — Critical Heap Buffer Overflow in Squid Proxy This repository documents the discovery, analysis, and responsible disclosure process of CVE-2025-54574, a critical heap-based buffer overflow in Squid 6.4...

CVE-2015-8088

CVE-2015-8088 Source of PoC code. Detail of the CVE: https://vulners.com/cve/CVE-2015-8088 Detail of the Vulnerability: http://kernfunny.org/blog/cve-2015-8088-heap-based-buffer-overflow-in-the-hifi-driver-of-huawei-smart-phone.html...

CVE-2019-20326

CVE-2019-20326 GNOME gThumb and Linux Mint Pix use the cairoio module for displaying several image formats with the Cairo graphics library. In gThumb versions 3.8.3 and Pix versions 2.4.5, cairoio is vulnerable to a heap buffer overflow via a JPEG image with either a width or height greater than...

Rocky Linux 10.2 [CIQ] Security Update: ghostscript / ghostscript-debuginfo / ghostscript-debugsource / etc (crlsa-2026_74464)

The Rocky Linux 10.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202674464 advisory. ghostscript: ghostscript: Heap buffer overflow via JPEG 2000 output adapter CVE-2026-39919 Tenable has extracted the preceding description block directly from t...

Fedora 43 : unbound (2026-41f949afc4)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-41f949afc4 advisory. Update to 1.26.1 rhbz2535076 Security fix list from upstream: - Fix CVE-2026-81642, Heap buffer overflow and possible Remote Code Execution when...

RockyLinux 9 : libvirt (RLSA-2026:74424)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:74424 advisory. libvirt: swtpm privilege escalation via symlink following CVE-2026-63622 libvirt: Integer overflow in NodeGetFreePages RPC handler leading to heap buffe...

RockyLinux 9 : ghostscript (RLSA-2026:74457)

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:74457 advisory. ghostscript: ghostscript: Heap buffer overflow via JPEG 2000 output adapter CVE-2026-39919 Tenable has extracted the preceding description block directly from th...

K000163528: Vim vulnerability CVE-2026-25749

Security Advisory Description Vim is an open source, command line text editor. Prior to version 9.1.2132, a heap buffer overflow vulnerability exists in Vim's tag file resolution logic when processing the 'helpfile' option. The vulnerability is located in the gettagfname function in src/tag.c. Wh...

CVE-2021-3156

CVE-2021-3156 Sudo anterior a 1.9.5p2 contiene un error de desfase de uno que puede resultar en un desbordamiento de búfer en el heap, lo que permite la escalada de privilegios a root mediante sudoedit -s y un argumento de línea de comandos que termina con un solo carácter de barra invertida...

OPENSUSE-SU-2026:22016-1 Security update for rustup

This update for rustup fixes the following issues: - CVE-2024-12224: idna: idna accepts Punycode labels that do not produce any non-ASCII when decoded bsc1243862. - CVE-2025-58160: tracing-subscriber: Tracing log pollution bsc1249008. - CVE-2026-25541: bytes: integer overflow in 'BytesMut:reserve...

llvm:llvm-dis-fuzzer: Heap-buffer-overflow in XXH3_hashLong_64b

Detailed Report: https://oss-fuzz.com/testcase?key=4688655238365184 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: llvm-dis-fuzzer Job Type: libfuzzerasanllvm Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x7abbce2e4eaa Crash State: XXH3hashLong64b...

CVE-2026-2005

CVE-2026-2005 — Desbordamiento de búfer en el heap de pgcrypto de PostgreSQL Commit objetivo: 4b324845ba5d24682b9b3708a769f00d160afbd7 PostgreSQL 18.1 — vulnerable Resumen Campo| Detalle ---|--- CVE| CVE-2026-2005 Tipo| Desbordamiento de búfer en el heap Componente| contrib/pgcrypto/pgp-pubdec.c ...

CVE-2026-39113

CVE-2026-39113: Heap Buffer Overflow in SQLite's Optional SQLAR Extension Executive Summary CVE-2026-39113 is a heap buffer overflow in SQLite's optional SQLAR extension. In an application that has loaded the extension, an attacker who can invoke sqlaruncompress with a controlled compressed blob...

NGINX-ngx_http_rewrite_module-heap-buffer-overflow-CVE-2026-9256

CVE-2026-9256 NGINX ngxhttprewritemodule PoC Derivation Process and Thoughts Scope: Only for local ranges, authorized reproduction environments, vulnerability verification, and protection rule analysis. Do not use against unauthorized targets. The PoC ideas in this document only verify remotely...

PoC-CVE-2025-69419

CVE-2025-69419 – OpenSSL Heap Buffer Overflow Reproducer Overview This repository contains a minimal proof-of-concept reproducer for CVE-2025-69419 affecting vulnerable versions of OpenSSL. The PoC demonstrates the heap out-of-bounds write reported for PKCS12getfriendlyname when processing a...

CVE-2022-24903-Heap-based-buffer-overflow-Hand-On-Lab

CVE-2022-24903 Hands-On Lab Author: Andrew Beshay Mousa A practical hands-on lab demonstrating the rsyslog heap buffer overflow vulnerability. A practical lab environment to reproduce and understand the rsyslog Heap Buffer Overflow vulnerability CVE-2022-24903 via octet-counted framing in TCP...

ghostscript security update

An update is available for ghostscript. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The Ghostscript suite contains utilities for rendering PostScript and PD...