CVE-2026-42945-POC

CVE-2026-42945 Prova di concetto RCE per CVE-2026-42945 , un overflow critico del buffer heap nel ngxhttprewritemodule di NGINX introdotto nel 2008. Il bug consente esecuzione di codice remoto non autenticato contro server che utilizzano le direttive rewrite e set. Questa vulnerabilità — insieme ...

fgt-cve-2023-27997-exploit

fgt-cve-2023-27997-exploit Script PoC dell'exploit per FortiGate SSL‑VPN CVE‑2023‑27997 con ROP Chain Indice Descrizione Versioni interessate Installazione Utilizzo Esempio di output Dettagli tecnici Avvertenze Riferimenti Descrizione fgt-cve-2023-27997-exploit.py è uno script exploit...

CVE-2026-78002

A heap buffer overflow in the RainerScript replace() function of rsyslog allows an unauthenticated remote attacker to cause a denial of service by sending specially crafted syslog messages. The root cause is an incorrect buffer size calculation during string replacement, leading to memory corrupt...

CVE-2026-78002 Rsyslog: rsyslog: denial of service via heap buffer overflow in rainerscript replace() function

A flaw was found in rsyslog. An unauthenticated remote attacker can trigger a heap buffer overflow in the RainerScript replace function by sending specially crafted syslog messages. This vulnerability arises from an incorrect buffer size calculation during string replacement, causing memory...

EUVD-2026-67085

A flaw was found in rsyslog. An unauthenticated remote attacker can trigger a heap buffer overflow in the RainerScript replace function by sending specially crafted syslog messages. This vulnerability arises from an incorrect buffer size calculation during string replacement, causing memory...

CVE-2026-78002

A flaw was found in rsyslog. An unauthenticated remote attacker can trigger a heap buffer overflow in the RainerScript replace function by sending specially crafted syslog messages. This vulnerability arises from an incorrect buffer size calculation during string replacement, causing memory...

CVE-2026-34674 Substance3D - Sampler | Heap-based Buffer Overflow (CWE-122)

Substance3D - Sampler versions 5.1.3 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-34674

Adobe Substance 3D Sampler versions 5.1.3 and earlier are affected by a Heap-based Buffer Overflow (CWE-122) that can lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction , specifically that a victim must open a malicious file. Adobe rated th...

EUVD-2026-67082

Substance3D - Sampler versions 5.1.3 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

libwebp-checker

中文 | EN Strumenti di verifica delle dipendenze libwebp CVE-2023-4863 Questo strumento verifica se l'applicazione o il processo del tuo server è affetto da CVE-2023-4863, una vulnerabilità di overflow del buffer heap in libwebp versioni superiori alla 0.5.0. Esegui questo script nel tuo ambiente d...

CVE-2021-3156

CVE-2021-3156 Nota: Queste istruzioni sono mie personali e note da uno streaming che ho fatto. Se qualcosa non è corretto, fammelo sapere. Fidati prima delle fonti ufficiali! Ciao a tutti, Un paio di giorni fa, è stato scoperto un grave overflow del buffer basato su heap in sudo, sfruttabile da...

CVE-2026-80570

A flaw was found in the synaptics-rmi4 component of the Linux kernel. This vulnerability occurs when an error in processing a report request or command leads to an incorrect size being used for subsequent data operations. A local user could exploit this by manipulating the video format, causing t...

CVE-2026-80568

A flaw was found in the Linux kernel's synaptics-rmi4 input driver. Changing the diagnostic report type while a video stream V4L2 is active can alter the expected report size. Since V4L2 buffers are allocated based on the initial size at stream start, a larger subsequent report could lead to a he...

CVE-2019-18634-writeup

Análise do CVE-2019-18634 https://www.exploit-db.com/exploits/47995 Sudo 1.8.25p - 'pwfeedback' Buffer Overflow PoC A opção pwfeedback do sudo pode ser usada para fornecer feedback visual quando o usuário está digitando sua senha. Para cada tecla pressionada, um asterisco é impresso. Esta opção f...

CVE-2025-54574-Squid-Heap-Buffer-Overflow

CVE-2025-54574-Squid-Heap-Buffer-Overflow Vulnerabilità trovata su Squid Proxy. CVE-2025-54574 — Overflow critico del buffer heap in Squid Proxy Questo repository documenta il processo di scoperta, analisi e divulgazione responsabile di CVE-2025-54574, un overflow critico del buffer heap in Squid...

EUVD-2026-66483

In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - block sinput when F54 queue is busy Changing the input diagnostic report type mid-stream changes the report size. Since V4L2 buffers are allocated based on the size at stream start, changing the input whil...

EUVD-2026-66485

In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - zero report size on F54 work error In rmif54work, if an error occurs during report request or command verification, the code jumped directly to the 'error' label, bypassing the 'abort' label where...

CVE-2021-39863

CVE-2021-39863 Adobe Acrobat Reader DC 21.005.20048.43252 32 बिट यह संस्करण डाउनलोड करें : https://ardownload2.adobe.com/pub/adobe/reader/win/AcrobatDC/2100520048/AcroRdrDC2100520048enUS.exe ASLR, DEP को बायपास करता है CFG को बायपास नहीं करता विश्लेषण टीम ब्लॉग टीम सदस्य ब्लॉग - mntly Adobe root...

NGINX-ngx_http_rewrite_module-heap-buffer-overflow-CVE-2026-9256

CVE-2026-9256 NGINX ngxhttprewritemodule PoC 推导过程与思考 适用范围：仅用于本地靶场、授权复现环境、漏洞验证和防护规则分析。不要对未授权目标使用。本文中的 PoC 思路只验证远程可见的 NGINX worker crash 行为，不包含 RCE、ASLR 绕过或稳定利用链。 1. 漏洞背景 CVE-2026-9256 是 NGINX ngxhttprewritemodule 中的堆缓冲区溢出漏洞。漏洞触发并不是单纯访问某个固定 URI，而是依赖特定的 rewrite 配置模式：rewrite 正则中存在互相重叠的 PCRE 捕获组，并且...

Baron-Samedit-Heap-Buffer-Overflow-CVE-2021-3156

Baron-Samedit-Débordement-de-Tas-Heap-CVE-2021-3156 Version Vulnérable à l'Exploit La vulnérabilité Baron Samedit CVE-2021-3156 affecte les versions legacy de sudo 1.8.2 à 1.8.31p2 et les versions stables 1.9.0 à 1.9.5p1. Ce défaut de débordement de tas basé sur le heap a été introduit en juillet...