nginx-cve-2026-42945-poc

CVE-2026-42945 — تجاوز سعة المخزن المؤقت في الكومة بوحدة NGINX Rewrite Module → RCE تم تأكيد نجاح RCE — من خلال تجاوز سعة الكومة + حقن العمليات عبر GDB، يتم تنفيذ أوامر عشوائية في عمليات NGINX / OpenResty worker. البدء السريع root@kitploit: 一键构建 NGINX 镜像 + 执行 RCE 测试 ./run.sh nginx 一键构建 OpenResty ...

CVE-2023-38545-libcurl-SOCKS5-heap-buffer-overflow

अस्वीकरण यह लेख केवल तकनीकी चर्चा और सीखने के उद्देश्य से है। इस दस्तावेज़ में दी गई जानकारी के उपयोग से होने वाले किसी भी प्रत्यक्ष या अप्रत्यक्ष परिणाम और नुकसान की जिम्मेदारी उपयोगकर्ता की होगी, लेखक इसके लिए कोई जिम्मेदारी नहीं लेता है। CVE-2023-38545: libcurl-SOCKS5-heap-buffer-overflow संदर...

CVE-2026-64565

A flaw was found in the Linux kernel's ims-pcu component. A malicious USB device can send an oversized data packet, which is not properly handled. This can lead to a heap buffer overflow, allowing an attacker to manipulate internal pointers. Successful exploitation could result in a control flow...

CVE-2026-14676

A flaw was found in PostgreSQL pgstatstatements. A local attacker, specifically a query author, could exploit a heap buffer overflow vulnerability by crafting special queries containing array constants. This could allow the attacker to execute arbitrary code as the operating system user running t...

CVE-2026-52492

A flaw was found in libtiff. An integer overflow vulnerability exists in the cvtRaster function of the rgb2ycbcr utility. When processing a specially crafted TIFF image during YCbCr conversion, an attacker could trigger an undersized heap allocation, leading to a heap-based buffer overflow. This...

CVE-2026-63072 Heap Buffer Overflow in CMS Key Unwrapping

Issue summary: OpenSSL CMS decryption sizes the key-unwrap output buffer based on querying the unwrapped key size, but the AES-WRAP-PAD unwrap primitive can write and cleanse more bytes than that query reports, causing an 8-byte out-of-bounds heap write. Impact summary: An attacker who supplies a...

CVE-2026-63072 Heap Buffer Overflow in CMS Key Unwrapping

Issue summary: OpenSSL CMS decryption sizes the key-unwrap output buffer based on querying the unwrapped key size, but the AES-WRAP-PAD unwrap primitive can write and cleanse more bytes than that query reports, causing an 8-byte out-of-bounds heap write. Impact summary: An attacker who supplies a...

CVE-2008-5416

CVE-2008-5416 Microsoft SQL Server spreplwritetovarbin - Corruzione della memoria tramite SQL Injection Un overflow del buffer basato su heap può verificarsi quando si chiama la stored procedure estesa non documentata "spreplwritetovarbin". Questa vulnerabilità riguarda tutte le versioni di...

RLSA-2026:59152 Important: gstreamer1-plugins-good security update

GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-good packages contain a collection of well-supported plug-ins of good quality and under the LGPL license. Security Fixes: gstreamer: GStreamer: Remote Code Execution via MRF fil...

gstreamer1-plugins-good security update

An update is available for gstreamer1-plugins-good. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list GStreamer is a streaming media framework based on graphs of...

cve-2022-42475-poc

CVE-2022-42475 PoC Fortinet SSL VPN Pre-Authentication Remote Code Execution Descrizione CVE-2022-42475 è una vulnerabilità di heap-based buffer overflow nel servizio SSL VPN di FortiOS che consente a utenti malintenzionati non autenticati di eseguire codice arbitrario in remoto RCE tramite...

CVE-2026-14669

A heap buffer overflow flaw was found in the PostgreSQL tochartimestamptz function. An attacker can exploit this by supplying an overly long POSIX timezone abbreviation to execute arbitrary code as the database's operating system user, potentially resulting in complete system compromise. Mitigati...

jq-els-backport-cve-2025-48060

jq-els-backport-cve-2025-48060 Rückportierung des Upstream-Fixes für CVE-2025-48060 Heap-Pufferüberlauf in jvstringempty auf jq 1.6. Backport CVE-2025-48060 – Rückportierung des Upstream-Commits c6e0416 „Fix heap buffer overflow when formatting an empty string" aus einer neueren jq-Version auf...

CVE-2026-55893

A flaw was found in Capstone, a disassembly framework. The SH floating-point decoders in arch/SH/SHDisassembler.c do not correctly validate the size of the operands array when processing certain instructions. This vulnerability allows a local attacker to provide specially crafted SH2A FPU bytecod...

MSTeams---Vulnerability---Remediation

🛡️ Correzione della CVE-2025-53783: RCE in Microsoft Teams 📝 Panoramica del Progetto Questo progetto dimostra un Workflow di gestione delle vulnerabilità. Utilizzando una VM Azure, ho identificato una vulnerabilità di "Esecuzione Remota di Codice" RCE ad alta gravità in Microsoft Teams, ne ho...

CVE-2021-3156

CVE-2021-3156 Description Sudo avant 1.9.5p2 présente un débordement de tampon basé sur le tas Heap-based Buffer Overflow, permettant une élévation de privilèges vers root via « sudoedit -s » et un argument de ligne de commande se terminant par un seul caractère antislash...

CVE-2026-11824

A flaw was found in SQLite, specifically within its FTS5 full-text search extension. Attackers can exploit a heap-based buffer overflow by providing a specially crafted database. This crafted database contains malicious metadata that triggers an integer underflow during FTS5 MATCH query processin...

nginx-rift-detect

nginx-rift-detect Verhaltensbasiertes Erkennungsskript für CVE-2026-42945 NGINX Rift – ein Heap-Pufferüberlauf in ngxhttprewritemodule, der seit 2008 in nginx vorhanden ist. ⚠️ Haftungsausschluss Dieses Tool ist ausschließlich für autorisierte Sicherheitstests und Forschung gedacht. Führen Sie es...

CVE-2026-11822

A flaw was found in SQLite's FTS5 full-text search extension. This vulnerability involves memory corruption, specifically an out-of-bounds read and a heap buffer overflow, which can be triggered by supplying a crafted database with malformed FTS5 page data. When an FTS5 MATCH query is executed...

ros2_CVE-2024-28231

Questo repository include un'immagine Docker vulnerabile di ROS2 Iron basata su Ubuntu 22 e un exploit corrispondente. Sfruttiamo la vulnerabilità in Fast-RTPS versione 2.10.3, che consente il denial of service di un subscriber remoto tramite heap buffer overflow. Immagine base vulnerabile Fast...