CVE-2021-3156-Exp

CVE-2021-3156-Exp The exploit of CVE-2021-3156. After an overnight researching, finally, I got it! Thanks https://www.qualys.com/2021/01/26/cve-2021-3156/baron-samedit-heap-based-overflow-sudo.txt...

CVE-2026-77102 CommServe Denial of Service

CommServe contained a heap-based buffer overflow issue affecting service availability. Software customers upgrade to resolved maintenance release. Update CommServe...

CVE-2026-77102

CommServe (Commvault) is affected by a heap-based buffer overflow that impacts service availability , effectively enabling a denial-of-service condition. The CVSS 4.0 score is 8.7 (HIGH) , with the vulnerability reachable over the network at low complexity , requiring no privileges and no user in...

Moderate: Red Hat Security Advisory: glib2 security update

An update for glib2 is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

xdgmime: heap-based buffer overflow in _xdg_mime_magic_parse_magic_line() in xdgmimemagic.c

A flaw was found in xdgmime. A heap-based buffer overflow can be triggered in xdgmimemagicparsemagicline in the xdgmimemagic.c file on little-endian systems when an attacker-controlled MIME magic file in a user-writable XDG data location e.g., in the $XDGDATAHOME/mime/magic path is parsed by an...

Important: Red Hat Security Advisory: gegl security update

An update for gegl is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability...

CVE-2021-3156-Heap-Based-Buffer-Overflow-in-Sudo-Baron-Samedit-

Qualys Security Advisory Baron Samedit: Heap-based buffer overflow in Sudo CVE-2021-3156 ======================================================================== Contents Summary Analysis Exploitation Acknowledgments Timeline =======================================================================...

CVE-2021-3156

CVE-2021-3156 https://www.qualys.com/2021/01/26/cve-2021-3156/baron-samedit-heap-based-overflow-sudo.txt https://blog.qualys.com/vulnerabilities-research/2021/01/26/cve-2021-3156-heap-based-buffer-overflow-in-sudo-baron-samedit https://access.redhat.com/security/vulnerabilities/RHSB-2021-002...

cve-2024-49113-ldap_nightmare_reproduction

CVE-2024-49113 — LDAP Nightmare Windows LDAP 客户端远程代码执行（基于堆的缓冲区溢出）...

Linux Distros Unpatched Vulnerability : CVE-2026-86142

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In libxml2 before 2.15.4, there is a heap-based buffer overflow in xmlXPtrEvalXPtrPart because of xmlXPtrEval xpointer length saturation. CVE-2026-86142 Note th...

CVE-2026-55200

Security Report: CVE-2026-55200 📝 General Description CVE-2026-55200 is a critical heap-based buffer overflow vulnerability dynamic memory corruption affecting the libssh2 library in versions up to 1.11.1. It allows a malicious SSH server to compromise vulnerable clients that connect to it. ⚡...

CVE-2026-83959 Substance3D - Sampler | Heap-based Buffer Overflow (CWE-122)

Substance3D - Sampler is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2025-47987

CVE-2025-47987: Windows CredSSP Elevation of Privilege 📌 This repository contains documentation and analysis resources about the vulnerability CVE-2025-47987, a heap-based buffer overflow flaw affecting the Windows Credential Security Support Provider CredSSP protocol. 📝 Description The...

CVE-2026-27831-POC

CVE-2026-27831-POC CVE-2026-27831 的 PoC 漏洞利用 这是针对 rldns 1.3 版本中远程基于堆的越界读取漏洞的概念验证利用，该漏洞可导致拒绝服务。 rldns 是一款开源的 DNS 服务器，支持 Linux、FreeBSD 和 NetBSD，运行于 x8664 架构。 Rldns 1.3 版本存在基于堆的越界读取漏洞，可导致拒绝服务。1.4 版本已包含针对该问题的补丁。 漏洞发现者：Antonius bluedragonsecurity.com...

Security Bulletin: IBM i is Affected By Buffer Overflow Vulnerability [CVE-2026-18341]

Summary IBM i is vulnerable to a buffer overflow due to an integer underflow CVE-2026-18341 as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-18341 DESCRIPTION: IBM i could allow a remote authenticated attacker to corrupt memory due to an integer underflow...

CVE-2019-19204

CVE-2019-19204 在Oniguruma 6.x 6.9.4rc2之前版本中发现一个问题。在regparse.c的fetchintervalquantifier函数（原名fetchrangequantifier）中，调用PFETCH时未检查PEND。这导致基于堆的缓冲区越界读取。 研究人员：ManhND（来自Tarantula团队，VinCSS（Vingroup成员）） 什么是Oniguruma Oniguruma由K...

gimp: GIMP: Remote code execution via TIF file parsing heap-based buffer overflow

A flaw was found in GIMP. This heap-based buffer overflow vulnerability in the TIF file parsing component allows a remote attacker to execute arbitrary code. User interaction is required, as the target must open a specially crafted malicious TIF file. Successful exploitation can lead to arbitrary...

CVE-2021-3156

CVE-2021-3156 CentOS向けAnsibleロール CVE-2021-3156修正 はじめに 1.9.5p2より前のSudoにはヒープベースのバッファオーバーフローが存在し、"sudoedit -s"と末尾がバックスラッシュ1文字で終わるコマンドライン引数によりrootへの権限昇格が可能です。 CVE-2021-3156 ニュース RU 実行 root@kitploit: ansible-playbook updatessh.yml --tags ssh-update...

Linux-Heap-Based-Type-Confusion-in-L2CAP

Linux: Heap-Based Type Confusion in L2CAP CVE-2020-12351 Linux: Heap-Based Type Confusion in L2CAP PoC CVE-2020-12351 on BLE implementation Why did I modify the original PoC? The original PoC is focused on sending a malicious l2cap packet via Bluetooth Classic. However, I had a requirement to tes...

httpd: Apache HTTP Server: Heap-based Buffer Overflow via malicious backend servers

A flaw was found in Apache HTTP Server. This heap-based buffer overflow vulnerability can be exploited by a malicious backend server when using ProxyPassReverseCookie directives. This could lead to a denial of service DoS condition, making the server unavailable to legitimate users...