CVE-2013-2028_Checker

CVE-2013-2028 - Nginx HTTP 服务器 1.3.9-1.4.0 分块编码栈缓冲区溢出 描述 nginx 1.3.9 至 1.4.0 版本中 http/ngxhttpparse.c 文件的 ngxhttpparsechunked 函数允许远程攻击者通过一个带有超大分块大小的分块传输编码请求造成拒绝服务（崩溃）并执行任意代码，该漏洞触发整数符号错误和基于栈的缓冲区溢出。 示例 $ python3 nginxcve20132028checker.py http://172.17.0.3 ! Target: http://172.17.0.3 Nginx version:...

CVE-2022-23967

CVE-2022-23967 在 TightVNC 1.3.10 中，存在整数符号错误，并由此在 rfbproto.c 的 InitialiseRFBConnection 中导致基于堆的缓冲区溢出 （针对 vncviewer 组件）。代码未对传递给 malloc 的大小进行检查， 例如会接受 -1。这会分配一个大小为零的内存块， 从而得到一个堆指针。然而，攻击者可以发送 0xffffffff 字节的数据， 这可能会造成拒绝服务（DoS）影响或导致远程代码执行。 漏洞类型 缓冲区溢出 产品厂商 TightVNC 受影响产品代码库 vncviewer - 1.3.10 受影响组件...

CVE-2017-7308

CVE-2017-7308 CVE ID: CVE-2017-7308 发布日期: 2017-03-29T20:59:00.373 基础分数 CVSS 3.0/3.1: 7.8 描述: 在 Linux 内核 4.10.6 及之前版本中，net/packet/afpacket.c 文件中的 packetsetring 函数未能正确验证某些块大小数据，从而允许本地用户通过精心构造的系统调用导致拒绝服务（整数符号错误和越界写入），或在持有 CAPNETRAW 能力的情况下提升权限。...

CVE-2018-12018

CVE-2018-12018 Mitre https://vulners.com/cve/CVE-2018-12018 Go以太坊（即geth）1.8.11之前版本中LES协议实现的GetBlockHeadersMsg处理器，由于数组索引的整数有符号性错误，可能导致访问违规，攻击者可通过发送包含-1 query.Skip值的数据包发起拒绝服务攻击。受影响的远程节点会因此立即崩溃，即EPoD（以太坊死亡数据包）问题。 主网 python3 exploit.py --mainnet --enode 'enode' 测试网 python3 exploit.py --enode 'enode'...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: libpng12 (UTSA-2026-093165)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093165 advisory. Integer signedness error in the pnginflate function in pngrutil.c in libpng before 1.4.10beta01, as used in Google Chrome before 17.0.963.83 and other products, allo...

CVE-2026-72380 xen/pvcalls: bound backend response req_id before indexing rsp[]

In the Linux kernel, the following vulnerability has been resolved: xen/pvcalls: bound backend response reqid before indexing rsp pvcallsfronteventhandler takes reqid directly from the backend-supplied ring response and uses it to index the fixed-size bedata-rsp array for a memcpy and a store, wi...

PT-2026-69147

Name of the Vulnerable Software and Affected Versions SF32LB MPI QSPI NOR flash driver affected versions not specified Description The SF32LB MPI QSPI NOR flash driver in drivers/flash/flash sf32lb mpi qspi nor.c contains an integer signedness error in its read and write paths. The driver validat...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002514)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002514 advisory. Integer signedness error in the ozhcdgetdesccnf function in drivers/staging/ozwpan/ozhcd.c in the OZWPAN driver in the Linux kernel through 4.0.5 allows remote...

MiracleLinux 3 : libpng-1.2.10-16.0.1.AXS3 (AXSA:2012-447:02)

The remote MiracleLinux 3 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2012-447:02 advisory. The libpng package contains a library of functions for creating and manipulating PNG Portable Network Graphics image format files. PNG is a bit-mapped graphic...

CVE-2019-20561

An issue was discovered on Samsung mobile devices with N7.x, O8.x, and P9.0 Exynos chipsets software. The bootloader has an integer signedness error. The Samsung ID is SVE-2019-15230 October 2019...

CVE-2022-27882

slaacd in OpenBSD 6.9 and 7.0 before 2022-03-22 has an integer signedness error and resultant heap-based buffer overflow triggerable by a crafted IPv6 router advertisement. NOTE: privilege separation and pledge can prevent exploitation...

EUVD-2025-198714

Integer signedness error in tlsverifycallback in src/coapopenssl.c in OISM libcoap 4.3.5 allows remote attackers to cause a denial of service via a crafted TLS certificate that causes i2dX509 to return -1 and be misused as a malloc size parameter...

CVE-2025-65495

The libcoap library (version 4.3.5) contains an integer signedness error in the tls_verify_call_back() function located in src/coap_openssl.c. This vulnerability allows a remote attacker to trigger a denial of service by providing a crafted TLS certificate. Specifically, the i2d_X509() function m...

CVE-2025-65495: Signed to Unsigned Conversion Error

Integer signedness error in tlsverifycallback in src/coapopenssl.c in OISM libcoap 4.3.5 allows remote attackers to cause a denial of service via a crafted TLS certificate that causes i2dX509 to return -1 and be misused as a malloc size parameter...

EUVD-2011-3326

Malware in sbrugna...

EUVD-2014-1096

Malware in sbrugna...

EUVD-2010-2534

Malware in sbrugna...

EUVD-2012-4638

Malware in sbrugna...

EUVD-2010-0570

Malware in sbrugna...

EUVD-2017-6131

Malware in sbrugna...