CVE-2026-42980-POC

CVE-2026-42980 Divulgation publique Ce dépôt contient le matériel de divulgation publique pour CVE-2026-42980 , une vulnérabilité de type integer-underflow dans le WMI du noyau Windows qui peut être exploitée pour une élévation de privilèges locale vers NT AUTHORITY\SYSTEM sur des builds de...

CVE-2019-14287-write-up

Analyse de CVE-2019-14287 4294967295 Un bug dans Sudo permet aux utilisateurs restreints d'exécuter des commandes en tant que root DÉMONSTRATION DE LA VULNÉRABILITÉ Ajouter un nouvel utilisateur : sudo su - root useradd -m -s /bin/bash testuser passwd testuser // ajouter un mot de passe à...

CVE-2026-81000

⚡ CVE-2026-81000 - TUNderflow Linux Kernel TUN/TAP Receive Headroom Memory Corruption A Linux kernel memory-corruption vulnerability in the TUN/TAP networking subsystem , caused by insufficient bounds on receive headroom and an integer underflow in the packet allocation path. ⚠️ Disclaimer This...

CVE-2022-0185-Case-Study

CVE-2022-0185-Case-Study Cette étude de cas est le résultat d'un travail dans le cadre du cours ECE 9069: Introduction to Hacking : https://whisperlab.org/introduction-to-hacking/ Présentation de CVE-2022-0185 CVE-2022-0185 est un défaut de dépassement de tampon basé sur le tas heap-based buffer...

Windows-CVE-2024-38063

Windows-TCP/IP-IPv6CVE-2024-38063 La vulnérabilité CVE-2024-38063 est une vulnérabilité d'exécution de code à distance dans le composant TCP/IP du système d'exploitation Windows. Selon la documentation officielle de Microsoft, le niveau de gravité maximal de cette vulnérabilité est critique, avec...

EUVD-2026-91836

The web management service in affected RouterOS versions contains an integer underflow in its HTTP request body handling that is reachable before authentication. This can be leveraged by an unauthenticated network attacker to achieve arbitrary code execution as root, or to cause a denial of...

Linux Distros Unpatched Vulnerability : CVE-2026-86537

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Uncaught exception, Loop with unreachable exit condition 'infinite loop', Integer underflow wrap or wraparound vulnerability in Apache Thrift D language binding...

Linux Distros Unpatched Vulnerability : CVE-2026-82459

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Integer underflow wrap or wraparound, Out-of-bounds write vulnerability in Apache Thrift C++ 32 bit THeaderTransport. This issue affects Apache Thrift: before...

CVE-2026-84411

The web management service in affected RouterOS versions contains an integer underflow in its HTTP request body handling that is reachable before authentication. This can be leveraged by an unauthenticated network attacker to achieve arbitrary code execution as root, or to cause a denial of...

CVE-2026-84411

The web management service in MikroTik RouterOS versions prior to 7.24 is vulnerable to an integer underflow in its HTTP request body handling. This flaw is reachable before authentication , allowing an unauthenticated network attacker to achieve arbitrary code execution as root or cause a denial...

CVE-2026-84411 MikroTik RouterOS Integer Underflow

The web management service in affected RouterOS versions contains an integer underflow in its HTTP request body handling that is reachable before authentication. This can be leveraged by an unauthenticated network attacker to achieve arbitrary code execution as root, or to cause a denial of...

CVE-2026-85769

CVE-2026-85769 Heap out-of-bounds read in libtpms TPM 2.0 volatile-state deserialization. An unbounded optional-block skip in blockskipread advances the unmarshal cursor by an attacker-controlled 16-bit length and drives the signed remaining-size counter negative. Every downstream bounds check th...

CVE-2026-86537

A flaw was found in Apache Thrift's D language bindings. A remote, unauthenticated attacker could cause a Denial of Service DoS by sending specially crafted input to an affected application. This input triggers an integer underflow or an unhandled exception, causing the process to enter an infini...

CVE-2026-86537

Uncaught exception, Loop with unreachable exit condition 'infinite loop', Integer underflow wrap or wraparound vulnerability in Apache Thrift D language bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

AZL-105428 CVE-2026-82459 affecting package thrift 0.24.0-1

Integer underflow wrap or wraparound, Out-of-bounds write vulnerability in Apache Thrift C++ 32 bit THeaderTransport. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

CVE-2026-82459

Integer underflow wrap or wraparound, Out-of-bounds write vulnerability in Apache Thrift C++ 32 bit THeaderTransport. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

CVE-2026-82459

A flaw was found in Apache Thrift. A remote, unauthenticated attacker could cause a Denial of Service DoS by sending specially crafted network traffic to an affected application. Due to an integer underflow in the 32-bit C++ THeaderTransport component, processing this malformed data triggers an...

CVE-2026-86537

A vulnerability exists in the Apache Thrift D language bindings (versions before 0.25.0 ) where a remote, unauthenticated attacker can cause a Denial of Service (DoS) . By sending specially crafted input—specifically a truncated HTTP request —the attacker can trigger an integer underflow or an un...

EUVD-2026-91398

Uncaught exception, Loop with unreachable exit condition 'infinite loop', Integer underflow wrap or wraparound vulnerability in Apache Thrift D language bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

CVE-2026-86537 Apache Thrift: A truncated HTTP request stops the D library's server, allowing an unauthenticated remote attacker to deny service

Uncaught exception, Loop with unreachable exit condition 'infinite loop', Integer underflow wrap or wraparound vulnerability in Apache Thrift D language bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...