CVE-2026-77412

A flaw was found in RabbitMQ amqp091-go. A malicious or compromised broker can send a specially crafted AMQP Advanced Message Queuing Protocol message with a malformed field length. This can cause an integer overflow, leading to a runtime panic in the client process. Consequently, the client...

CVE-2026-54571

ESPAsyncWebServer (an asynchronous HTTP/WebSocket server library for ESP32, ESP8266, RP2040, and RP2350) contains an integer overflow in its multipart/form-data parser (src/WebRequest.cpp). Prior to version 3.11.1, the _boundaryPosition variable is stored as an 8-bit value ; a remote request with...

EUVD-2026-80808

RabbitMQ amqp091-go: Consumer Message Flooding via Signed-to-Unsigned Integer Casting in Qos Configuration...

CVE-2017-7529

CVE-2017-7529 Las versiones de Nginx desde la 0.5.6 hasta la 1.13.2 inclusive son vulnerables a una vulnerabilidad de desbordamiento de enteros en el módulo de filtro de rangos de nginx, lo que resulta en la fuga de información potencialmente sensible provocada por una solicitud especialmente...

CVE-2021-43229

Explicación de CVE-2021-43229 Información pública Vulnerabilidad de elevación de privilegios de Windows NTFS Distinto de: CVE-2021-43230 CVE-2021-43231 Parche: 14 de diciembre de 2021 Según @AravGarg3 en Twitter, CVE-2021-43229 parece ser explotable y estar relacionado con un desbordamiento de...

-Exploit-CVE-2017-7529

-Exploit-CVE-2017-7529 CVE-2017-7529: Las versiones de Nginx desde 0.5.6 hasta 1.13.2 inclusive son vulnerables a un desbordamiento de enteros en el módulo de filtro de rangos de nginx, lo que resulta en la filtración de información potencialmente sensible provocada por una solicitud especialment...

CVE-2018-19788

CVE-2018-19788 Explotando el error CVE-2018-19788 de PolicyKit Pasos para explotar el error de PolicyKit en una instalación de CentOS7 totalmente parcheada. root@centos7 groupadd -g 4000000000 cve201819788 root@centos7 useradd -m -c "User With High UID" -u 4000000000 -g 4000000000 -s /bin/bash...

CVE-2025-54110-Kernel-EoP-PoC

CVE-2025-54110-Kernel-EoP-PoC Implementación del PoC para CVE-2025-54110, una vulnerabilidad de desbordamiento de enteros a nivel de kernel en la llamada al sistema NtQueryDirectoryObject de Windows. CVE-2025-54110 - Análisis de desbordamiento de enteros en el kernel de Windows CVE:...

CVE-2021-40346-POC

CVE-2021-40346-POC CVE-2021-40346 desbordamiento de enteros permite contrabando HTTP Desbordamiento de enteros que permite contrabando HTTP Análisis en chino: Análisis de la vulnerabilidad de contrabando de solicitudes de HAProxy CVE-2021-40346 Referencia:...

EUVD-2026-82096

In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix integer overflow of user QP buffer size setuserbufsize computes the QP buffer size by left-shifting the user-supplied rq.wqecnt and rq.wqeshift values as signed integers. A sufficiently large rq.wqecnt causes signe...

CVE-2026-90435

CVE-2026-90435 affects the Linux kernel in the RDMA/mlx5 subsystem. The vulnerability resides in set_user_buf_size(), which computes the QP buffer size by left-shifting user-supplied rq.wqe_cnt and rq.wqe_shift as signed integers. A sufficiently large rq.wqe_cnt triggers a signed integer overflow...

CVE-2026-90246

An integer overflow in the Linux kernel's AppArmor subsystem, specifically in verify_tags(), allows a crafted policy blob to bypass a bounds check. The check computes i + cnt using u32 arithmetic , so a count near U32_MAX wraps the sum to zero, letting the inner loop read past the end of the allo...

EUVD-2026-81839

In the Linux kernel, the following vulnerability has been resolved: apparmor: fix integer overflow in verifytags bounds check verifytags validates the tagset table unpacked from a policy blob. For each set it reads a count and checks that advancing the index by that count stays inside sets.table:...

CVE-2026-90200

CVE-2026-90200 affects the Linux kernel NTFS3 filesystem driver (fs/ntfs3). In ntfs_init_from_boot(), the MFT cluster numbers (mlcn, mlcn2) read from the boot sector are validated via a u64 multiplication against the volume size. A sufficiently large value (e.g., near 2^62) causes the multiplicat...

EUVD-2026-81793

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: fix integer overflow in MFT cluster validation In ntfsinitfromboot, the boot sector's MFT cluster numbers are validated against the volume size with: if mlcn sctperclst = sectors || mlcn2 sctperclst = sectors goto out;...

CVE-2026-90196

CVE-2026-90196 affects the Linux kernel 's ASoC SOF (Sound Open Firmware) subsystem. SOF treats topology mixer min and max values as non-negative indices into its volume table but stores them in signed fields and allocates max + 1 entries through an int argument . An inverted range is invalid, an...

EUVD-2026-81789

In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: validate topology volume range before allocation SOF treats the topology mixer min and max values as non-negative indices into its volume table. It stores them in signed fields, allocates max + 1 entries through an int...

gosentry

gosentry gosentry es un fork centrado en la seguridad de la cadena de herramientas de Go, que integra numerosas funciones para campañas de fuzzing de vanguardia en bases de código Go. Si antes usabas go test -fuzz, deberías usar gosentry como reemplazo. Incluye varias mejoras de fuzzing y...

CVE-2026-90141

CVE-2026-90141 affects the Linux kernel 's IPVS (IP Virtual Server) FTP helper. The function ip_vs_ftp_get_addrport() accumulates decimal digits into a __u16 and an unsigned char without overflow checks. A crafted FTP PASV/EPSV response containing an over-long port or address octet causes the val...

EUVD-2026-81734

In the Linux kernel, the following vulnerability has been resolved: ipvs: fix integer overflow in ftp helper port/address parsing ipvsftpgetaddrport accumulates decimal digits into a u16 hport and into unsigned char p without checking for overflow. A crafted FTP PASV/EPSV response with an over-lo...