EUVD-2026-81789

In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: validate topology volume range before allocation SOF treats the topology mixer min and max values as non-negative indices into its volume table. It stores them in signed fields, allocates max + 1 entries through an int...

gosentry

gosentry gosentry es un fork centrado en la seguridad de la cadena de herramientas de Go, que integra numerosas funciones para campañas de fuzzing de vanguardia en bases de código Go. Si antes usabas go test -fuzz, deberías usar gosentry como reemplazo. Incluye varias mejoras de fuzzing y...

CVE-2026-90141

CVE-2026-90141 affects the Linux kernel 's IPVS (IP Virtual Server) FTP helper. The function ip_vs_ftp_get_addrport() accumulates decimal digits into a __u16 and an unsigned char without overflow checks. A crafted FTP PASV/EPSV response containing an over-long port or address octet causes the val...

EUVD-2026-81734

In the Linux kernel, the following vulnerability has been resolved: ipvs: fix integer overflow in ftp helper port/address parsing ipvsftpgetaddrport accumulates decimal digits into a u16 hport and into unsigned char p without checking for overflow. A crafted FTP PASV/EPSV response with an over-lo...

CVE-2026-90109

CVE-2026-90109 is a 32-bit integer overflow in the Linux kernel network scheduling subsystem, affecting the gred , bfifo , and plug qdisc enqueue paths. The backlog and packet-length sum is computed in u32 , wrapping at 2³² (4 GiB) . Once the true backlog exceeds this threshold, the wrapped sum a...

CVE-2026-90076

CVE-2026-90076 affects the Linux kernel 's net/sched FQ (Fair Queue) qdisc. In fq_init(), the quantum and initial_quantum values are computed from psched_mtu() without overflow protection. A network device with an extremely large MTU (e.g., a dummy device accepting MTU 2147483634) causes the 32-b...

EUVD-2026-81936

In the Linux kernel, the following vulnerability has been resolved: net/sched: fqcodel: clamp default quantum and mtu fqcodelinit sets q-quantum = pschedmtuqdiscdevsch without clamping. A device with a huge MTU e.g. dummy with maxmtu == 0 accepting MTU 2147483634 makes pschedmtu return 0x80000000...

EUVD-2026-81934

In the Linux kernel, the following vulnerability has been resolved: net/sched: hhf: clamp quantum before hhfchange to avoid overflow hhfinit sets q-quantum = pschedmtuqdiscdevsch with no overflow check. A device with a huge MTU e.g. dummy with maxmtu == 0 accepting MTU 2147483634 makes weight...

Pixel_GPU_Exploit

Mali GPU Kernel LPE Este artículo proporciona un análisis en profundidad de dos vulnerabilidades del kernel en la GPU Mali, alcanzables desde el sandbox de aplicaciones predeterminado, que identifiqué y reporté de forma independiente a Google. Incluye un exploit del kernel que logra capacidades...

Integer-Overflow-test

Este repositorio no tiene un README...

batchOverflow

batchOverflow A fix for the batchOverflow bug found by the PeckShield team. a fix The original contract only did a check to ensure the sender has enough whatever to pay the total amount input value x number of addresses. If an overflow ocurred this amount can be zero, which would allow the test o...

kernel: net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post()

A flaw was found in the Linux kernel's qrtr network component. On 32-bit systems, a 32-bit integer overflow can occur in the qrtrendpointpost function when processing an incoming packet. This overflow can bypass a size validation check, leading to an out-of-bounds write and causing the kernel to...

CVE-2020-0796

CVE-2020-0796 概述： SMBv3从Windows 10/Server版本1903开始添加的压缩功能存在整数溢出漏洞，微软于2020年3月12日确认。攻击者可以利用该漏洞实现本地权限提升（LPE）和远程代码执行（RCE）。此处仅讨论LPE漏洞。 受影响版本 ： Windows 10 Version 1903 for 32-bit Systems Windows 10 Version 1903 for x64-based Systems Windows 10 Version 1903 for ARM64-based Systems Windows Server, version...

CVE-2020-1206

在SMBGhost漏洞（CVE-2020-0796）中，我提到了一种通过利用整数溢出漏洞修改Alloc.Userbuffer指针指向我们想要的地址并写入任意数据的write-what-where原语技术。类似于SMBGhost，此漏洞也存在于srv2.sys中的Srv2DecompressData函数中。让我们再次回顾由Zecops简化的与SMBGhost漏洞（CVE-2020-0796）相关的Srv2DecompressData函数。 c typedef struct COMPRESSIONTRANSFORMHEADER ULONG ProtocolId; ULONG...

CVE-2025-66628

CVE-2025-66628: Desbordamiento de Enteros en el Analizador TIM de ImageMagick...

CVE-2026-62735

CVE-2026-62735 Información Esta vulnerabilidad fue descubierta originalmente por Siyeon Wi. Reproduje la vulnerabilidad de forma independiente con fines educativos y de estudio de caso. La vulnerabilidad también fue demostrada en Pwn2Own Berlin 2026. Referencias: Estado de TrendAI Zero Day...

CVE-2025-47987

CVE-2025-47987: Windows CredSSP 权限提升 📌 本仓库包含关于 CVE-2025-47987 漏洞的分析文档和资源，该漏洞是一个影响 Windows Credential Security Support Provider CredSSP 协议的堆缓冲区溢出 Heap-based Buffer Overflow 缺陷。 📝 描述 该漏洞允许经过身份验证的本地攻击者提升系统权限。该缺陷源于在处理特定 CredSSP 协议数据包时内存管理不当，可能导致： 一个堆缓冲区溢出 或一个整数溢出 Integer Overflow 标识符: CVE-2025-47987...

CVE-2024-49112-PoC

CVE-2024-49112-PoC CVE-2024-49112 LDAP RCE PoC 和 Metasploit 模块 编辑：链接已更新（最后 3 份拷贝待处理） 下载链接： 联系信息 您可以通过以下方式联系我：[email protected] 请不要问我是否可以免费提供此内容，或是否可以对您的目标进行测试，或如何将模块添加到 Metasploit（请自行谷歌）。 我能提供什么？： 如果您在设置 Python 版本时需要帮助（我可以指导）。 如果您在分析方面需要帮助（我可以通过电子邮件回答您关于分析的问题）。 CVE-2024-49112：Windows LDAP...

project_BIT_nmap_script

Programa en Python para detectar la vulnerabilidad CVE-2022-32073 en grandes redes Este programa en Python ejecuta nmap en una dirección pasada como argumento; por defecto escanea todos los puertos, pero también se puede proporcionar un número de puerto como argumento. Ejecuta nmap con scripts...

libvirt: Integer overflow in NodeGetFreePages RPC handler leading to heap buffer overflow

A flaw was found in libvirt. An unprivileged local user could exploit an integer overflow vulnerability in the NodeGetFreePages RPC handler. This flaw allows crafted values to bypass a size check, leading to an undersized memory buffer. Subsequently, real NUMA node data can overwrite this buffer...