CVE-2022-26809

CVE-2022-26809 Este repositorio es simplemente una investigación sobre el CVE; para un análisis más detallado, consulta aquí. ACTUALIZACIÓN:05/19 2022 Este análisis aún no ha sido terminado.... ACTUALIZACIÓN:05/22 2022 El Post de HuanGMz y el blog de corelight muestran el punto vulnerable real:...

CVE-2026-25290 Integer Overflow or Wraparound in OOBM

Memory Corruption when validating large data buffers from external sources using addition to check buffer length...

CVE-2026-25290

CVE-2026-25290 is an Integer Overflow or Wraparound vulnerability in Qualcomm OOBM (Out-of-Bounds Memory). The root cause lies in memory corruption when validating large data buffers from external sources, where an addition operation is used to check buffer length, allowing an integer overflow to...

CVE-2013-2028-Exploit

Exploit CVE-2013-2028 Detalles de la vulnerabilidad Software vulnerable: Nginx 1.3.9 -lp...

Microweber <1.2.12 - Integer Overflow

Microweber before 1.2.12 is susceptible to integer overflow. The application allows large characters to insert in the input field 'first & last name,' which can allow an attacker to cause a denial of service via a crafted HTTP request. id: CVE-2022-0968 info: name: Microweber 1.2.12 - Integer...

CVE-2025-46817-PoC

Exploit de Desbordamiento de Enteros CVE-2025-46817 en Redis Una implementación ligera en C del exploit CVE-2025-46817 para la vulnerabilidad de desbordamiento de enteros en Redis. 🚀 Características Ligero : Un único archivo C, sin dependencias externas más allá de hiredis Rápido : Compilación...

jfrog-CVE-2023-43786-libX11_DoS

Prueba de concepto de CVE-2023-43786 Resumen Esta es una prueba de concepto de denegación de servicio DoS de la vulnerabilidad de libX11 CVE-2023-43786. Provocará el desbordamiento de enteros y causará un bucle infinito. Las versiones vulnerables son: libX11 1.8.6 y anteriores, y libXpm 3.5.16...

CVE-2025-46817

CVE-2025-46817 – Desbordamiento de enteros en unpack de Redis Lua Posible RCE PoC de desbordamiento de enteros en unpack de Redis Lua que provoca un crecimiento descontrolado de la pila y un bloqueo en la versión 8.2.1. Resumen Redis 8.2.1 incluye Lua 5.1 con una implementación de unpack que...

CVE-2021-40346

CVE-2021-40346 El desbordamiento de enteros en la representación interna de la cabecera de solicitud permite el contrabando de solicitudes HTTP HTTP request smuggling. Este repositorio presenta un PoC construido con docker-compose utilizando dos imágenes de Docker: una con una versión vulnerable ...

CVE-2025-54957

POC del Decodificador Unificado Dolby CVE-2025-54957 Cuando un archivo es procesado por el Decodificador Unificado DDPlus de Dolby, es posible una escritura fuera de límites cuando se procesan los datos de evolución. El decodificador escribe la información de evolución en un búfer contiguo grande...

CVE-2026-92248

A flaw was found in the file-psd plugin in GIMP. When generating a thumbnail preview for a specially crafted PSD Photoshop Document image file, an integer overflow occurs during the multiplication of values from an embedded JPEG header. This leads to an undersized heap allocation, resulting in a...

RHEL 10 : libvirt (RHSA-2026:68510)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:68510 advisory. The libvirt library contains a C API for managing and interacting with the virtualization capabilities of Linux and other operating systems. In...

libsoup3 security update

3.6.5-14 - Fix CVE-2026-85197: http2 crash after connection destroyed 3.6.5-13 - Fix CVE-2026-15711: Reject oversized WebSocket control frames 3.6.5-12 - Fix CVE-2026-15709: bound decompressed WebSocket message size 3.6.5-11 - Add patches for CVE-2026-4271 and CVE-2026-5119 3.6.5-10 - Add patch f...

The vulnerability of the VideoLAN VLC media player software, related to integer overflow, allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the VideoLAN VLC media player lies in a numerical overflow condition. Exploiting this vulnerability can allow an attacker to cause a service failure or execute arbitrary code...

CVE-2014-0075_PoC

CVE-2014-0075PoC 这是一个简单的用Python编写的PoC，演示了通过整数溢出导致的DoS攻击。...

CVE-2026-63126 Wire: Unauthenticated decoder crash via 32-bit length integer overflow in ByteArrayProtoReader32 (incomplete fix of CVE-2026-45799)

Wire provides gRPC and protocol buffers for Android, Kotlin, Swift, and Java. Prior to 6.4.5 and 7.0.0-alpha04, Wire protobuf readers do not consistently validate attacker-controlled lengths against the current logical message boundary before advancing cursors, pointers, limits, slices, or...

CVE-2026-63126

Wire (a gRPC and protocol buffers library by Square for Android, Kotlin, Swift, and Java) has an integer overflow in its 32-bit protobuf decoder. Prior to 6.4.5 and 7.0.0-alpha04 , ByteArrayProtoReader32.internalNextLengthDelimited() in Kotlin allows a positive oversized length to wrap pos + leng...

CVE-2026-63126 Wire: Unauthenticated decoder crash via 32-bit length integer overflow in ByteArrayProtoReader32 (incomplete fix of CVE-2026-45799)

Wire provides gRPC and protocol buffers for Android, Kotlin, Swift, and Java. Prior to 6.4.5 and 7.0.0-alpha04, Wire protobuf readers do not consistently validate attacker-controlled lengths against the current logical message boundary before advancing cursors, pointers, limits, slices, or...

CVE-2026-63126 Wire: Unauthenticated decoder crash via 32-bit length integer overflow in ByteArrayProtoReader32 (incomplete fix of CVE-2026-45799)

Wire provides gRPC and protocol buffers for Android, Kotlin, Swift, and Java. Prior to 6.4.5 and 7.0.0-alpha04, Wire protobuf readers do not consistently validate attacker-controlled lengths against the current logical message boundary before advancing cursors, pointers, limits, slices, or...

CVE-2026-77411 RabbitMQ amqp091-go: Protocol Desynchronization and Frame Injection via Integer Overflow in readLongstr

RabbitMQ amqp091-go is a Go AMQP 0.9.1 client. Prior to 1.13.0, readLongstr in read.go returns an empty string and a nil error when a declared AMQP longstr length exceeds 0x7FFFFFFF instead of returning ErrSyntax. The function leaves the declared field bytes unread, while readTable treats the...