Exploit for CVE-2026-84411

CVE-2026-84411 — MikroTik RouterOS WebFig Integer Underflow Ex...

Windows-CVE-2024-38063

Windows-TCP/IP-IPv6 CVE-2024-38063 الثغرة CVE-2024-38063 هي ثغرة تنفيذ التعليمات البرمجية عن بُعد موجودة في مكون TCP/IP في نظام Windows. وفقًا لشرح مايكروسوفت الرسمي، فإن مستوى خطورة هذه الثغرة هو الأقصى، وتقييم CVSS هو 9.8، وتتأثر إصدارات متعددة من أنظمة Windows بهذه الثغرة. يمكن للمهاجم استغلال...

CVE-2026-42980-POC

الإفصاح العام عن CVE-2026-42980 يحتوي هذا المستودع على مواد الإفصاح العام عن CVE-2026-42980 ، وهي ثغرة من نوع تجاوز سفلي للعدد الصحيح integer underflow في نواة Windows WMI يمكن استغلالها لرفع الامتيازات المحلية إلى NT AUTHORITY\SYSTEM على أنظمة المختبر المعرضة للخطر. المقال الكامل English article...

CVE-2026-81000

⚡ CVE-2026-81000 - TUNderflow Linux Kernel TUN/TAP Receive Headroom Memory Corruption A Linux kernel memory-corruption vulnerability in the TUN/TAP networking subsystem , caused by insufficient bounds on receive headroom and an integer underflow in the packet allocation path. ⚠️ Disclaimer This...

CVE-2022-0185-Case-Study

CVE-2022-0185-دراسة-حالة دراسة الحالة هذه هي نتيجة لواجب لمقرر ECE 9069: مقدمة في القرصنة : https://whisperlab.org/introduction-to-hacking/ CVE-2022-0185 نظرة عامة CVE-2022-0185 هو ثغرة من نوع تجاوز سعة المخزن المؤقت في الكومة heap-based buffer overflow تم العثور عليها في الطريقة التي تتحقق بها...

CVE-2026-85769

CVE-2026-85769 Heap out-of-bounds read in libtpms TPM 2.0 volatile-state deserialization. An unbounded optional-block skip in blockskipread advances the unmarshal cursor by an attacker-controlled 16-bit length and drives the signed remaining-size counter negative. Every downstream bounds check th...

CVE-2019-14287-write-up

CVE-2019-14287-write-up 4294967295 ثغرة Sudo تسمح للمستخدمين المقيّدين بتشغيل أوامر بصلاحيات المستخدم root توضيح الثغرة إضافة مستخدم جديد: sudo su - root useradd -m -s /bin/bash testuser passwd testuser // إضافة كلمة مرور للمستخدم visudo إضافة إدخال جديد test ALL=ALL, !root /usr/bin/id // تحديد أ...

CVE-2026-107635

A flaw was found in dislocker. An integer underflow vulnerability in metadata parsing functions can lead to a Denial of Service DoS by crashing the application. By providing a maliciously crafted BitLocker volume image with an invalid datum size, an attacker can trigger an out-of-bounds memory...

CVE-2026-106437

A flaw was found in mongo-c-driver. An attacker who can influence the buffer length supplied by an embedding application can trigger an integer underflow by passing an undersized value to the Binary JSON BSON buffer-reservation function. This issue leads to out-of-bounds memory reads and writes...

CVE-2026-106429

A flaw was found in libmongocrypt. An integer underflow in the Key Management Service KMS endpoint-parsing logic can cause a memory allocation failure when processing a malformed endpoint. An authenticated user can trigger this flaw by modifying a key document in the key vault collection or by...

kernel: nvmet-rdma: handle inline data with a nonzero offset

A flaw was found in the nvmet-rdma component of the Linux kernel. This vulnerability arises from incorrect handling of inline data with a non-zero offset, which can lead to an integer underflow. An attacker could exploit this to cause the system to read beyond its allocated memory, potentially...

CVE-2026-66729-Out-of-Bounds-Read-in-facil.io-MIME-Parser-leads-to-Server-Crash

إفصاح أمني: قراءة خارج الحدود في محلل MIME الخاص بـ facil.io تؤدي إلى انهيار الخادم معرّف CVE المعيّن CVE-2026-66729 المنتج: facil.io الإصدارات المتأثرة: facil.io = 0.6.0 جميع إصدارات 0.6.x، جميع إصدارات 0.7.x، master؛ تم تقديمه عند إضافة محلل MIME في الإصدار 0.6.0 المكوّن:...

CVE-2026-25075-check

Outil d'évaluation de la vulnérabilité CVE-2026-25075 Détectez en toute sécurité si un serveur VPN strongSwan est vulnérable à la CVE-2026-25075 sans provoquer d'interruption. Consultez l'analyse complète sur le blog de Bishop Fox. Description La CVE-2026-25075 est une vulnérabilité de...

CVE-2026-75352

The OpENer v2.3 (commit 76b95cf) software contains an integer underflow vulnerability within the server-side EtherNet/IP ForwardOpen connection-path parser . This flaw could allow a remote attacker to cause a denial of service (DoS). No specific remediation, exploit code, or in-the-wild exploitat...

EUVD-2026-95972

OpENer v2.3/commit 76b95cf, contains an integer underflow in the server-side EtherNet/IP ForwardOpen connection-path parser. This allows a remote attacker to cause a denial of service...

CVE-2026-98190

A flaw was found in the Linux kernel's wilc1000 wireless driver. The driver fails to adequately validate the length of incoming Wi-Fi Direct P2P public action frames before reading the frame header, leading to an integer underflow and out-of-bounds memory read. A nearby unauthenticated attacker c...

CVE-2026-98185

A flaw was found in the mwifiex driver in the Linux kernel. When processing wireless scan responses, the driver fails to properly validate response extents before calculating internal buffer boundaries. A malicious or compromised wireless device sending malformed scan response data can trigger an...

CVE-2026-106429

An integer underflow in the KMS endpoint-parsing logic of MongoDB libmongocrypt can cause an allocation failure that terminates the application process. This can occur when an authenticated user modifies a key document in the key vault collection, or when an application accepts a KMS endpoint...

EUVD-2026-95160

An integer underflow in the KMS endpoint-parsing logic of MongoDB libmongocrypt can cause an allocation failure that terminates the application process. This can occur when an authenticated user modifies a key document in the key vault collection, or when an application accepts a KMS endpoint...

CVE-2026-106429 Application denial of service via malformed KMS endpoint in MongoDB libmongocrypt

An integer underflow in the KMS endpoint-parsing logic of MongoDB libmongocrypt can cause an allocation failure that terminates the application process. This can occur when an authenticated user modifies a key document in the key vault collection, or when an application accepts a KMS endpoint...