CVE-2026-71401 wicked: integer underflow of the UDP length in ni_capture_inspect_udp_header() leads to an out-of-bounds read

An integer underflow was found in the DHCPv4 packet capture code of wicked. nicaptureinspectudpheader in src/capture.c does not verify that the IP total length field iplen is at least as large as the IP header length ihl before subtracting the header length. An unauthenticated attacker on the sam...

EUVD-2026-67079

An integer underflow was found in the DHCPv4 packet capture code of wicked. nicaptureinspectudpheader in src/capture.c does not verify that the IP total length field iplen is at least as large as the IP header length ihl before subtracting the header length. An unauthenticated attacker on the sam...

CVE-2026-71401 wicked: integer underflow of the UDP length in ni_capture_inspect_udp_header() leads to an out-of-bounds read

An integer underflow was found in the DHCPv4 packet capture code of wicked. nicaptureinspectudpheader in src/capture.c does not verify that the IP total length field iplen is at least as large as the IP header length ihl before subtracting the header length. An unauthenticated attacker on the sam...

Nginx-Remote-Integer-Overflow-Vulnerability

Nginx-Remote-Integer-Overflow-Vulnerability CVE-2017-7529 https://www.cvedetails.com/cve/CVE-2017-7529/...

Cve-2022-26809

Cve-2022-26809 CVE-2022-26809 هذا المستودع هو مجرد بحث بسيط عن الثغرة، للحصول على تحليل أكثر تفصيلاً، يرجى الرجوع هنا. تحديث: 05/19 2022 لم يتم الانتهاء من هذا التحليل بعد.... تحديث: 05/22 2022 منشور HuanGMz و مدونة corelight تظهر النقطة الضعيفة الحقيقية: OSFCASSOCIATION::ProcessBindAckOrNak يتم...

CVE-2026-14677

A flaw was found in PostgreSQL. An integer wraparound vulnerability in 32-bit builds of pltcl and plperl allows an object creator to cause the server to undersize an allocation and write out-of-bounds via crafted function bodies. This can lead to arbitrary code execution as the operating system...

CVE-2022-50999

A flaw was found in Nokogiri. An integer overflow vulnerability in packaged libxml2 buffer handling functions allows a remote attacker to cause out-of-bounds memory writes. By crafting specially designed, large XML files, an attacker can trigger buffer overflows, leading to potential information...

CVE-2022-50998

A flaw was found in Nokogiri, a Ruby gem for parsing XML and HTML documents. This vulnerability arises from issues within its bundled libxml2 library, specifically involving data corruption from entity reference cycles and integer overflows when processing large XML files. A remote attacker could...

CVE-2026-63384

A flaw was found in Libevent. An incorrect integer conversion in the evtagunmarshalheader function allows a remote attacker to provide a specially crafted payload length. This can lead to a wrapped large allocation request, resulting in a denial of service DoS for the affected system...

CVE-2026-80540

A flaw was found in the Linux kernel's drm/amdgpu component, specifically within the Universal Video Decoder UVD image size calculation. This vulnerability occurs because the minimum image size calculation incorrectly uses width instead of pitch and fails to reject pitch values exceeding 4096. An...

CVE-2017-12426

creationtimestamp| type| source ---|---|--- 2026-08-27 12:00:12+00:00| seen| Telegram/SVZvTdeqqmSRakJEIQhn4CjyThzPklzbZgbnjRRXOSeUVHM 2026-08-28 00:00:56+00:00| seen| Telegram/SVZvTdeqqmSRakJEIQhn4CjyThzPklzbZgbnjRRXOSeUVHM 2026-08-29 00:00:14+00:00| published-proof-of-concept|...

CVE-2026-35250

CVE-2026-35250 मेरा पहला CVE 2.3 है DevVGAVBVA पर Integer Overflow विशेषाधिकार प्राप्त गेस्ट से DoS हो सकता है AI-सहायता प्राप्त खोज और PoC पूरी तरह से AI द्वारा लिखा गया है समस्या src/VBox/Devices/Graphics/DevVGAVBVA.cpp:740-743 पर है, जहाँ ASSERTGUESTMSGRETURN में आयाम जाँच || OR का उपयोग करती...

CVE-2026-80584

A flaw was found in the Linux kernel's s390/qeth component. This vulnerability allows a local attacker to trigger an integer underflow when handling user-supplied buffer lengths in the qethsnmpcommand and qethl3arpquery functions. This can lead to an out-of-bounds write, potentially causing memor...

CVE-2025-51495

Vorrei segnalare una vulnerabilità di sicurezza identificata nell'ultima release di Mongoose v7.17. Il problema risiede nel modulo WebSocket, in particolare nella funzione mgwscb responsabile della gestione dei frame WebSocket in ingresso. La funzione è vulnerabile a un integer overflow, che può...

CVE-2025-46817-PoC

CVE-2025-46817 Redis Integer Overflow Exploit Eine schlanke C-Implementierung des Exploits für die Redis-Integer-Overflow-Schwachstelle CVE-2025-46817. 🚀 Funktionen Schlank : Einzelne C-Datei, keine externen Abhängigkeiten außer hiredis Schnell : Native Kompilierung für maximale Leistung Farbige...

jfrog-CVE-2023-43786-libX11_DoS

CVE-2023-43786 Proof-of-Concept Panoramica Questa è una Proof-of-Concept DoS della vulnerabilità Denial of Service di libX11 CVE-2023-43786. Attiverà l'integer overflow e causerà un loop infinito. Le versioni vulnerabili sono: libX11 1.8.6 e precedenti e libXpm 3.5.16. Per una comprensione...

cpiopwn

cpiopwn CVE-2021-38185 यह cpio में पूर्णांक अतिप्रवाह बग का एक ACE POC है। यह एक्सप्लॉइट पूर्ण RELRO को छोड़कर सभी बाइनरी सुरक्षाओं को बायपास करता है। यह एक्सप्लॉइट cpio 2.13 और libc 2.31 का उपयोग करता है। वीडियो डेमो: https://youtu.be/F0yKJhu7Vak एक्सप्लॉइट चलाना हमने एक्सप्लॉइट चलाने के लिए एक...

CVE-2026-80546

A flaw was found in the Linux kernel's s390/zcrypt component, specifically within the xcrbmsgtotype6cprbmsgx function. This vulnerability is due to insufficient input validation, which can lead to integer overflows during memory allocation and arithmetic operations, as well as a lack of minimum...

EUVD-2026-66499

In the Linux kernel, the following vulnerability has been resolved: s390/qeth: validate user buffer length in SNMP and ARP query ioctls qethsnmpcommand and qethl3arpquery allocate a buffer sized by a user-supplied length udatalen without checking a lower bound, then set udataoffset to a fixed...

EUVD-2026-66461

In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Improve CCA CPRB length and overflow checks The xcrbmsgtotype6cprbmsgx function lacks proper input validation, creating security vulnerabilities: 1. Integer overflow after CEIL4 alignment: Signed int variables could...