PT-2026-132876

Integer overflow in Editing in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-119268: Google Chrome: Integer overflow in Editing in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute…

Integer overflow in Editing in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-119279

MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. From 3.0.0 until 3.3.7, 3.4.5, and 3.5.10, the ReadableByteBuf.readLength and ReadableByteBuf.readIntLengthEncodedNotNull methods narrowed the protocol's unsigned 8-byte length-encoded integer to...

CVE-2024-49112-PoC

CVE-2024-49112-PoC CVE-2024-49112 LDAP RCE PoC and Metasploit Module Edit: links updated last 3 copies to go Link to Download: Contact Information You can reach me at: [email protected] please dont ask me if I can provide this for free, or if I can test your target, or how to add the module ...

scaredycat

SCAREDYCAT! version 0.1 beta Python script to generate a malicious MP4 file and start a web server hosting a page with the embedded 'video' file on port 8080. This exploits another Stagefright vulnerability, the integer overflow vulnerability CVE-2015-3864, published by Exodus Intelligence. autho...

doona

Doona - Network fuzzing tool .:: About ::. Doona is a fork of the Bruteforce Exploit Detector Tool BED. BED is a program which is designed to check daemons for potential buffer overflows, format string bugs etc. Doona is Australian for duvet. It adds a significant enough number of features/change...

weightBufs

WeightBufs: WeightBufs is a kernel r/w exploit for all Apple devices with Neural Engine support. Bugs and Exploit by @simo36, you can read my presentation slides at POC for more details about the vulnerabilities and the exploitation techniques. The exploit doesn't rely on any hardcoded address or...

httpd: httpd: Denial of Service via integer overflow in mod_dav_fs

A flaw was found in httpd. An integer overflow in the moddavfs module occurs when processing Web Distributed Authoring and Versioning WebDAV PROPPATCH requests that declare an excessive number of XML namespaces. An authenticated remote attacker with write access can exploit this flaw to crash...

CVE-2026-99145

A flaw was found in the Linux kernel's Intel Xe graphics driver drm/xe. A local user could exploit this vulnerability by altering the memory state of a pinned graphics buffer object, causing the driver to unconditionally transfer pages between memory tracking pools. This issue triggers an integer...

CVE-2026-110747

A flaw was found in jackson-dataformat-protobuf. A remote attacker can trigger a Denial of Service DoS by sending a specially crafted Protocol Buffers protobuf message. An integer overflow in length validation allows malformed map entry keys with excessively large declared lengths to bypass size...

CVE-2026-104016

A flaw was found in jackson-dataformat-protobuf. This vulnerability allows a remote attacker to cause a Denial of Service DoS by sending specially crafted Protocol Buffers data. Due to an integer overflow during bounds checking for length-prefixed string and byte fields, the parser bypasses...

Nginx-Remote-Integer-Overflow-Vulnerability

Nginx-Remote-Integer-Overflow-Vulnerability CVE-2017-7529 https://www.cvedetails.com/cve/CVE-2017-7529/...

DEBIAN-CVE-2026-119279

MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. From 3.0.0 until 3.3.7, 3.4.5, and 3.5.10, the ReadableByteBuf.readLength and ReadableByteBuf.readIntLengthEncodedNotNull methods narrowed the protocol's unsigned 8-byte length-encoded integer to...

CVE-2026-119279

MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. From 3.0.0 until 3.3.7, 3.4.5, and 3.5.10, the ReadableByteBuf.readLength and ReadableByteBuf.readIntLengthEncodedNotNull methods narrowed the protocol's unsigned 8-byte length-encoded integer to...

CVE-2025-54110-Kernel-EoP-PoC

CVE-2025-54110-Kernel-EoP-PoC PoC implementation for CVE-2025-54110 a Kernel-Level Integer Overflow Vulnerability in the Windows NtQueryDirectoryObject system call. CVE-2025-54110 - Windows Kernel Integer Overflow Analysis CVE: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-54110...

CVE-2026-119279

MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. From 3.0.0 until 3.3.7, 3.4.5, and 3.5.10, the ReadableByteBuf.readLength and ReadableByteBuf.readIntLengthEncodedNotNull methods narrowed the protocol's unsigned 8-byte length-encoded integer to...

CVE-2026-119279

The MariaDB Connector/J library, used for connecting Java applications to MariaDB and MySQL databases, is vulnerable to an integer truncation issue. In versions prior to 3.3.7, 3.4.5, and 3.5.10 , the ReadableByteBuf.readLength() and ReadableByteBuf.readIntLengthEncodedNotNull() methods improperl...

CVE-2026-64531

CVE-2026-64531 — OVSwrap Linux kernel Open vSwitch module local privilege escalation normal user → root PoC. Exploits the integer wraparound of the 16-bit nlalen field to escalate from a normal user all the way to root. Vulnerability Summary When the nested action stream generated by OVS exceeds...

redis-stack-CVE-2024-55656

CVE-2024-55656 - Redis Stack - RedisBloom Integer Overflow Remote Code Execution Vulnerability Title: Redis Stack RedisBloom Integer Overflow Remote Code Execution Vulnerability ZDI: ZDI-25-009 CVE: CVE-2024-55656 Credits: rick2600 and gqsilva CVSS: 8.8 HIGH Affected version: RedisBloom v2.6.12...

CVE-2025-47987

CVE-2025-47987: Windows CredSSP Elevation of Privilege 📌 This repository contains documentation and analysis resources about the vulnerability CVE-2025-47987, a heap-based buffer overflow flaw affecting the Windows Credential Security Support Provider CredSSP protocol. 📝 Description The...