batchOverflow

batchOverflow A fix for the batchOverflow bug found by the PeckShield team. a fix The original contract only did a check to ensure the sender has enough whatever to pay the total amount input value x number of addresses. If an overflow ocurred this amount can be zero, which would allow the test o...

CVE-2026-62735

CVE-2026-62735 Information This vulnerability was originally discovered by Siyeon Wi. I reproduced the vulnerability independently for educational and case-study purposes. The vulnerability was also demonstrated at Pwn2Own Berlin 2026. References: TrendAI Zero Day Initiative status TrendAI Zero D...

PHP_8.1.x_Exploit

🚀 PHP CVE Autopilot Automated detection & exploitation of critical PHP vulnerabilities CVE-2024-4577 bypass, CVE-2025-14177, CVE-2025-14180, CVE-2025-14178 PHP8.1.xExploit.sh is a single‑file, zero‑configuration security assessment tool that automatically discovers vulnerable PHP endpoints and...

PoC-CVE-2022-26809

PoC-CVE-2022-26809 PoC for CVE-2022-26809, analisys and considerations are shown in the github.io. The PoC has been writtin overriding Impacket functions. Tested with: impacket version 0.10.0 The PoC has not been fully tested, because it should trigger the vulnerability, i.e integer overflow, tha...

CVE-2026-0049

CVE-2026-0049 — Android DNG zero-click DoS dngsdk MapTable add-overflow Full research material and PoC. Narrative analysis: 🇮🇹BLOG.md · 🇬🇧BLOG.en.md. Bug : unsigned integer overflow on fAreaSpec.Plane + fAreaSpec.Planes in dngopcodeMapTable::ProcessArea dngsdk/source/dngmiscopcodes.cpp:388. Impact...

CVE-2025-23134_fixes_code

CVE-2026-34180 – Patch Changes The patch addresses an integer truncation issue in the OpenSSL ASN.1/DER decoding code. The following changes were made: 1. Updated the ASN.1 content length type Changed the len parameter of asn1exc2i from int to long. This allows the function to receive and handle...

jfrog-CVE-2023-43786-libX11_DoS

CVE-2023-43786 Proof-of-Concept Overview This is a DoS Proof-of-Concept of libX11 Denial of Service vulnerability CVE-2023-43786. It will trigger the integer overflow and cause an infinite loop. The vulnerable versions are: libX11 1.8.6 and below and libXpm 3.5.16. For a comprehensive...

CVE-2026-85769

CVE-2026-85769 Heap out-of-bounds read in libtpms TPM 2.0 volatile-state deserialization. An unbounded optional-block skip in blockskipread advances the unmarshal cursor by an attacker-controlled 16-bit length and drives the signed remaining-size counter negative. Every downstream bounds check th...

CVE-2026-81000

⚡ CVE-2026-81000 - TUNderflow Linux Kernel TUN/TAP Receive Headroom Memory Corruption A Linux kernel memory-corruption vulnerability in the TUN/TAP networking subsystem , caused by insufficient bounds on receive headroom and an integer underflow in the packet allocation path. ⚠️ Disclaimer This...

CVE-2026-38427

CVE-2026-38427: Integer Wraparound → Heap Buffer Overflow in Tasmota fetchjpg CVE: CVE-2026-38427 Severity: Critical CVSS 9.8 Product: Arendst Tasmota Affected Version: = 15.3.0.3 File: tasmota/tasmotaxdrvdriver/xdrv10scripter.ino Function: fetchjpg — case 2 MJPEG frame fetch Author: Saidakbarxon...

CVE-2026-119718

Blender before 4.5.15 and 5.x before 5.2.3 contains a heap buffer overflow vulnerability caused by integer overflow in ptcachedataalloc when reading point cache files. Attackers can supply a crafted point cache file with a large totpoint value alongside a .blend file to crash Blender or execute...

CVE-2026-104064

Scribus before 1.6.7 contains an integer overflow vulnerability in the scimgdataloadertiff TIFF loader that allows attackers to trigger a heap overflow via crafted tile dimensions. Attackers can supply a tiled TIFF with large tile width, height and sample values for a user to import, corrupting...

CVE-2023-21554-PoC

CVE-2023-21554 — QueueJumper PoC Proof of concept for CVE-2023-21554 , also known as QueueJumper , affecting Microsoft Message Queuing MSMQ. The PoC implements the MSMQ/SRMP protocol interaction associated with the vulnerability and can be used to investigate the behavior of an MSMQ service over...

CVE-2013-2028-Exploit

CVE-2013-2028 Exploit Vulnerability details Vulnerable software: Nginx 1.3.9 -lp 4. Let the exploit find actual value of the canary, and start reverse-shell...

CVE-2020-1349

CVE-2020-1349 This vulnerability occurs in Outlook 2019 16.0.12624.20424 installed on Korean Windows 10 1909 x64, codepage 949. TLDR; I have not been able to bypass aslr using this vulnerability, but I have written an outlook 2019 32bit exploit that pops up a calculator using the address of a...

CVE-2026-7878-eBPF-Verifier-Type-Confusion-Kernel-Memory-Read-Write

6. CVE-2026-7878 – eBPF Verifier Type Confusion → Kernel Memory Read/Write Overview A subtle integer overflow in the eBPF verifier’s bounds tracking allows an attacker to craft an eBPF program that accesses out‑of‑bounds kernel memory. Severity: Critical Kernel Privilege Escalation User‑mode eBPF...

CVE-2021-40346-POC

CVE-2021-40346-POC CVE-2021-40346 integer overflow enables http smuggling Integer overflow leading to HTTP request smuggling Chinese analysis: HAProxy Request Smuggling Vulnerability CVE-2021-40346 Analysis Reference:...

nginx-1.4.0

nginx-1.4.0 For the analysis of CVE-2013-2028 exploit: exp-nginx.rb binary for rop build: nginx...

CVE-2026-11108-Integer-Overflow-in-Memory-Allocator-kmalloc-Sim-

CVE-2026-11108 – Integer Overflow in Memory Allocator kmalloc Sim Program Code C // allocsim.c - Vulnerable memory allocator include include include define MAXBLOCK 1024 void mymallocsizet size sizet total = size + sizeofsizet; // header if total MAXBLOCK return NULL; void ptr = malloctotal; if...

CVE-2026-119719

Blender versions before 4.5.15 and 5.x before 5.2.3 are vulnerable to a heap buffer overflow within the blend file thumbnail extractor. The root cause is a 32-bit integer overflow in the thumb_data_vertical_flip() function. An attacker can craft a malicious .blend file with specific TEST block di...