CVE-2025-7795

CVE-2025-7795 – Tenda Router Buffer Overflow Exploit Author : Byte Reaper Telegram : @ByteReaper0 CVE-ID : CVE-2025-7795 Vulnerability Type : Buffer Overflow Target : Tenda Routers Exploit : Remote, Unauthenticated 📝 Description A buffer overflow vulnerability exists in certain Tenda router model...

CVE-2026-111487

A flaw was found in the Qt3D module of the Qt framework. An out-of-bounds write vulnerability in the assimp scene import plugin allows an attacker to execute arbitrary code or cause a denial of service DoS. By tricking a user into opening a specially crafted 3D scene file, an attacker can corrupt...

CVE-2026-119719

A flaw was found in Blender. This vulnerability may allow arbitrary code execution or cause an application crash resulting in a Denial of Service DoS. By convincing a user to preview a specially crafted blend file with invalid image dimensions, an attacker can trigger an integer overflow in the...

CVE-2026-119718

A flaw was found in Blender. An integer overflow issue in the point cache allocation function ptcachedataalloc leads to a heap-based buffer overflow when reading point cache data. An attacker could exploit this vulnerability by convincing a user to load a specially crafted point cache file...

CVE-2026-61627

A flaw was found in libass. An attacker could exploit this vulnerability by enticing a user to process a specially crafted subtitle file, triggering an out-of-bounds write during line measurement. Successful exploitation may result in arbitrary code execution or cause an application crash leading...

CVE-2026-19773

A flaw was found in libwebsockets. This vulnerability allows an unauthenticated remote attacker to achieve arbitrary code execution by sending specially crafted HTTP/2 network traffic. The issue occurs due to improper input validation during the parsing of path headers compressed with HPACK a...

CVE-2026-104065

A flaw was found in Scribus. An out-of-bounds write vulnerability in the Micrografx Draw DRW plugin allows an attacker to achieve arbitrary code execution or a Denial of Service DoS by tricking a user into importing a specially crafted file. Due to improper validation of image offsets during...

CVE-2026-104064

A flaw was found in Scribus. An integer overflow in the Tagged Image File Format TIFF loader allows an attacker to trigger a heap buffer overflow by convincing a user to import a maliciously crafted TIFF image with oversized tile dimensions. Successful exploitation could allow arbitrary code...

CVE-2026-104061

A flaw was found in Scribus. This vulnerability allows arbitrary code execution or a Denial of Service DoS due to an out-of-bounds memory write in the Photoshop Document PSD image loader. An attacker could exploit this flaw by convincing a user to import or open a specially crafted PSD file,...

CVE-2025-31650

Apache Tomcat 10.1.39 - Denial of Service DoS This tool performs a high-volume, asynchronous HTTP/2 request flood using malformed priority headers to test the stability of Apache Tomcat servers running version 10.1.10 to 10.1.39. ⚠️ This is strictly for educational and research purposes only. ❌ Th...

Important: Red Hat Security Advisory: bind9.18 security update

An update for bind9.18 is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

bind: BIND: Denial of Service via unbounded processing of crafted DNS messages

A flaw was found in BIND. A remote attacker can exploit this vulnerability by sending specially crafted Domain Name System DNS protocol messages containing an excessive number of specific structures. Because BIND does not impose a limit on processing these structures, handling the malicious reque...

bind: bind: Denial of Service via assertion failure during redirect processing

A flaw was found in BIND. A remote attacker can cause a Denial of Service DoS by sending requests that trigger an assertion failure, abruptly terminating the resolver daemon. This vulnerability occurs when the resolver is configured with both a redirect zone and strict query name minimization whi...

bind: bind: Denial of service via assertion failure in RPZ query processing

A flaw was found in BIND. A remote attacker can cause a denial of service DoS by sending a sequence of recursive and non-recursive queries to an affected server. When BIND is configured to handle recursive queries alongside multiple Response Policy Zones RPZ with differing recursion settings,...

CVE-2026-84243 gettext: Directory traversal via the LANGUAGE environment variable

The gettext family of functions in the GNU C Library version 2.0 and later accept LANGUAGE environment variable entries that contain '/' or that are equal to "..", unless the program is setuid or setgid ATSECURE. An attacker who can set LANGUAGE in the environment of a program that uses gettext c...

CVE-2026-84243

The gettext family of functions in GNU C Library version 2.0 and later is vulnerable to a directory traversal because it accepts entries in the LANGUAGE environment variable containing / or .. (unless the program is AT_SECURE). An attacker who can control this variable can force the program to lo...

CVE-2022-20607

CVE-2022-20607 In the Pixel cellular firmware, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with LTE authentication needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

Exploit for Improper Handling of Length Parameter Inconsistency in Mongodb

cve-2025-14847-scanner.py...

EUVD-2026-114246

Missing queue-set type validation in the queue-set selection system call in FreeRTOS-Kernel before V11.3.3 on MPU-enabled ports with queue sets enabled allows a local unprivileged task to write actor-controlled data beyond a pointer-sized object on the privileged kernel stack, affecting privilege...

Tool_Camera_Exploit_Netwave_CVE-2018-6479

ToolCameraExploitNetwaveCVE-2018-6479 Vulnerability allowing denial of service on Netwave Camera CVE-2018-6479. CVE-2018-6479: https://vulners.com/cve/CVE-2018-6479 a. Access the camera: b. Proceed to use the tool to exploit the denial of service vulnerability on the device: Enter the device's IP...