NotEnough

Huffman table hacking tool This tool calculates tricky canonical huffman histogram, which is able to trigger OOB Out Of Band write for vulnerable libwebp library i.e. libwebp = 1.3.1. This vulnerability is known as CVE-2023-4863 or CVE-2023-41064. We can overflow the pre-allocated huffman table b...

CVE-2026-8461-EXP

CVE-2026-8461 "PixelSmash" — FFmpeg MagicYUV Heap OOB Write PoC !WARNING This repository contains a working exploit PoC for a heap corruption vulnerability. It is intended solely for authorized security research, CTF contexts, and defensive analysis. Do not use against systems you do not own or...

cve-2026-42945-nginx32-lab

CVE-2026-42945 nginx 32-bit Exploit Lab This repository is a reproducible Docker lab for studying CVE-2026-42945 in nginx 1.30.0. It contains a vulnerable 32-bit target, a primitive trigger, a lab-assisted known-address RCE validator, and a no-introspection brute-force driver. The proof boundary...

CVE-2024-43630-POC

CVE-2024-43630-POC This repository contains a POC that triggers a stack OOB write when executed, causing the system to crash. This vulnerability is an extremely interesting and rare relic that demonstrates the complexities and peculiarities of kernel programming, especially object management...

CVE-2026-107815

The MariaDB server (versions 10.6.1 through 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2) contains a one-byte out-of-bounds (OOB) write in the CONNECT engine 's DOS table type. The vulnerability is caused by an incorrect boundary check , allowing an attacker-controlled offset to trigger...

CVE-2026-107815 MariaDB: one byte OOB write in DOS tables of the CONNECT engine

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the CONNECT engine's DOS table type used an incorrect boundary check that permitted a one-byte null write beyond a stack buffer at an attacker-controlled offset...

TUNderflow

TUNderflow CVE-2026-81000 Writeup !WARNING The PoC is provided solely to help defenders, maintainers, and authorized security teams validate patches, mitigations, detections, and exposure on systems they own or are explicitly authorized to test. You are solely responsible for ensuring that your u...

CVE-2026-31431

CVE-2026-31431 — From a NULL Pointer to Root: Exploiting AFALG AEAD in the Linux Kernel Bug class: Null pointer dereference → heap OOB write → credential overwrite Affected subsystem: net/alg/afalg.c Impact: Local Privilege Escalation unprivileged user → root Affected kernels: Linux 4.4 – 4.9...

AZL-106736 CVE-2026-107570 affecting package mutt 2.2.12-1

heap OOB write in convertfilefromto via a crafted Content-Type header allows attacker to OOB write when email is used as a template...

DEBIAN-CVE-2026-107570

heap OOB write in convertfilefromto via a crafted Content-Type header allows attacker to OOB write when email is used as a template...

CVE-2026-107570

heap OOB write in convertfilefromto via a crafted Content-Type header allows attacker to OOB write when email is used as a template...

CVE-2026-107570 Use of Out-of-range Pointer Offset in mutt

heap OOB write in convertfilefromto via a crafted Content-Type header allows attacker to OOB write when email is used as a template...

EUVD-2026-94853

heap OOB write in convertfilefromto via a crafted Content-Type header allows attacker to OOB write when email is used as a template...

CVE-2026-107570 Use of Out-of-range Pointer Offset in mutt

heap OOB write in convertfilefromto via a crafted Content-Type header allows attacker to OOB write when email is used as a template...

CVE-2026-107570 Use of Out-of-range Pointer Offset in mutt

heap OOB write in convertfilefromto via a crafted Content-Type header allows attacker to OOB write when email is used as a template...

CVE-2026-107570

The mutt mail client is vulnerable to a heap out-of-bounds (OOB) write in the convert_file_from_to() function. This issue can be triggered by providing a crafted Content-Type header when an email is being used as a template. The vulnerability is characterized as a Use of Out-of-range Pointer Offs...

CVE-2026-107570

heap OOB write in convertfilefromto via a crafted Content-Type header allows attacker to OOB write when email is used as a template...

CVE-2026-107570

heap OOB write in convertfilefromto via a crafted Content-Type header allows attacker to OOB write when email is used as a template...

PT-2026-107893

Name of the Vulnerable Software and Affected Versions mutt versions prior to 2.4.2-2.1 Description A heap out-of-bounds write occurs in the convert file from to function when an email is used as a template. An attacker can trigger this issue by providing a crafted Content-Type header...

Linux Distros Unpatched Vulnerability : CVE-2026-107570

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - heap OOB write in convertfilefromto via a crafted Content-Type header allows attacker to OOB write when email is used as a template. CVE-2026-107570 Note that...