CVE-2026-11645-Out-of-bounds-Read-Write

CVE-2026-11645 - Chrome V8 Out-of-Bounds Read/Write Exploit ⚠️ WARNING This code is ONLY for educational purposes and authorized testing. 📋 Description CVE-2026-11645 is an out-of-bounds read and write OOB vulnerability in the V8 engine of Google Chrome. A remote attacker can execute arbitrary cod...

cve-2021-4034-mock

CVE-2021-4034 PwnKit 模拟漏洞系统 该项目是一个模拟系统，用于重现 Linux pkexec 守护进程中发现的 CVE-2021-4034（越界读/写） 漏洞的核心运行原理。在没有实际 SUID 权限提升的情况下，在受控环境中安全地模拟了环境变量内存区域越界及恶意载荷注入机制。 特别是，该模拟系统能够检测最新 Linux 内核的 execve 防御机制（传递空数组时强制插入空字符串从而形成 argc=1 的现象），并通过修正偏移量，成功模拟了过去存在漏洞的内存环境。 📂 文件结构 root@kitploit: cve-2021-4034-mock/ ├──...

CVE-2026-11645

CVE-2026-11645 - Google Chrome中V8远程代码执行漏洞 快速使用 root@kitploit: python3 exploit.py -t "C:\Path\To\Target" -o demo.zip --data-file payload.exe 漏洞利用说明 严重性: HIGH CVSS: 8.8 影响: 机密性、完整性、可用性 发布时间: 2026-06-09 技术摘要 在Google Chrome...

CVE-2023-35001

nftables 越界读/写漏洞利用 CVE-2023-35001 该漏洞利用用于 2023 年温哥华 Pwn2Own 大赛的 Ubuntu 桌面系统。支持赛事开始时可用的内核版本 5.19.0-35。 要求 C 编译器 Go 编译器 使用方法 root@kitploit: 构建 $ make 运行 $ ./exploit 这将生成一个 lpe.zip 文件，可在目标上解压。归档文件中包含两个二进制文件： wrapper ：一个用于进入命名空间的 C 二进制程序 exploit ：实际的漏洞利用程序 exploit 文件是需要执行的程序。它使用 wrapper...

libxfont2: Font Server Client encoding[] Out-Of-Bounds Read/Write

A flaw was found in the libXfont2 font-server client. A remote attacker, by operating a malicious font server, could exploit an out-of-bounds read/write vulnerability. This occurs because the client incorrectly handles font data, leading to an out-of-bounds memory access. This can lead to privile...

libxfont2: Font Server Client encoding[] Out-Of-Bounds Read/Write

A flaw was found in the libXfont2 font-server client. A remote attacker, by operating a malicious font server, could exploit an out-of-bounds read/write vulnerability. This occurs because the client incorrectly handles font data, leading to an out-of-bounds memory access. This can lead to privile...

Important: Red Hat Security Advisory: libXfont2 security update

An update for libXfont2 is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

Important: Red Hat Security Advisory: libXfont2 security update

An update for libXfont2 is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

libxfont2: Font Server Client encoding[] Out-Of-Bounds Read/Write

A flaw was found in the libXfont2 font-server client. A remote attacker, by operating a malicious font server, could exploit an out-of-bounds read/write vulnerability. This occurs because the client incorrectly handles font data, leading to an out-of-bounds memory access. This can lead to privile...

EUVD-2026-65071

An out-of-bounds read/write vulnerability in the MessageParser::parseECSSTCHeader component of SpaceDot AcubeSAT OBC software commit eaf90ec allows attackers to cause a Denial of Service DoS via supplying a crafted CAN message...

CVE-2026-75370

An out-of-bounds read/write vulnerability in the MessageParser::parseECSSTCHeader component of SpaceDot AcubeSAT OBC software commit eaf90ec allows attackers to cause a Denial of Service DoS via supplying a crafted CAN message...

CVE-2026-75370

An out-of-bounds read/write vulnerability exists in the MessageParser::parseECSSTCHeader component of SpaceDot AcubeSAT OBC software (commit eaf90ec ). An attacker can supply a crafted CAN message to trigger the bug, resulting in a Denial of Service . The CVSS v3.1 score is 6.5 (Medium) , with a ...

libXfont2 security update

An update is available for libXfont2. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list X.Org X11 libXfont2 runtime library Security Fixes: libxfont2: Font Server...

libXfont2 security update

An update is available for libXfont2. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list X.Org X11 libXfont2 runtime library Security Fixes: libxfont2: Font Server...

RLSA-2026:55446 Important: libXfont2 security update

X.Org X11 libXfont2 runtime library Security Fixes: libxfont2: Font Server Client encoding Out-Of-Bounds Read/Write CVE-2026-59679 libxfonts2: libXfont2: Privilege Escalation via Heap Buffer Overflow in Font Server Client CVE-2026-44950 For more details about the security issues, including the...

libxfont2: Font Server Client encoding[] Out-Of-Bounds Read/Write

A flaw was found in the libXfont2 font-server client. A remote attacker, by operating a malicious font server, could exploit an out-of-bounds read/write vulnerability. This occurs because the client incorrectly handles font data, leading to an out-of-bounds memory access. This can lead to privile...

Important: libXfont2 security update

X.Org X11 libXfont2 runtime library Security Fixes: libxfont2: Font Server Client encoding Out-Of-Bounds Read/Write CVE-2026-59679 libxfonts2: libXfont2: Privilege Escalation via Heap Buffer Overflow in Font Server Client CVE-2026-44950 For more details about the security issues, including the...

SUSE-SU-2026:3500-1 Security update for libXfont2

This update for libXfont2 fixes the following issues: - CVE-2026-44950: fsreadglyphs heap buffer overflow via cumulative glyph data overflow bsc1272661. - CVE-2026-59679: fsreadglyphs heap OOB read/write via encoding array index mismatch bsc1272660...

CVE-2026-11690

Out of bounds read and write in Media in Google Chrome on Mac prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

libpng: libpng: Information disclosure and denial of service via out-of-bounds read/write in Neon palette expansion

A flaw was found in libpng. A remote attacker could exploit an out-of-bounds read and write vulnerability in the ARM/AArch64 Neon-optimized palette expansion path. This occurs when processing a final partial chunk of 8-bit paletted rows without verifying sufficient input pixels, leading to...