Moderate: Red Hat Security Advisory: qemu-kvm security, bug fix, and enhancement update

An update for qemu-kvm is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling

A flaw was found in QEMU's virtio-blk device. The issue arises because the device does not properly validate the size of input descriptors before writing data. A malicious guest with high privileges could exploit this vulnerability by submitting a malformed virtio-blk SCSI request, leading to an...

CVE-2026-42945-Reverse-Shell-POC

CVE-2026-42945 NGINX Rift PoC de RCE com Reverse Shell Prova de conceito de execução remota de código para CVE-2026-42945 , um estouro de buffer de heap no ngxhttprewritemodule do NGINX. Este fork estende o PoC de gatilho público com um ouvinte de reverse shell embutido e parâmetros de exploração...

windows-x86-shellcode-poc

Preuve de concept de débordement de tampon Windows x86 pour débutants Ceci est un tutoriel simple et autonome sur les exploits de débordement de tampon basé sur la pile pour Windows 32 bits. Aucun guide externe requis — tout ce dont vous avez besoin est ici. Qu'est-ce que ce dépôt ? vulnerable.c ...

pentest-writeups

pentest-writeups شرح اختراق Kioptrix Level 1 - CVE-2003-0201 Samba trans2open Kioptrix Level 1 — شرح اختبار الاختراق المؤلف: Amirbek Raxmatullayev @americo444 التاريخ: 2026-06-17 المنصة: VulnHub الصعوبة: مبتدئ الهدف: الحصول على صلاحيات الجذر root 1. إعداد البيئة المكوّن| التفاصيل ---|--- نظام...

SOC-L1-OSINT-Investigation-MikroTik-CVE-2018-1156

SOC L1 ख़तरे की जाँच: MikroTik RouterOS एकाधिक उजागर सेवाएँ विश्लेषक: Jonatan Alexander Guerrero Gomez | लक्ष्य भूमिका: SOC L1 / Jr. Cybersecurity Analyst स्थिति: जाँच बंद | गंभीरता: उच्च कार्यकारी सारांश सक्रिय ख़तरे की खोज अभ्यास जिसमें एक सार्वजनिक-मुखी MikroTik RouterOS उपकरण की पहचान की गई...

CVE-2025-4517-tarfile-PATH_MAX-bypass

CVE-2025-4517 / CVE-2025-4330 — Python tarfile डेटा फ़िल्टर बाईपास PATHMAX ओवरफ़्लो द्वारा लेखक: 0xDTC सीवीई: CVE-2025-4517 / CVE-2025-4330 परामर्श: GHSA-6r6c-684h-9j7p CPython सुधार: PR 135037 अवलोकन Python का tarfile.extractallfilter="data" पथ ट्रैवर्सल पूर्ण पथ, .. अनुक्रम, और गंतव्य से बाहर...

CVE-2021-3156-Baron-Samedit

CVE-2021-3156 – बैरॉन सेमडिट sudo में हीप-आधारित बफर ओवरफ्लो | शोषण और शमन विश्लेषण अवलोकन CVE-2021-3156, जिसे बैरॉन सेमडिट के नाम से जाना जाता है, sudo प्रोग्राम में एक हीप-आधारित बफर ओवरफ्लो भेद्यता है। यह किसी भी अनाधिकृत स्थानीय उपयोगकर्ता को प्रमाणीकरण के बिना असुरक्षित सिस्टम पर रूट...

thm-ice-icecast-rce-privesc

TryHackMe — Ice: Icecast 2.0.1 RCE और Windows विशेषाधिकार वृद्धि प्लेटफ़ॉर्म: TryHackMe लक्ष्य OS: Windows 7 / Windows Server 2008 R2 कठिनाई: आसान श्रेणी: बफ़र ओवरफ़्लो RCE, स्थानीय विशेषाधिकार वृद्धि सारांश यह रिपोर्ट TryHackMe पर Ice मशीन के पूर्ण समझौते का दस्तावेज़ीकरण करती है, प्रारंभिक टोही...

CVE-2026-14266

CVE-2026-14266 — 7-ज़िप XZ डिकोडर हीप बफर ओवरफ़्लो गंभीर गंभीरता | CVSS: 8.8 उच्च | CWE-122: हीप-आधारित बफर ओवरफ़्लो प्रभावित: 7-ज़िप ≤ 26.01 | पैच किया गया: 7-ज़िप 26.02 2026-06-25 खोज और विश्लेषण: Li Yuxuan liyuxuan504-byte और टीम द्वारा कार्यकारी सारांश 7-ज़िप संस्करण ≤ 26.01 के मल्टी-थ्रेडेड ...

nGixshell

nGixShell é um scanner de CVEs do nginx e um framework de exploração RCE. Ele inclui uma prova de conceito funcional para CVE-2026-42945 — um estouro de buffer crítico no heap em ngxhttprewritemodule — e um scanner que abrange 53 CVEs do nginx com sondas HTTP automatizadas, fingerprinting,...

thm-cybersec-portfolio

ملاحظات TryHackMe — محفظة الأمن السيبراني ملاحظات شخصية وملخصات للغرف المكتملة في TryHackMe. أُعدّت كمرجع دراسي ومحفظة أعمال للأدوار الوظيفية في أمن تكنولوجيا المعلومات. الغرف المكتملة | الغرفة| الموضوع ---|---|--- 01| Linux Privilege Escalation| تقنيات تصعيد الامتيازات في لينكس 02| Sudo Buffer...

CVE-2026-78169

A vulnerability was detected in UTT HiPER 1250GW up to 3.2.7-210907-180535. This impacts the function strcpy of the file /goform/aspRemoteApConfTempSend of the component HTTP Request Handler. Performing a manipulation of the argument Profile results in stack-based buffer overflow. The attack is...

CVE-2026-78170

A flaw has been found in UTT HiPER 1200GW up to 2.5.3-170306. Affected is the function strcpy of the file /goform/formConfigFastDirectionW. Executing a manipulation of the argument ssid can lead to buffer overflow. The attack may be performed from remote. The exploit has been published and may be...

CVE-2026-78170

UTT HiPER 1200GW (up to version 2.5.3-170306) is affected by a remote buffer overflow in the strcpy function within /goform/formConfigFastDirectionW. An authenticated attacker (low privileges) can exploit this by manipulating the ssid argument, potentially achieving full compromise of confidentia...

EUVD-2026-64692

A flaw has been found in UTT HiPER 1200GW up to 2.5.3-170306. Affected is the function strcpy of the file /goform/formConfigFastDirectionW. Executing a manipulation of the argument ssid can lead to buffer overflow. The attack may be performed from remote. The exploit has been published and may be...

CVE-2026-78170 UTT HiPER 1200GW formConfigFastDirectionW strcpy buffer overflow

A flaw has been found in UTT HiPER 1200GW up to 2.5.3-170306. Affected is the function strcpy of the file /goform/formConfigFastDirectionW. Executing a manipulation of the argument ssid can lead to buffer overflow. The attack may be performed from remote. The exploit has been published and may be...

EUVD-2026-64691

A vulnerability was detected in UTT HiPER 1250GW up to 3.2.7-210907-180535. This impacts the function strcpy of the file /goform/aspRemoteApConfTempSend of the component HTTP Request Handler. Performing a manipulation of the argument Profile results in stack-based buffer overflow. The attack is...

libtiff: libtiff: Heap-based buffer overflow via crafted PixarLog-compressed TIFF image

A flaw was found in libtiff. A remote attacker could exploit this vulnerability by providing a specially crafted PixarLog-compressed TIFF image. This issue occurs when decoding Pixarlog codec images with the PIXARLOGDATAFMT8BITABGR output format and a specific stride value, leading to a heap-base...

Important: Red Hat Security Advisory: libtiff security update

An update for libtiff is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerabili...