CVE-2026-42533

CVE-2026-42533 — Sito di tracciamento della sovrascrittura di cattura nginx map/regex Tracker dello stato delle patch per CVE-2026-42533 , un heap buffer overflow nel motore di valutazione script a due passate di nginx. nginx misura un'espressione stringa in una passata LEN e la scrive in una...

CVE-2026-0006-openapv-poc

CVE-2026-0006: Heap Buffer Overflow in libopenapv Android APV Codec Patch-Analyse & Reproduktion von Mobile Hacking Lab CVSS 9.8 Kritisch | Aktiv in freier Wildbahn ausgenutzt | Gepatched im März 2026 Hinweis: Wir haben diese Schwachstelle nicht entdeckt. Die Anerkennung für das Finden und...

CVE-2025-5548

Analisi e sfruttamento di FreeFloat FTP: CVE-2025-5548 Anderson Steven — Master in Cybersicurezza, Modulo 6 Vulnerabilità Consegna individuale: Metodologia di analisi e sfruttamento delle vulnerabilità Perché questo repository Non volevo semplicemente consegnare "ecco l'exploit funzionante". Ques...

CVE-2016-3309_Reloaded

Fallstudie zur Kernel-Ausnutzung - "Wilder" Pool-Overflow auf Win10 x64 RS2 CVE-2016-3309 Reloaded Dieses GitHub-Repository enthält Exploits für die kürzlich gepatchte win32kfull!bFill-Schwachstelle. Die Ausführung des Palette- oder Bitmap-Exploits gewährt Ihnen SYSTEM-Privilegien auf dem...

RLSA-2026:58571 Moderate: qemu-kvm security, bug fix, and enhancement update

Kernel-based Virtual Machine KVM is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm packages provide the user-space component for running virtual machines that use KVM. Security Fixes: qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling...

qemu-kvm security, bug fix, and enhancement update

An update is available for qemu-kvm. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Kernel-based Virtual Machine KVM is a full virtualization solution for Linu...

CVE-2026-72854

A flaw was found in msgpack-c. An integer overflow vulnerability exists in the msgpackunpackerexpandbuffer function. This flaw can lead to an undersized memory buffer being allocated, even though the system reports a successful reservation. If an attacker can influence the length provided to the...

knot-doq

Knot Resolver 6.3.0 — DNS-over-QUIC-Heap-Überlauf → RCE PoC Proof-of-Concept für einen remote auslösbaren Heap-Pufferüberlauf im DNS-over-QUIC-Empfangspfad DoQ von Knot Resolver, der eine Remote-Codeausführung als der Dienstbenutzer knot-resolver ermöglicht. Komponente: kresd DoQ-Listener...

sqlite: SQLite: Arbitrary code execution via crafted FTS5 full-text search data

A flaw was found in SQLite's FTS5 full-text search extension. This vulnerability involves memory corruption, specifically an out-of-bounds read and a heap buffer overflow, which can be triggered by supplying a crafted database with malformed FTS5 page data. When an FTS5 MATCH query is executed...

Important: Red Hat Security Advisory: sqlite security update

An update for sqlite is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring Syst...

sqlite: SQLite: Arbitrary code execution and crash via heap-based buffer overflow in FTS5

A flaw was found in SQLite, specifically within its FTS5 full-text search extension. Attackers can exploit a heap-based buffer overflow by providing a specially crafted database. This crafted database contains malicious metadata that triggers an integer underflow during FTS5 MATCH query processin...

CVE-2026-74679

A flaw was found in the Linux kernel's USB gadget NCM Network Control Model function fncm. A malicious host can exploit an integer overflow vulnerability by supplying a large offset. This overflow causes a signed index variable to become negative, bypassing security checks and leading to an...

CVE-2026-41089-Netlogon-RCE

🚨 CVE-2026-41089: RCE critica di Windows Netlogon Esecuzione remota di codice non autenticata sui controller di dominio Active Directory 🧠 Panoramica concettuale Pubblico questa analisi tecnica di CVE-2026-41089 , una vulnerabilità estremamente critica che risiede in profondità nel servizio Windo...

CVE-2026-42533

CVE-2026-42533 — PoC Exploit per l'Heap Buffer Overflow di nginx Esecuzione remota di codice pre-autenticazione tramite sovrascrittura dei gruppi di cattura a due passate PoC pubblico rilasciato il 2026-07-27 — Non aspettare, applica la patch ora. | ---|--- CVE| CVE-2026-42533 CVSS 4.0| 9.2 Criti...

firefox: Integer overflow in the Graphics component

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Integer overflow in the Graphics component...

firefox: Integer overflow in the Graphics component

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Integer overflow in the Graphics component...

firefox: Integer overflow in the Graphics component

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Integer overflow in the Graphics component...

CVE-2021-3064

CVE-2021-3064: Pan-OS Buffer Overflow Remoto + Contrabbando HTTP Exploit Questo exploit sfrutta una vulnerabilità di HTTP Smuggling per consegnare un payload a un endpoint altrimenti inaccessibile sui firewall Pan-OS; l'endpoint è vulnerabile a un overflow che può essere sfruttato per eseguire...

CVE-2026-21045_and_CVE-2026-21048

CVE-2026-21045 & CVE-2026-21048 — PoC di scrittura OOB nel libimagecodec.quram.so di Samsung Panoramica Questo repository contiene file Proof-of-Concept PoC concettuali che dimostrano vulnerabilità di scrittura fuori dai limiti OOB nella libreria codec immagini Quramsoft libimagecodec.quram.so...

CVE-2026-74664

A flaw was found in the Linux kernel's Open vSwitch component. When processing flow updates, the ovsflowcmdnew function preallocates a reply buffer based on the request's flow identifier. If a shorter User Flow ID UFID is provided, but the system matches an existing flow with a longer key...