CVE-2026-5201

CVE-2026-5201 Overflow del buffer basato su heap nel caricatore JPEG di gdk-pixbuf Ciao, sono Kağan Çapar. Ho scoperto una vulnerabilità di overflow del buffer basato su heap nel caricatore di immagini JPEG di gdk-pixbuf che colpisce praticamente tutti gli ambienti desktop Linux. Alla vulnerabili...

CVE-2026-21986-VirtualBox-DoS

CVE-2026-21986 - Esaurimento della memoria kernel delle cartelle condivise di VirtualBox DoS Panoramica Questa repository contiene una proof of concept e una documentazione tecnica per CVE-2026-21986, una vulnerabilità di denial-of-service in Oracle VM VirtualBox. Il problema risiede...

CVE-2026-26903-PoC

CVE-2026-26903 PoC Denial-of-service tramite ricorsione illimitata nella funzionereplaceEqualDeep di TanStack Query Un singolo aggiornamento di query appositamente progettato con oggetti profondamente annidati può congelare il thread JavaScript a tempo indeterminato , causando la completa mancata...

cantina

ARCHIVED. This project moved tocustom-oscp-tooling. All Cantina code lives on there now, alongside the Star Wars enum/advisor tool suite. This repo is kept read-only for history. New home: https://gitlab.com/WattoCyber/custom-oscp-tooling Run: python tools/cantina.py from that repo Cantina At a...

EUVD-2026-67788

PLANET GS-4210-16P2S firmware before 3.441b260626 contains authenticated stack buffer overflow vulnerabilities in /cgi-bin/dispatcher.cgi. The webloginfirstpost handler copies the usrPass POST parameter into a fixed-size stack buffer without length validation, the websysenablePasswdpost handler...

CVE-2026-77218

PLANET GS-4210-16P2S firmware before 3.441b260626 is affected by three authenticated stack buffer overflow vulnerabilities in /cgi-bin/dispatcher.cgi. The web_login_first_post, web_sys_enablePasswd_post, and web_sys_localUser_post handlers each copy POST parameters (usrPass, enbPass, usrName) int...

CVE-2026-77218 PLANET GS-4210-16P2S Stack Buffer Overflow via dispatcher.cgi Credential Handlers

PLANET GS-4210-16P2S firmware before 3.441b260626 contains authenticated stack buffer overflow vulnerabilities in /cgi-bin/dispatcher.cgi. The webloginfirstpost handler copies the usrPass POST parameter into a fixed-size stack buffer without length validation, the websysenablePasswdpost handler...

CVE-2026-77217

PLANET GS-4210-16P2S firmware prior to 3.441b260626 contains authenticated stack buffer overflow and null pointer dereference vulnerabilities in /cgi-bin/dispatcher.cgi. The web_radiusSrv*_post handlers copy the radKey , radKey_0 , radDftParamKey , radName , and radIp POST parameters into fixed-s...

EUVD-2026-67787

PLANET GS-4210-16P2S firmware before 3.441b260626 contains authenticated stack buffer overflow and null pointer dereference vulnerabilities in /cgi-bin/dispatcher.cgi. The webradiusSrvpost family of handlers copies the radKey, radKey0, radDftParamKey, radName, and radIp POST parameters into...

CVE-2026-75126 PLANET GS-4210-16P2S Stack Buffer Overflow via dispatcher.cgi Standard Handlers

PLANET GS-4210-16P2S firmware before 3.441b260626 contains multiple authenticated stack buffer overflow vulnerabilities in /cgi-bin/dispatcher.cgi. The following handlers copy attacker-controlled POST parameters into fixed-size stack buffers without length validation:...

CVE-2026-75126

PLANET GS-4210-16P2S firmware prior to 3.441b260626 contains multiple authenticated stack buffer overflow vulnerabilities in /cgi-bin/dispatcher.cgi . Numerous standard handlers (covering VLAN, PoE, SNMPv3, ACL, STP, TAC+, DHCP, and other functions) copy attacker-controlled POST parameters into f...

EUVD-2026-67786

PLANET GS-4210-16P2S firmware before 3.441b260626 contains multiple authenticated stack buffer overflow vulnerabilities in /cgi-bin/dispatcher.cgi. The following handlers copy attacker-controlled POST parameters into fixed-size stack buffers without length validation:...

CVE-2026-75125 PLANET GS-4210-16P2S Null Pointer Dereference DoS via dispatcher.cgi web_poe_alive_rmtip_post

PLANET GS-4210-16P2S firmware before 3.441b260626 contains an authenticated null pointer dereference vulnerability in /cgi-bin/dispatcher.cgi. The webpoealivermtippost handler dereferences the rmtIP parameter without verifying its presence. A remote authenticated attacker can send a crafted reque...

EUVD-2026-67785

PLANET GS-4210-16P2S firmware before 3.441b260626 contains an authenticated null pointer dereference vulnerability in /cgi-bin/dispatcher.cgi. The webpoealivermtippost handler dereferences the rmtIP parameter without verifying its presence. A remote authenticated attacker can send a crafted reque...

CVE-2026-75125

PLANET GS-4210-16P2S managed PoE switches running firmware before 3.441b260626 are affected by an authenticated null pointer dereference in /cgi-bin/dispatcher.cgi. Specifically, the web_poe_alive_rmtip_post handler dereferences the rmtIP parameter without checking for its presence. A remote auth...

CVE-2026-75124

PLANET GS-4210-16P2S firmware prior to 3.441b260626 contains a pre-authentication memory corruption vulnerability in the web management interface. The root cause is in the _readHttpParam function, which copies an oversized HTTP query string without guaranteeing NUL termination, allowing parse_que...

CVE-2026-16440

A flaw was found in Eclipse OpenJ9. A remote attacker with low privileges could exploit this vulnerability by convincing a user to process a specially crafted .class file containing deeply nested annotations. This could lead to a segmentation fault, resulting in a Denial of Service DoS for the...

CVE-2025-5548

Sfruttamento e Analisi delle Vulnerabilità Scopo del documento: Riflettere sulle conoscenze acquisite durante la distribuzione del laboratorio, dettagliare il processo di sfruttamento del CVE-2025-5548 e delineare i prossimi passi verso la ricerca di vulnerabilità sconosciute 0-day. 1. La Mia...

CVE-2019-1064

CVE-2019-1064 - AppXSVC Escalação Local de Privilégio https://www.rythmstick.net/posts/cve-2019-1064/...

cryptpad-cve-2025-51846-advisory

CVE-2025-51846 – Inundação Ilimitada de Quadros WebSocket Permite Negação de Serviço Remota Gravidade: Alta CVSS 7.5 CWE: 400 – Consumo de Recursos Não Controlado Exaustão de Recursos, CWE: CWE-770 – Alocação de Recursos Sem Limites ou Regulação Status: Corrigido Afetado confirmado: CryptPad...