748276 matches found
CVE-2026-103011
Heap-based buffer overflow in the legacy Blowfish encryption routine BlowFishEncryptor::Encode, called by EncryptToString in Progressive Robot hMailServer 6.0.0 through 6.3.5 allows an authenticated mailbox user to cause a denial of service service crash, and possibly other unspecified impact. In...
CVE-2026-103010
Heap-based buffer overflow in the legacy Blowfish decryption routine BlowFishEncryptor::DecryptFromString in Progressive Robot hMailServer 6.0.0 through 6.3.3 on Windows allows a local interactive user with no hMailServer credentials to write bytes of their choosing past the end of a 255-byte hea...
CVE-2025-27591
Exploit for CVE-2025-27591 For educational purposes only Built for HTB machine "Outbound" How does CVE-2025-27591 work? CVE-2025-27591 is a local privilege escalation vulnerability for the Service Below in versions prior to 0.9.0. The service creates a world-writable directory at /var/log/below...
CVE-2026-103011
Progressive Robot hMailServer versions 6.0.0 through 6.3.5 are vulnerable to a heap-based buffer overflow in the legacy Blowfish encryption routine (BlowFishEncryptor::Encode , called by EncryptToString ). The flaw occurs because the padding loop can write up to 7 zero bytes between 2 and 232 byt...
EUVD-2026-94838
Heap-based buffer overflow in the legacy Blowfish encryption routine BlowFishEncryptor::Encode, called by EncryptToString in Progressive Robot hMailServer 6.0.0 through 6.3.5 allows an authenticated mailbox user to cause a denial of service service crash, and possibly other unspecified impact. In...
CVE-2026-103011 Heap-based Buffer Overflow in hMailServer
Heap-based buffer overflow in the legacy Blowfish encryption routine BlowFishEncryptor::Encode, called by EncryptToString in Progressive Robot hMailServer 6.0.0 through 6.3.5 allows an authenticated mailbox user to cause a denial of service service crash, and possibly other unspecified impact. In...
CVE-2026-103011 Heap-based Buffer Overflow in hMailServer
Heap-based buffer overflow in the legacy Blowfish encryption routine BlowFishEncryptor::Encode, called by EncryptToString in Progressive Robot hMailServer 6.0.0 through 6.3.5 allows an authenticated mailbox user to cause a denial of service service crash, and possibly other unspecified impact. In...
EUVD-2026-94837
Heap-based buffer overflow in the legacy Blowfish decryption routine BlowFishEncryptor::DecryptFromString in Progressive Robot hMailServer 6.0.0 through 6.3.3 on Windows allows a local interactive user with no hMailServer credentials to write bytes of their choosing past the end of a 255-byte hea...
CVE-2026-103010
Progressive Robot hMailServer versions 6.0.0 through 6.3.3 on Windows are vulnerable to a heap-based buffer overflow in the legacy Blowfish decryption routine (BlowFishEncryptor::DecryptFromString ). A local interactive user without credentials can exploit this by passing a long hexadecimal strin...
CVE-2026-103010 Heap-based Buffer Overflow in hMailServer
Heap-based buffer overflow in the legacy Blowfish decryption routine BlowFishEncryptor::DecryptFromString in Progressive Robot hMailServer 6.0.0 through 6.3.3 on Windows allows a local interactive user with no hMailServer credentials to write bytes of their choosing past the end of a 255-byte hea...
CVE-2026-103010 Heap-based Buffer Overflow in hMailServer
Heap-based buffer overflow in the legacy Blowfish decryption routine BlowFishEncryptor::DecryptFromString in Progressive Robot hMailServer 6.0.0 through 6.3.3 on Windows allows a local interactive user with no hMailServer credentials to write bytes of their choosing past the end of a 255-byte hea...
EUVD-2026-94835
Missing network timeouts in the Linux builds of Progressive Robot hMailServer 6.3.0 through 6.3.5 allow a remote attacker to hold server threads indefinitely and so stop outbound mail delivery denial of service. The server set its socket timeouts in the form Windows takes, which Linux refuses, an...
CVE-2026-103649
Linux builds of Progressive Robot hMailServer versions 6.3.0 through 6.3.5 are vulnerable to a denial of service (DoS) due to missing network timeouts. The root cause is that the server sets socket timeouts in a Windows-specific format which Linux rejects, causing HTTPS clients to read without a ...
CVE-2026-103649 Synchronous Access of Remote Resource without Timeout in hMailServer
Missing network timeouts in the Linux builds of Progressive Robot hMailServer 6.3.0 through 6.3.5 allow a remote attacker to hold server threads indefinitely and so stop outbound mail delivery denial of service. The server set its socket timeouts in the form Windows takes, which Linux refuses, an...
CVE-2026-103649 Synchronous Access of Remote Resource without Timeout in hMailServer
Missing network timeouts in the Linux builds of Progressive Robot hMailServer 6.3.0 through 6.3.5 allow a remote attacker to hold server threads indefinitely and so stop outbound mail delivery denial of service. The server set its socket timeouts in the form Windows takes, which Linux refuses, an...
cve-2025-15467-crash
This repository does not have a README...
SNMPocalypse-Cisco-Bug-Lets-Hackers-Crash-or-Command-Devices
SNMPocalypse-Cisco-Bug-Lets-Hackers-Crash-or-Command-Devices CVE-2023-20352 is a critical stack overflow flaw in Cisco IOS/IOS XE's SNMP engine. With just crafted SNMP packets, remote attackers can crash systems or seize root control. All SNMP versions are vulnerable patch now or risk total...
CVE-2017-13672
CVE-2017-13672 POCs for CVE-2017-13672 OOB read in VGA Cirrus QEMU driver, causing DoS...
CVE-2026-93523
A flaw was found in xorg-x11-server. A local authenticated client can exploit this flaw by sending a crafted input device ungrab request with an unvalidated modifier value. This lack of validation causes the server to perform an out-of-bounds write on the heap, resulting in memory corruption that...
Security update 5.2.1 for Multi-Linux Manager Client Tools
This update fixes the following issues: golang-github-prometheus-prometheus was updated to version 3.13.2: Security issues: CVE-2026-39821: Fixed validation bypass and privilege escalation in Punycode label handling bsc1266608 CVE-2026-56852: Fixed infinite loop on truncated or invalid UTF-8 inpu...