CVE-2026-25283

CVE-2026-25283 is a stack-based buffer overflow in OOBM , a component maintained by Qualcomm . The vulnerability is caused by memory corruption when unverified data from an external source is copied into a buffer larger than the allocated size. The CNA-assigned CVSS 3.1 score is 8.8 (HIGH) with a...

CVE-2026-81546

Affinity by Canva versions prior to 3.3.0 (September 2026 release) contain a stack-based buffer overflow caused by inadequate bounds checking when parsing Affinity document files. A threat actor could craft a malicious Affinity document that, when opened by a user, may lead to arbitrary code exec...

CVE-2026-41089-Netlogon-RCE

🚨 CVE-2026-41089: 重大な Windows Netlogon RCE Active Directory ドメインコントローラにおける未認証のリモートコード実行 🧠 概念概要 私は、Windows Netlogon サービスの深部に存在する極めて重大な脆弱性である CVE-2026-41089 の技術的詳細分析を公開します。私の分析によると、この欠陥は深刻な スタックベースのバッファオーバーフロー...

CVE-2026-86358

Dell Update Package Framework, versions prior to 26.07.03, contains a Stack-based Buffer Overflow vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Remote execution...

CVE-2026-86358

Dell Update Package Framework, versions prior to 26.07.03, contains a Stack-based Buffer Overflow vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Remote execution...

CVE-2026-86358

Dell Update Package Framework , versions prior to 26.07.03 , is affected by a Stack-based Buffer Overflow vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this flaw to achieve remote code execution . The CVSS 3.1 base score is 6.5 (MEDIUM) , with t...

Blackash-CVE-2025-0282

Blackash-CVE-2025-0282 説明 Ivanti Connect Secure バージョン22.7R2.5未満、Ivanti Policy Secure バージョン22.7R1.2未満、およびIvanti Neurons for ZTAゲートウェイ バージョン22.7R2.3未満 におけるスタックベースのバッファオーバーフローにより、リモートの未認証攻撃者がリモートコード実行を達成できます。 メトリクス CNA: ivanti 基本スコア: 9.0 CRITICAL ⚫ ベクター: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H...

CVE-2022-26937

Windows 网络文件系统崩溃 PoC CVE-2022-26937 root@kitploit: nt!KeBugCheckEx: fffff8038996efa0 48894c2408 mov qword ptr rsp+8,rcx ss:0018:ffffd000d589ae60=0000000000000139 1: kd !analyze -v Bugcheck Analysis KERNELSECURITYCHECKFAILURE 139 A kernel component has corrupted a critical data structure. The...

CVE-2003-0264_EXPLOIT

CVE-2003-0264EXPLOIT Seattle Lab Mail SLmail 5.5 中的缓冲区溢出 - POP3 基于栈的简单缓冲区溢出（逐步讲解） 1 对应用程序进行模糊测试 首先，我们将使用一个简单的 Spike 脚本对应用程序进行模糊测试 同时，我们也会让 SLmail 附加到 Immunity Debugger 上并运行 更多关于 Spike::https://resources.infosecinstitute.com/topic/intro-to-fuzzing/ 这里是一个名为 spikefuzz.spk 的简单 Spike 脚本...

CVE-2026-19774

BlueZ A2DP Stack-based Buffer Overflow Remote Code Execution Vulnerabi...

CVE-2026-76869

Netcore NR255-V version 1.5.130703 contains a stack-based buffer overflow in the reboot_timer_set.cgi endpoint, caused by improper sscanf token parsing . An attacker with authenticated access can submit crafted input to corrupt stack memory, potentially leading to code execution or service disrup...

CVE-2026-76861

Netcore NR255-V version 1.5.130703 contains a stack-based buffer overflow in the ntools_tcpdump_start_set.cgi endpoint, caused by an unsized sprintf call when processing form values. An attacker with low privileges can submit crafted input to this CGI to overflow the stack buffer, potentially ach...

CVE-2017-8367

CVE-2017-8367 脆弱性CVE-2017-8367 Easy Mov ConverterのRegister機能におけるスタックベースのバッファオーバーフローに対するPoCエクスプロイト。 使用方法 スクリプトを実行すると、ペイロードを含むファイルPOCPayload.txt が作成されます。 root@kitploit: python3 payloadgeneratorCVE-2017-15950.py 出力ファイルをメモ帳で開き、ASCII出力をコピーしてEasy Mov ConverterのRegister機能のusernameフィールドに貼り付けます。...

CVE-2026-19774

A flaw was found in BlueZ. This vulnerability, a stack-based buffer overflow in the Advanced Audio Distribution Profile A2DP stack, allows a network-adjacent attacker to execute arbitrary code. By pairing a malicious Bluetooth device with the target system, an attacker can exploit improper...

CVE-2026-19774

BlueZ A2DP Stack-based Buffer Overflow allows remote code execution as root on affected installations of the Linux Bluetooth protocol stack. The flaw resides in the handling of stream endpoints , where user-supplied data is copied to a fixed-length stack-based buffer without proper length validat...

CVE-2026-91090

A vulnerability was determined in GPAC up to f1219cde. The affected element is the function gfnodeactivateex of the file scenegraph/basescenegraph.c. This manipulation causes stack-based buffer overflow. It is possible to launch the attack on the local host. The exploit has been publicly disclose...

CVE-2026-91003

A flaw has been found in D-Link DI-8300 16.07. The affected element is the function rzglasp of the file /rzgl.asp of the component CGI Service. This manipulation of the argument redircturl causes stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit has been...

EUVD-2026-78273

A security flaw has been discovered in D-Link DI-8400 16.07. This affects the function ddnsasp of the file /ddns.asp of the component DDNS Configuration. Performing a manipulation of the argument serv/user/host/wild/mx/bmx/cust/ip results in stack-based buffer overflow. The attack can be initiate...

PT-2026-91773

GNU libextractor before 1.15 contains a stack-based buffer overflow vulnerability in the process star office function that sizes a variable-length stack array from attacker-controlled OLE2 stream data. Attackers can craft malicious StarOffice documents that allocate up to 4 MB on the stack, causi...

Linux Distros Unpatched Vulnerability : CVE-2026-91752

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GNU libextractor before 1.15 contains a stack-based buffer overflow vulnerability in the processstaroffice function that sizes a variable-length stack array fro...