exploit-analysis

Security Write-ups A collection of vulnerabilities I identifi...

PT-2026-87674

Stack-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges over a network...

PT-2026-87829

Name of the Vulnerable Software and Affected Versions Windows Storage Management Provider affected versions not specified Description A stack-based buffer overflow occurs in the Windows Storage Management Provider. This issue allows an authorized attacker to elevate privileges locally on the...

PT-2026-87428

Name of the Vulnerable Software and Affected Versions Windows Broker Infrastructure Service affected versions not specified Description A stack-based buffer overflow occurs in the Windows Broker Infrastructure Service. This issue allows an authorized attacker to elevate privileges locally on the...

PT-2026-87229

Name of the Vulnerable Software and Affected Versions SQL Server affected versions not specified Description A stack-based buffer overflow occurs when a program writes more data to a buffer located on the stack than the buffer is allocated to hold, potentially overwriting adjacent memory. This...

PT-2026-88070

Name of the Vulnerable Software and Affected Versions Microsoft Office Excel affected versions not specified Description A stack-based buffer overflow occurs when a program writes more data to a buffer located on the stack than the buffer is allocated to hold, potentially overwriting adjacent...

ROS-20260908-73-0117

The vulnerability in Vim is related to buffer overflow in the stack. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

PT-2026-87337

Name of the Vulnerable Software and Affected Versions Windows Storage Spaces Controller affected versions not specified Description A stack-based buffer overflow occurs in the Windows Storage Spaces Controller. This issue allows an authorized attacker to elevate privileges locally on the system. ...

PT-2026-88008

Name of the Vulnerable Software and Affected Versions Microsoft Office Word affected versions not specified Description A stack-based buffer overflow occurs when a program writes more data to a buffer located on the stack than the buffer is allocated to hold, potentially overwriting adjacent...

PT-2026-88094

Name of the Vulnerable Software and Affected Versions Microsoft Office Excel affected versions not specified Description A stack-based buffer overflow occurs when a program writes more data to a buffer located on the stack than the buffer is allocated to hold, potentially overwriting adjacent...

NewStart CGSL MAIN 7.02 : openssl Multiple Vulnerabilities (NS-SA-2026-0112)

The remote NewStart CGSL host, running version MAIN 7.02, has openssl packages installed that are affected by multiple vulnerabilities: - Issue summary: An uncommon configuration of clients performing DANE TLSA-based server authentication, when paired with uncommon server DANE TLSA records, may...

EulerOS 2.0 SP12 : libxml2 (EulerOS-SA-2026-3281)

According to the versions of the libxml2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Use After Free in libxml2's xmlParseInternalSubset from GNOME libxml2 version 2.9.11 to 2.11.0 allows a remote attacker to cause a...

EulerOS 2.0 SP12 : xorg-x11-server (EulerOS-SA-2026-3320)

According to the versions of the xorg-x11-server packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A stack-based buffer overflow flaw was found in the X.Org X server and Xwayland. The X server has multiple stack buffers sized...

EulerOS 2.0 SP12 : radvd (EulerOS-SA-2026-3381)

According to the versions of the radvd packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : radvd is a router advertisement daemon for IPv6. Prior to version 2.21, the radvdump utility shipped with radvd contains a stack buffer overflow in...

EulerOS 2.0 SP12 : libxml2 (EulerOS-SA-2026-3356)

According to the versions of the libxml2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Use After Free in libxml2's xmlParseInternalSubset from GNOME libxml2 version 2.9.11 to 2.11.0 allows a remote attacker to cause a...

EulerOS 2.0 SP12 : radvd (EulerOS-SA-2026-3306)

According to the versions of the radvd packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : radvd is a router advertisement daemon for IPv6. Prior to version 2.21, the radvdump utility shipped with radvd contains a stack buffer overflow in...

openbabel:fuzz_convert: Stack-buffer-overflow in OpenBabel::MCDLFormat::getMCDL

Project: https://github.com/openbabel/openbabel.git Detailed Report: https://oss-fuzz.com/testcase?key=6399125835546624 Project: openbabel Fuzzing Engine: libFuzzer Fuzz Target: fuzzconvert Job Type: libfuzzerasanopenbabel Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 4 Crash Address...

CLSA-2026-1788793700 xorg-x11-server: Fix of 2 CVEs

CVE-2026-50256: fix stack buffer overflow in font alias resolution by raising XLFDMAXFONTNAMELEN to libXfont2's MAXFONTNAMELEN and bounds-checking resolved names - CVE-2026-50264: fix out-of-bounds heap write in DRI2 DRIGetBuffers/DRIGetBuffersWithFormat by deduplicating attachments and tracking...

Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Freefloat Freefloat_Ftp_Server

🐞CVE-2025-5548 Buffer overflow in FreeFloat FTP Server 1.0 !...

Security update for file-roller

This update for file-roller fixes the following issue: CVE-2026-78322: stack buffer overflow in parseprogressline for 7z and RAR handlers bsc1276442. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternative...