CVE-2026-85505

ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer over-read in ipmioemfujitsugetselentrylongtext in ipmi-oem/ipmi-oem-fujitsu.c when a BMC provides a short response, a different vulnerability than CVE-2026-50031 which has different affected versions...

CVE-2026-85505

A stack-based out-of-bounds read vulnerability was found in the FreeIPMI ipmi-oem utility. When processing an abnormally short response from a Baseboard Management Controller BMC, the application over-reads the buffer. A malicious BMC could exploit this to crash the client application Denial of...

EUVD-2026-70887

FreeIPMI before 1.6.19 has a stack-based buffer overflow in readfrudata in libfreeipmi/fru/ipmi-fru.c when a BMC returns more bytes than requested...

CVE-2026-85509

FreeIPMI before 1.6.19 has a stack-based buffer overflow in readfrudata in libfreeipmi/fru/ipmi-fru.c when a BMC returns more bytes than requested...

CVE-2026-85509

FreeIPMI before 1.6.19 contains a stack-based buffer overflow in the _read_fru_data function within libfreeipmi/fru/ipmi-fru.c, triggered when a BMC returns more bytes than requested . The vulnerability is rated CVSS 9.8 (Critical) with a network attack vector, low complexity, and no required pri...

EUVD-2026-70886

ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer overflow in outputdellsysteminfocmcipv6info in ipmi-oem/ipmi-oem-dell.c cmc-ipv6-info subcommand to dell get-system-info...

EUVD-2026-70885

ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer overflow in outputdellsysteminfocmcinfo in ipmi-oem/ipmi-oem-dell.c cmc-info subcommand to dell get-system-info...

CVE-2026-85506

A stack-based buffer overflow in the ipmi-oem component of FreeIPMI before 1.6.19 , specifically in the _get_dell_system_info_idrac_info function (ipmi-oem/ipmi-oem-dell.c), can be triggered via the idrac-info subcommand to dell get-system-info. According to Red Hat, this flaw could allow an atta...

EUVD-2026-70883

ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer over-read in ipmioemfujitsugetselentrylongtext in ipmi-oem/ipmi-oem-fujitsu.c when a BMC provides a short response, a different vulnerability than CVE-2026-50031 which has different affected versions...

CVE-2026-85505

ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer over-read in ipmioemfujitsugetselentrylongtext in ipmi-oem/ipmi-oem-fujitsu.c when a BMC provides a short response, a different vulnerability than CVE-2026-50031 which has different affected versions...

EUVD-2026-70818

A stack-based buffer overflow vulnerability exists in the EasyMesh module of TP-Link Archer AX55 v4. When Mesh mode is enabled, a LAN attacker may submit crafted input that causes the easymesh daemon to crash and may potentially achieve remote code execution on the device. Successful exploitation...

CVE-2026-18167

A stack-based buffer overflow vulnerability exists in the EasyMesh module of TP-Link Archer AX55 v4. When Mesh mode is enabled, a LAN attacker may submit crafted input that causes the easymesh daemon to crash and may potentially achieve remote code execution on the device. Successful exploitation...

CVE-2026-18167 Stack-based buffer overflow in TP-Link Archer AX55 v4

A stack-based buffer overflow vulnerability exists in the EasyMesh module of TP-Link Archer AX55 v4. When Mesh mode is enabled, a LAN attacker may submit crafted input that causes the easymesh daemon to crash and may potentially achieve remote code execution on the device. Successful exploitation...

CVE-2002-1120

🐞 CVE-2002-1120: Savant Web Server 3.1 - Stack-Based Buffer Overflow Egghunter Classic stack-based buffer overflow in Savant Web Server 3.1 demonstrating early-2000s remote memory corruption through a crafted HTTP request a 2002 vulnerability that demands more from a beginner than most buffer...

CVE-2025-5548

🛡️ CVE-2025-5548 – Exploit de Desbordamiento de Búfer de FreeFloat FTP Server 📌 Descripción general Este repositorio documenta el descubrimiento y explotación de una vulnerabilidad de desbordamiento de búfer basada en pila en la aplicación FreeFloat FTP Server. La vulnerabilidad reside en el manej...

CVE-2025-5548

🐞 CVE-2025-5548: Desbordamiento de búfer de FreeFloat FTP Server 1.0 Investigación profesional y desarrollo de exploits para un desbordamiento de búfer clásico basado en pila en FreeFloat FTP Server 1.0. Este laboratorio demuestra la transición desde la ingeniería inversa binaria hasta un RCE...

CVE-2019-25485

🐞 CVE-2019-25485: R 3.4.4 - Desbordamiento de Búfer Basado en Pila x86 y x64 Desbordamiento de búfer basado en pila en R 3.4.4. Explotación completa en x86, pero solo control de RIP con análisis de gadgets en x64 debido a restricciones del programa. La misma vulnerabilidad en dos arquitecturas, l...

CVE-2022-26937

Windows Network File System Crash PoC CVE-2022-26937 root@kitploit: nt!KeBugCheckEx: fffff8038996efa0 48894c2408 mov qword ptr rsp+8,rcx ss:0018:ffffd000d589ae60=0000000000000139 1: kd !analyze -v Bugcheck Analysis KERNELSECURITYCHECKFAILURE 139 A kernel component has corrupted a critical data...

CVE-2022-34913

Descripción de CVE-2022-34913 md2roff 1.7 sufre un desbordamiento de búfer basado en pila mediante un archivo Markdown que contiene una gran cantidad de caracteres consecutivos por procesar. Reproducción Para reproducir la vulnerabilidad, debemos descargar una versión vulnerable de md2roff versió...

gimp: GIMP: Remote code execution via TIF file parsing vulnerability

A flaw was found in GIMP. This vulnerability, a stack-based buffer overflow in the TIF file parsing component, allows a remote attacker to execute arbitrary code. User interaction is required, as the target must open a specially crafted malicious TIF file. The issue stems from insufficient...