6716 matches found
EUVD-2026-65597
The virtio PCI driver drivers/virtio/virtiopci.c parses a device's PCI capability list during driver initialization. In virtiopcireadcap the device-supplied capability length byte caplen read from PCI config space via pcieconfread was only checked with asserttmp.caplen == capstructsize. That asse...
CVE-2025-71407 Nokogiri before 1.18.3 Stack Buffer Overflow and Use-After-Free
Nokogiri before 1.18.3 contains a stack buffer overflow vulnerability in libxml2 when reporting DTD validation errors with long QName prefixes, and a use-after-free vulnerability during validation against untrusted XML Schemas. Attackers can trigger these vulnerabilities by providing malicious DT...
CVE-2025-71407 Nokogiri before 1.18.3 Stack Buffer Overflow and Use-After-Free
Nokogiri before 1.18.3 contains a stack buffer overflow vulnerability in libxml2 when reporting DTD validation errors with long QName prefixes, and a use-after-free vulnerability during validation against untrusted XML Schemas. Attackers can trigger these vulnerabilities by providing malicious DT...
EUVD-2025-210774
Nokogiri before 1.18.3 contains a stack buffer overflow vulnerability in libxml2 when reporting DTD validation errors with long QName prefixes, and a use-after-free vulnerability during validation against untrusted XML Schemas. Attackers can trigger these vulnerabilities by providing malicious DT...
CVE-2025-71407
Nokogiri versions before 1.18.3 contain two vulnerabilities in its bundled libxml2 component: a stack buffer overflow triggered when reporting DTD validation errors with long QName prefixes, and a use-after-free during validation against untrusted XML Schemas. An attacker can exploit these by sup...
CVE-2025-27480-The-Silent-Gateway-Risk
CVE-2025-27480-Das-stille-Gateway-Risiko Ermöglicht Angreifern, schädlichen Code auszuführen, ohne dass ein geknacktes Passwort, eine Benutzerinteraktion oder sogar ein Fuß im Netzwerk erforderlich ist. Das ist CVE-2025-27480 Es ist spät, du läufst auf Red Bull – wir kennen das alle. Du behebst e...
CVE-2021-27965
CVE-2021-27965 Semplice PoC per sfruttare CVE-2021-27965 per LPE avviando cmd di sistema. https://vulners.com/cve/CVE-2021-27965 È stato scoperto un problema nel driver Windows firmato MICSYS MsIo64.sys che può portare alla compromissione dell'intero sistema locale. La routine di dispatch degli...
tmux-fuzzing
Laboratorio di Fuzzing: Migliorare il Fuzzing per tmux Software Security @ EPFL, Primavera 2025 Abstract In questo laboratorio, abbiamo potenziato le attività di fuzzing per il multiplexer di terminale tmux nell'infrastruttura OSS-Fuzz di Google. Abbiamo innanzitutto stabilito una baseline...
CVE-2026-78322
A flaw was found in file-roller. When opening or extracting a malicious 7z or RAR archive containing a file entry with an excessively long path, file-roller's progress-line parsing copies the path into a fixed-size stack buffer using an unbounded string copy. This can trigger a stack buffer...
CVE-2026-78322
file-roller (GNOME archive manager) is affected by a stack buffer overflow in the parse_progress_line function used by its 7z and RAR handlers . When a victim opens or extracts a crafted archive containing a file entry with an excessively long path, the path is copied into a fixed-size stack buff...
CVE-2026-78322
A flaw was found in file-roller. When opening or extracting a malicious 7z or RAR archive containing a file entry with an excessively long path, file-roller's progress-line parsing copies the path into a fixed-size stack buffer using an unbounded string copy. This can trigger a stack buffer...
CVE-2026-78322 File-roller: file-roller: stack buffer overflow in parse_progress_line for 7z and rar handlers
A flaw was found in file-roller. When opening or extracting a malicious 7z or RAR archive containing a file entry with an excessively long path, file-roller's progress-line parsing copies the path into a fixed-size stack buffer using an unbounded string copy. This can trigger a stack buffer...
CVE-2026-78322 File-roller: file-roller: stack buffer overflow in parse_progress_line for 7z and rar handlers
A flaw was found in file-roller. When opening or extracting a malicious 7z or RAR archive containing a file entry with an excessively long path, file-roller's progress-line parsing copies the path into a fixed-size stack buffer using an unbounded string copy. This can trigger a stack buffer...
EUVD-2026-65311
A flaw was found in file-roller. When opening or extracting a malicious 7z or RAR archive containing a file entry with an excessively long path, file-roller's progress-line parsing copies the path into a fixed-size stack buffer using an unbounded string copy. This can trigger a stack buffer...
CVE-2026-78322
A flaw was found in file-roller. When opening or extracting a malicious 7z or RAR archive containing a file entry with an excessively long path, file-roller's progress-line parsing copies the path into a fixed-size stack buffer using an unbounded string copy. This can trigger a stack buffer...
CVE-2026-68960
A stack-based buffer overflow vulnerability exists in SKYSEA Client View and SKYMEC IT Manager. If this vulnerability is exploited, an attacker who can log in to a Windows system on which the affected product is installed may be able to execute arbitrary code on another Windows system that has th...
CVE-2026-68960
A stack-based buffer overflow vulnerability affects SKYSEA Client View and SKYMEC IT Manager , two Windows-based IT management products. An authenticated attacker who can log in to a Windows system running the affected software may be able to execute arbitrary code on a different Windows host tha...
cve-2015-7547-public
Server di attacco PoC per la vulnerabilità CVE-2015-7547 in glibc DNS stub resolver Per testare su macchina locale con una versione vulnerabile di glibc: root@kitploit: user@localhost:/$ echo 'nameserver 127.0.0.127' | sudo tee /etc/resolv.conf user@localhost:/$ echo 'nameserver 127.0.0.127' | su...
cve-2024-27130-poc
CVE-2024-27130-poc CVE-2024-27130 ist eine schwerwiegende Sicherheitslücke, die QNAP Network Attached Storage NAS-Geräte betrifft. Die Schwachstelle beruht auf der unsicheren Verwendung der strcpy-Funktion in der Funktion NoSupportACL des share.cgi-Skripts im QTS-Betriebssystem, was zu einem...
CVE-2026-13214
The OCPP 1.6 client in subsys/net/lib/ocpp/ocppj.c contains a stack buffer overflow in parsegetconfigmsg. When handling a GetConfiguration request from the central system, the handler copied the attacker-controlled JSON "key" string into the caller's fixed 50-byte stack buffer skeyCISTR50, declar...