100629 matches found
PT-2026-128319
Alpine iLX-F511 Framework Service Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Alpine iLX-F511 devices. Authentication is not required to exploit this vulnerability. T...
(0Day) (Pwn2Own) Alpine iLX-F511 Android Auto Service Stack-based Buffer Overflow Remote Code Execution Vulnerability
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Alpine iLX-F511 devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within the Android Auto service. The issue results from the lack of proper...
PT-2026-128079
Linux binaries have executable stack attribute enabled. The following products are affected: Acronis Cyber Protect 17 Linux before build 42587...
(0Day) (Pwn2Own) Alpine iLX-F511 vCard Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected Alpine iLX-F511 devices. User interaction is required to exploit this vulnerability in that the target must connect to a malicious Bluetooth device. The specific flaw exists within the parsing of vCard data...
(0Day) (Pwn2Own) Alpine iLX-F511 prh_sdp_service_search_decode Stack-based Buffer Overflow Remote Code Execution Vulnerability
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Alpine iLX-F511 devices. An attacker must first obtain the ability to pair a malicious Bluetooth device with the target system in order to exploit this vulnerability. The specific flaw exis...
(0Day) (Pwn2Own) Alpine iLX-F511 Framework Service Stack-based Buffer Overflow Remote Code Execution Vulnerability
This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Alpine iLX-F511 devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within the framework service. The issue results from the lack of proper...
(0Day) (Pwn2Own) Alpine iLX-F511 Android Auto Connection Handler Stack-based Buffer Overflow Remote Code Execution Vulnerability
This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Alpine iLX-F511 devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within the Android Auto connection handler. The issue results from the lack...
PT-2026-128135
In the Linux kernel, the following vulnerability has been resolved: tracing: Check operator stack capacity before pushing predicate parse uses the first operator stack entry before processing any opening parentheses. A push then increments top before writing. The existing check still permits that...
CTT-Enhanced-PX4-Autopilot-Exploit-CVE-2026-32743
CTT-Enhanced-PX4-Autopilot-Exploit-CVE-2026-32743 CVE-2026-32743 β PX4 Autopilot Stack Buffer Overflow CTT-Enhanced: 33-Layer Temporal Cascade Drone DoS .The original exploit crashes the MAVLink task via a 60-byte overflow. The CTT version distributes the overflow across 33 temporal layers, each...
pbscan
SUMMARY polarbearscan is an attempt to do faster and more efficient banner grabbing and port scanning. It combines two different ideas which hopefully will make it somewhat worthy of your attention and time. The first of these ideas is to use stateless SYN scanning using cryptographically protect...
Llama-Stack-0.4.0rc3-local-CVE-2026-25211
Llama Stack pgvector Password Leak PoC CVE-2026-25211 Local Proof-of-Concept demonstrating plaintext database password exposure in initialization logs of llama-stack versions 0.4.0rc3. Overview In affected versions of llama-stack before 0.4.0rc3, when using the pgvector vector store provider, the...
CVE-2021-31166
CVE-2021-31166 0x00.Description This is a proof of concept for CVE-2021-31166 "HTTP Protocol Stack Remote Code Execution Vulnerability", a use-after-free dereference in http.sys patched by Microsoft in May 2021. As far as I know, it can only trigger the program to crash, please use it with cautio...
cve-2015-7547
PoC attack server for CVE-2015-7547 vulnerability in glibc DNS resolver To test on local machine with a vulnerable glibc version: user@localhost:/ echo 'nameserver 127.0.0.127' | sudo tee /etc/resolv.conf user@localhost:/ echo 'nameserver 127.0.0.127' | sudo tee -a /etc/resolv.conf user@localhost...
CVE-2023-3519
Exploit Repository Stack-Overflow on Citrix CVE-2023-3519 Video Demonstration PoC: https://github.com/Mohammaddvd/CVE-2023-3519/assets/108727157/97fde2d9-2110-40bb-ae08-19163927115c Disclaimer This code is intended solely for educational purposes and ethical use in understanding security...
freebsd-dirent-info-leak-bugs
How did I find the bugs? 1. Randomly decide to audit the filesystems in FreeBSD 2. Do some research and find that the default filesystem in use is a combination of FFS and UFS 3. Spend some time auditing ufscreate and find 0 bugs 4. Go here and look through the commit history for the UFS file...
CVE-poc-update
CVE-poc-update CVE-2023-46371 and CVE-2023-46527 update CVE-2023-46371: A new device is discovered containing the same vulnerability:CVE-2023-46371 vulnerability was discovered on TPWR886N 2.0.12 device.TP-Link device TL-WDR7660 2.0.30 and TL-WR886N 2.0.12 have a stack overflow vulnerability via...
CVE-2026-32743-PX4-Autopilot-MavlinkLogHandler-Stack-Buffer-Overflow-DoS-
CVE-2026-32743 - PX4 Autopilot MavlinkLogHandler Stack Buffer Overflow DoS -orange -blue π Description CVE-2026-32743 is a stackβbased buffer overflow in the MavlinkLogHandler of PX4 Autopilot versions β€1.17.0-rc2. The LogEntry.filepath buffer is only 60 bytes , but sscanf parses log directory...
sqlite-collate-depth
abraxaslabs.tech Β· github.com/abraxas Β· @abraxasnull Β· [email protected] Β· sqlite-collate-depth sqlite-collate-depth Class: Crash Reach: Local SQLite 3.53.4 b09c88c14082339b66c7b7158d609a771e64ca69, SOURCEID 2026-07-24 19:02:57 bf7c7f30031888f4e796e429ab3978879485813aaca6f641c7b33e4e09459bcc...
CVE-2026-34308
CVE-2026-34308: MySQL Server JSON component denial of service Official vendor bulletin: Oracle Critical Patch Update Advisory β April 2026. Summary from published CVE Vulnerability in Oracle MySQL Server component: Server: JSON. Supported affected versions: 8.0.0β8.0.45 , 8.4.0β8.4.8 , and...
DEBIAN-CVE-2026-57191
Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3, an unbounded sscanf in respjsippubsub when parsing the MWI NOTIFY Message-Account field may allow an unauthenticated attack...