CVE-2026-82782

Out-of-bounds write vulnerability exists in CONPROSYS nano Series. Receiving a specially crafted request created and sent by a remote attacker may cause a denial-of-service DoS condition...

CVE-2026-82782

An out-of-bounds write vulnerability in CONPROSYS nano Series (Contec) allows a remote attacker with low privileges to send a specially crafted request that triggers a denial-of-service condition. The CVSS 3.1 score is 4.3 (MEDIUM) and CVSS 4.0 is 5.3 (MEDIUM) , reflecting a network-based attack ...

EUVD-2026-77235

Out-of-bounds write vulnerability exists in CONPROSYS nano Series. Receiving a specially crafted request created and sent by a remote attacker may cause a denial-of-service DoS condition...

CVE-2026-82768

A path traversal vulnerability in SGA1000 (manufactured by Contec ) allows an attacker with FTP access to view and/or alter arbitrary files on the server, potentially leading to high confidentiality and integrity compromise with no availability impact . The vulnerability is scored CVSS 3.1: 8.1 (...

CVE-2025-63602

CVE-2025-63602 Divulgación de CVE-2025-63602, incluyendo un PoC para el uso de un controlador inseguro en Awesome Miner 11.2.4 que conduce a lectura/escritura arbitraria del kernel a MSRs, resultando en ejecución de código del kernel...

CVE-2026-36227

CVE-2026-36227: Easy Chat Server 3.1 UserName Path Traversal PoC Este repositorio contiene una prueba de concepto benigna para CVE-2026-36227, un problema de path traversal en el manejo del registro de usuarios de Easy Chat Server 3.1. Este repositorio es únicamente para investigación de segurida...

CVE-2026-43284

Dirty Frag: LPE universal en Linux Abstract Este documento explica la clase de vulnerabilidad Dirty Frag, descubierta y reportada por Hyunwoo Kim @v4bel. Al encadenar xfrm-ESP Page-Cache Write CVE-2026-43284 con RxRPC Page-Cache Write CVE-2026-43500, un atacante puede escalar a root en las...

CVE-2026-6815

CVE-2026-6815 PoC/Exploit: Casdoor 3.54.1 Path Traversal y Escritura Arbitraria de Archivos Autenticado Este repositorio contiene una prueba de concepto PoC para el exploit CVE-2026-6815, una vulnerabilidad de escritura arbitraria de archivos y path traversal en Casdoor. La vulnerabilidad ha sido...

CVE-2023-22632

PRTG Network Monitor before 23.1.82 allows remote attackers to write to files via the FTP Server Count Sensor...

CVE-2023-22631

PRTG Network Monitor before 23.1.82 allows remote attackers to write to files via the HTTP XML/REST Sensor...

Important: Red Hat Security Advisory: gstreamer1-plugins-bad-free security update

An update for gstreamer1-plugins-bad-free is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Important. A Common...

gstreamer: gstreamer1-plugins-bad-free: gstreamer: heap out-of-bounds write in adpcmdec IMA/DVI ADPCM decoder

A heap out-of-bounds write vulnerability was found in the GStreamer gst-plugins-bad adpcmdec element when decoding IMA/DVI ADPCM audio. Insufficient validation of the per-block sample count for multi-channel streams allows a crafted WAV file to cause writes beyond the allocated output buffer. Thi...

CVE-2026-33960

An issue was discovered in Samsung Mobile Processor and Wearable Processor Exynos 1330, 1380, 1480, 1580, 1680, W920, W930, and W1000. . A malformed ioctl command to the Wi-Fi interface device can lead to improper buffer size allocation, resulting in an out-of-bounds write and causing a denial of...

CVE-2026-33956

An issue was discovered in camera in Samsung Mobile Processor Exynos 1330, 1380, 1480, 2400, 1580, and 2500. Sending a malformed message to the testmsg sysfs entry causes an out-of-bounds write, leading to denial of service...

CVE-2026-23791

An issue was discovered in DPU in Samsung Mobile Processor Exynos 1280, 2200, 1380, 1480, 2400, 1580, 2500, 1680, and 2600. An out-of-bounds write vulnerability in the Exynos DPU driver due to missing input length validation in color mode LUT parsing leads to kernel memory corruption and potentia...

S-V-Project-Implementation-of-CVE-2015-3256

CVE-2015-3456 VENOM: PoC de caída de QEMU y análisis Este repositorio contiene una prueba de concepto reproducible de caída/DoS para CVE-2015-3456 "VENOM" usando una versión vulnerable de QEMU v2.3.0. El proyecto demuestra: Escrituras controladas por el invitado en el controlador virtual de...

westone-CVE-2020-17519-scanner

westone-CVE-2020-17519-scanner Apache Flink 1.11.0、1.11.1、1.11.2 Los hackers pueden leer/escribir archivos remotos a través de la API REST Instalación y uso git clone https://github.com/Osyanina/westone-CVE-2020-17519-scanner.git cd westone-CVE-2020-17519-scanner cmd CVE-2020-17519.exe...

ghostlock-s25fe

GhostLock CVE-2026-43499 for the Galaxy S26 CVE-2026-43499 ported to the Samsung Galaxy S26 series — Android 16 / GKI 6.12. One binary, three kernel lines, dynamic parameter matching at runtime: theoretically covers the whole S26 series without per-build compilation. Most GhostLock porting effort...

CVE-2021-41160

CVE-2021-41160 FreeRDP es una implementación libre del Protocolo de Escritorio Remoto RDP, publicada bajo la licencia Apache. En las versiones afectadas, un servidor malicioso podría provocar escrituras fuera de los límites en un cliente conectado. Las conexiones que utilizan GDI o SurfaceCommand...

PT-2026-91011

An issue was discovered in camera in Samsung Mobile Processor Exynos 1330, 1380, 1480, 2400, 1580, and 2500. Sending a malformed message to the test msg sysfs entry causes an out-of-bounds write, leading to denial of service...