CVE-2025-14871

CVE-2025-14871 affects GitLab CE/EE versions 18.4.6 through 19.1.7, 19.2 through 19.2.5, and 19.3 through 19.3.1. The root cause is improper resource allocation limits in the GraphQL complexity calculation logic , which under certain conditions allows an unauthenticated attacker to trigger a deni...

CVE-2026-1168

GitLab CE/EE is affected by a denial of service vulnerability in the GraphQL complexity calculation logic , where improper resource allocation limits allow an unauthenticated attacker over the network to exhaust server resources. The issue affects all versions from 18.4.6 before 19.1.8 , 19.2 bef...

GO-RPCBOMB

Description: CVE-2017-8779 rpcbind through 0.2.4, LIBTIRPC through 1.0.1 and 1.0.2-rc through 1.0.2-rc3, and NTIRPC through 1.4.3 do not consider the maximum RPC data size during memory allocation for XDR strings, which allows remote attackers to cause a denial of service memory consumption with ...

BlobRunner

BlobRunner BlobRunner es una herramienta simple para depurar rápidamente shellcode extraído durante el análisis de malware. BlobRunner asigna memoria para el archivo objetivo y salta a la base o desplazamiento de la memoria asignada. Esto permite a un analista depurar rápidamente artefactos...

EUVD-2026-80049

A flaw was found in the file-psd plugin in GIMP. When generating a thumbnail preview for a specially crafted PSD Photoshop Document image file, an integer overflow occurs during the multiplication of values from an embedded JPEG header. This leads to an undersized heap allocation, resulting in a...

gate0

gate0 A small, auditable, terminating, deterministic micro-policy engine. Why Gate0? I built Gate0 because I was tired of debugging RegEx-based policies in production. I wanted something that was boring, bounded, and impossible to crash. If you want a flexible, general-purpose policy engine, you...

CVE-2026-92248

A flaw was found in the file-psd plugin in GIMP. When generating a thumbnail preview for a specially crafted PSD Photoshop Document image file, an integer overflow occurs during the multiplication of values from an embedded JPEG header. This leads to an undersized heap allocation, resulting in a...

CVE-2026-32941

A framework-wide vulnerability in Sliver C2 allows for an unauthenticated, remote Denial of Service by triggering Uncontrolled Memory Allocation CWE-789 / CWE-400, leading to a process-wide Out-of-Memory OOM crash. References: Tenable Reproduction Steps: 1. Extract Credentials: Obtain the mTLS...

memoro

Memoro Memoroは非常に詳細なヒーププロファイラです。 Memoroは、プログラムがいつどこでヒープ割り当てを行ったかを示すだけでなく、プログラムがそのメモリを実際に どのように 使用したのかも表示します。 Memoroは、メモリへの読み取りや書き込み、それらがいつ発生したかなど、ヒープへのアクセスに関する詳細情報を収集し、プログラムがヒープメモリをどの程度効率的に使用しているかを把握する手助けをします。 Memoroには、このすべての情報をスコアとインジケータにまとめ、問題領域を特定するのに役立つビジュアライザアプリケーションが含まれています。...

EAC-Kernel-Packet-Fucker

EAC-Kernel-Packet-Fucker Not my code. Only for saving https://www.unknowncheats.me/forum/anti-cheat-bypass/503052-easy-anti-cheat-kernel-packet-fucker.html This is the Easy Anti-Cheat Kernel Packet Fucker for short, EACKPFucker. What is this? Basically, packets via their kernel mode driver are no...

CVE-2026-91962 FreeRDP before 3.31.0 Integer Overflow via audin Apple backends

FreeRDP before 3.31.0 contains an integer overflow in the audin Apple backends when processing FramesPerPacket values from MSGSNDINOPEN messages. Attackers can supply crafted FramesPerPacket values that cause AudioQueueAllocateBuffer size computation to wrap, resulting in undersized buffer...

EUVD-2026-78638

FreeRDP before 3.31.0 contains an integer overflow in the audin Apple backends when processing FramesPerPacket values from MSGSNDINOPEN messages. Attackers can supply crafted FramesPerPacket values that cause AudioQueueAllocateBuffer size computation to wrap, resulting in undersized buffer...

CVE-2026-53360-POC

CVE-2026-53360: KVM SEV-SNP PSC heap out-of-bounds Proof of concept for a heap out-of-bounds read and write in KVM's SEV-SNP Page State Change PSC handling. A malicious SEV-SNP guest makes the host kernel walk a PSC entry array off the end of its slab allocation. That leaks the layout of...

libheif-cve-2026-50142

CVE-2026-50142 — libheif Unbounded heap allocation in HEIF sequence parser stsz fixed-size mode Severity: High CVSS 7.5 Advisory: GHSA-jvmp-j3cw-84mh Fixed: commit a6caa38 by @farindk Time to fix: 1 hour Summary A 1,477-byte crafted HEIF file triggers 7 GB unchecked heap allocation in Chunk::Chun...

apachedos

This tool uses CVE-2016-8740 to crash servers running Apache HTTPD 2.4.17 - 2.4.23 that support HTTP2. It crashes these servers by forcing them to allocate insanely large amounts of RAM, making the computer unuasable. It can be downloaded here you will need to run it from the command line Usage:...

CVE-2018-19320-LPE

CVE-2018-19320 LPE Exploit Description Local Privilege Escalation Exploit of CVE-2018-19320. The exploit uses the exposed functions in gdrv.sys that allow a low-level user to allocate and write data to memory for escalating the privileges to SYSTEM. ScreenShot Tested on: Windows 10 x64 21H1 OS...

unicorn-bios

unicorn-bios About Basic BIOS emulator/debugger for Unicorn Engine. Written to debug the XEOS Operating System boot sequence. Usage: root@kitploit: Usage: unicorn-bios OPTIONS BOOTIMG Options: --help / -h: Displays help. --memory / -m: The amount of memory to allocate for the virtual machine in...

CVE-2026-48095

CVE-2026-48095 7-Zip 是一款高压缩比的文件归档工具。26.00 及更早版本存在一个由 NTFS 压缩流缓冲区分配不足（GetCuSize 移位未定义行为）导致的堆缓冲区溢出漏洞，可能允许攻击者执行任意代码或导致应用程序崩溃。 NTFS 处理器中的 CInStream::GetCuSize 将压缩单元缓冲区大小计算为 UInt321 = 28 且 CompressionUnit == 4，则会使得指数变为 32，这属于未定义行为，在 x86/x64 上会崩溃，导致 inBuf 被分配为 1 字节。随后 ReadStreamFALSE 会以 64 KB 的迭代次数将高达...

SUSE SLES12: tomcat / tomcat-admin-webapps / tomcat-docs-webapp / etc (SUSE-SU-2026:4126-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4126-1 advisory. - CVE-2026-65182: Apache Tomcat: Bypass longest prefix security constraint bsc1276893. - CVE-2026-65183: Apache Tomcat: TOCTOU when...

CVE-2026-53716

Envoy Gateway (open-source application gateway managing Envoy Proxy) has an unbounded gzip decompression vulnerability in getFileFromGZ within internal/wasm/httpfetcher.go. The function calls io.ReadAll on a gzip.Reader without limiting the decompressed output size. When a tenant-controlled Envoy...