4280 matches found
heartbleed-vulnerability-exploitation
heartbleed-vulnerability-exploitation Description hands on investigation of the Heartbleed vulnerability CVE-2014-0160. Summary this lab documents a hands-on investigation of the Heartbleed vulnerability, a critical flaw in OpenSSL's implementation of the TLS heartbeat extension. the goal was to...
CVE-2003-0264-SLmail-5.5
CVE-2003-0264 - Seattle Lab Mail 5.5 POP3 Buffer Overflow References https://vulners.com/cve/CVE-2003-0264 Vulnerability SLMail has no bounds checking when submitting a POP3 password. As a result, you can execute arbitrary code by submitting a long, malformed POP3 PASS to the SLMail server...
CVE-2025-14847-MongoDB
CVE-2025-14847-MongoDB Memory Disclosure Research Tool Overview This repository contains an educational research tool designed to demonstrate the memory safety concepts behind CVE-2025-14847, a critical vulnerability discovered in MongoDB's BSON decompression implementation. The tool simulates ho...
CVE-2025-53367-POC
djvulibremmrexploit This project provides a minimal C++ implementation that triggers a known heap out-of-bounds write vulnerability in DjVuLibre. The code does not weaponize the bug; it only reproduces the faulty execution path so the issue can be inspected and understood. The vulnerability...
CVE-2024-4323
🇮🇱 BringThemHome NeverAgainIsNow 🇮🇱 We demand the safe return of all citizens who have been taken hostage by the terrorist group Hamas. We will not rest until every hostage is released and returns home safely. You can help bring them back home.https://stories.bringthemhomenow.net/ CVE-2024-4323...
CVE-2026-69005
Integer overflow in NPU driver parameter processing due to insufficient bounds checking...
CVE-2026-69005
The NPU driver is affected by an integer overflow during parameter processing. The root cause is identified as insufficient bounds checking during the processing of parameters. The provided documents do not specify the exact software version, affected hardware model, specific impact details, or a...
EUVD-2026-117290
Integer overflow in NPU driver parameter processing due to insufficient bounds checking...
CVE-2026-69005
Integer overflow in NPU driver parameter processing due to insufficient bounds checking...
PT-2026-137367
Integer overflow in NPU driver parameter processing due to insufficient bounds checking...
EUVD-2026-115705
Insufficient bounds checking in the Digital I/O function may allow a remote attacker with high privileges to cause a denial of service...
Astra Linux – vulnerability in linux-6.12, linux-6.1
In the Linux kernel, the following vulnerability has been resolved: net: qrtr: ns: Limit the maximum server registration per node Current code does not perform any bounds checking on the number of servers added per node. A malicious client can flood NEWSERVER messages and exhaust memory. This iss...
CLEANSTART-2024-SW11491 out-of-bounds read was addressed with improved bounds checking
Security vulnerability affects the webkit2gtk package. An out-of-bounds read was addressed with improved bounds checking...
CLEANSTART-2024-TT88544 Lack of correct bounds checking in Skia in Google Chrome prior to 73
Security vulnerability affects the firefox-esr package. Lack of correct bounds checking in Skia in Google Chrome prior to 73...
CVE-2026-104016
A flaw was found in jackson-dataformat-protobuf. This vulnerability allows a remote attacker to cause a Denial of Service DoS by sending specially crafted Protocol Buffers data. Due to an integer overflow during bounds checking for length-prefixed string and byte fields, the parser bypasses...
CLSA-2026-1776878817 squid: Fix of 13 CVEs
CVE-2018-1000027: fix NULL pointer dereference in clientFollowXForwardedForCheck for transactions without a client connection - CVE-2018-19131: fix XSS via X.509 certificate fields rendered unescaped in SSL error pages - CVE-2019-12520: prevent cache poisoning by suppressing URL userinfo from...
CVE-2020-37289
Vyper before 0.3.1 lacks a uint8 type, allowing interface return values declared as uint8, such as ERC20.decimals, to be stored in uint256 variables without bounds checking. Malicious contracts can return values greater than 255 to manipulate or bypass contract logic that relies on these values...
CVE-2020-37289
Vyper before 0.3.1 lacks a uint8 type, allowing interface return values declared as uint8, such as ERC20.decimals, to be stored in uint256 variables without bounds checking. Malicious contracts can return values greater than 255 to manipulate or bypass contract logic that relies on these values...
CVE-2020-37289
Vyper versions prior to 0.3.1 are vulnerable to improper input validation because the language lacks a native uint8 type. This allows interface return values explicitly declared as uint8 (e.g., ERC20.decimals() ) to be stored in uint256 variables without any bounds checking. Consequently, malicio...
CVE-2020-37289 Vyper before 0.3.1 Improper Input Validation of uint8 Interface Return Values
Vyper before 0.3.1 lacks a uint8 type, allowing interface return values declared as uint8, such as ERC20.decimals, to be stored in uint256 variables without bounds checking. Malicious contracts can return values greater than 255 to manipulate or bypass contract logic that relies on these values...