CVE-2026-95867

IBM SevOne Network Performance Management 7.0.0 through 8.2.2 could allow a local attacker to execute arbitrary code due to a buffer overflow...

CVE-2026-95867 Multiple vulnerabilities previously addressed in IBM SevOne Network Performance Management

IBM SevOne Network Performance Management 7.0.0 through 8.2.2 could allow a local attacker to execute arbitrary code due to a buffer overflow...

EUVD-2026-119746

IBM SevOne Network Performance Management 7.0.0 through 8.2.2 could allow a local attacker to execute arbitrary code due to a buffer overflow...

CVE-2026-95867

IBM SevOne Network Performance Management versions 7.0.0 through 8.2.2 are vulnerable to a stack-based buffer overflow (CWE-121). This vulnerability could allow a local attacker to execute arbitrary code . The impact of successful exploitation includes high levels of confidentiality, integrity, a...

Windows kernel Code Execution

The vulnerability of the Windows operating system’s kernel is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code or enhance their privileges...

Bestechic BES2300 Bluetooth Audio SoC Heap Buffer Overflow DoS

The vulnerability of the avrcpindicateprocessdataind function in the microprogramming-based audio chipset of Bestechnic BES2300 Bluetooth Audio SoC is related to buffer overflow attacks. Exploiting this vulnerability could allow an attacker to cause a service failure by sending a specially crafte...

NTFS Privilege Escalation

The vulnerability of the NTFS file system in Windows operating systems relates to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow a remote attacker to increase their privileges...

CVE-2026-123614

imgproxy from 4.0.0 before 4.0.16 contains an integer overflow in the ICO loader that allows remote attackers to trigger a heap buffer overflow via a crafted datasize value. Attackers can submit a crafted ICO image whose datasize wraps the allocation in vips/icoload.c, corrupting heap memory to...

XiongMai uc-httpd 1.0.0 - Buffer Overflow

Buffer overflow in XiongMai uc-httpd 1.0.0 has unspecified impact and attack vectors, a different vulnerability than CVE-2017-16725. id: CVE-2018-10088 info: name: XiongMai uc-httpd 1.0.0 - Buffer Overflow author: 0xAkoko severity: critical description: | Buffer overflow in XiongMai uc-httpd 1.0....

CVE-2026-123614

The imgproxy software (versions 4.0.0 to 4.0.16) is vulnerable to a heap buffer overflow caused by an integer overflow within the ICO loader component. A remote attacker can trigger this vulnerability by submitting a specially crafted ICO image with a manipulated data_size value. This overflow oc...

CVE-2026-123614 imgproxy 4.0.0 before 4.0.16 Heap Buffer Overflow via ICO Loader Integer Overflow

imgproxy from 4.0.0 before 4.0.16 contains an integer overflow in the ICO loader that allows remote attackers to trigger a heap buffer overflow via a crafted datasize value. Attackers can submit a crafted ICO image whose datasize wraps the allocation in vips/icoload.c, corrupting heap memory to...

EUVD-2026-119373

imgproxy from 4.0.0 before 4.0.16 contains an integer overflow in the ICO loader that allows remote attackers to trigger a heap buffer overflow via a crafted datasize value. Attackers can submit a crafted ICO image whose datasize wraps the allocation in vips/icoload.c, corrupting heap memory to...

CVE-2026-123614: imgproxy: imgproxy from 4.0.0 before 4.0.16 contains an integer overflow in the ICO loader that allows remote attackers to…

imgproxy from 4.0.0 before 4.0.16 contains an integer overflow in the ICO loader that allows remote attackers to trigger a heap buffer overflow via a crafted datasize value. Attackers can submit a crafted ICO image whose datasize wraps the allocation in vips/icoload.c, corrupting heap memory to...

PT-2026-139895

imgproxy from 4.0.0 before 4.0.16 contains an integer overflow in the ICO loader that allows remote attackers to trigger a heap buffer overflow via a crafted data size value. Attackers can submit a crafted ICO image whose data size wraps the allocation in vips/icoload.c, corrupting heap memory to...

PT-2026-140155

IBM SevOne Network Performance Management 7.0.0 through 8.2.2 could allow a local attacker to execute arbitrary code due to a buffer overflow...

CVE-2026-11499

🚨 CVE-2026-11499 Stack-Based Buffer Overflow in Tenda HG7 / HG9 / HG10 Routers 📖 Overview CVE-2026-11499 is a reported stack-based buffer overflow vulnerability affecting several Tenda router models , including: HG7 HG9 HG10 Successful exploitation may allow an attacker to trigger a crash, denial...

CVE-2026-124060

A buffer overflow vulnerability exists in the TOTOLINK CA300-PoE (firmware version 6.2c.884) within the UploadCustomModule function of the /cgi-bin/cstecgi.cgi file. The vulnerability is triggered by manipulating the File argument, which can be exploited remotely. This flaw allows for a potential...

EUVD-2026-119328

A vulnerability was detected in TOTOLINK CA300-PoE 6.2c.884. Affected by this issue is the function UploadCustomModule of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument File results in buffer overflow. The attack may be launched remotely. The exploit is now public and may be used...

Pwn ARM NFC

Challenge ARM buffer overflow via NFC tag This project is an open-source and funny to make low-level challenge. Feel free to improve it or use it in your own projects. Each file is distributed "as is" in the hope that it will be useful, but without any warranty expressed or implied. File tree...

nginx-rift-private-lab

NGINX Rift RCE Proof of concept for CVE-2026-42945 , a critical heap buffer overflow in NGINX's ngxhttprewritemodule introduced in 2008. The bug enables unauthenticated remote code execution against servers using rewrite and set directives. This fork extends the original PoC with an ASLR-bypass...