Important: Red Hat Security Advisory: flute, libbase, libfonts, libformula, liblayout, libloader, libreoffice, librepository, libserializer, pentaho-libxml, pentaho-reporting-flow-engine, and sac security, bug fix, and enhancement update

An update for multiple packages is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

libreoffice: heap buffer overflow in PDF import stream handling

A flaw was found in LibreOffice. When a user imports a specially crafted PDF document with LibreOffice Draw, a heap-based buffer overflow can occur due to improper validation of the stream length. This issue can cause memory corruption, resulting in an application crash...

cve-2025-29384

CVE-2025-29384 Proof-of-Concept Exploit Overview This repository contains an advanced proof-of-concept PoC exploit for CVE-2025-29384 , a critical stack-based buffer overflow vulnerability discovered in the Tenda AC9 router running firmware version V15.03.05.14multi. This vulnerability allows...

CVE-2026-9256-Poc

nginx ngxhttprewritemodule Heap Buffer Overflow Description nginx Plus and nginx Open Source ngxhttprewritemodule contains a heap buffer overflow vulnerability. When a rewrite directive uses a regex with multiple overlapping PCRE capture groups e.g. ^/.$ and a replacement referencing multiple...

thm-cybersec-portfolio

TryHackMe Notes — Cybersecurity Portfolio Personal notes and summaries of completed TryHackMe rooms. Built as a study reference and portfolio for IT security roles. Completed Rooms | Room| Topic ---|---|--- 01| Linux Privilege Escalation| Linux privesc techniques 02| Sudo Buffer Overflow|...

CVE-2026-38426

CVE-2026-38426: strcpy Stack Buffer Overflow in Tasmota fetchjpg boundary40 CVE: CVE-2026-38426 Severity: Critical CVSS 9.8 Product: Arendst Tasmota Affected Version: = 15.3.0.3 File: tasmota/tasmotaxdrvdriver/xdrv10scripter.ino Function: fetchjpg — case 0 initial connection Author: Saidakbarxon...

CVE-2025-9961

CVE-2025-9961 TP-Link AX10/AX1500 CWMP Buffer Overflow RCE Overview Stack-based buffer overflow in CWMP TR-069 leading to remote code execution. Field| Value ---|--- Product| TP-Link AX10, AX1500 Affected| AX10 B"Malicious ACS" B -- C"SetParameterValues" C -- D"Stack Overflow" D -- E"Overwrite PC...

CVE20265172poc

CVE20265172poc CVE-2026-5172: buffer overflow in extractaddresses on crafted resource record PoC Topology read here https://medium.com/@yanyuyingshu/reproduction-journal-dnsmasq-ecs-validation-and-buffer-overflow-flaws-e0fe0f66f60c Steps​ 1. vi /etc/dnsmasq.conf​ port=5353​...

CVE-2026-48095

CVE-2026-48095 7-Zip is a file archiver with a high compression ratio. Versions 26.00 and prior contain a heap buffer overflow vulnerability caused by an under-allocation in the NTFS compressed stream buffer GetCuSize shift UB, potentially allowing attackers to cause arbitrary code execution or...

CVE-2026-12485

🚨 CVE-2026-12485 - Critical Unauthenticated Remote Code Execution RCE GeoVision GV-I/O Box 4E – Firmware v2.09 Disclosure Date: June 23, 2026 CWE: CWE-121 – Stack-Based Buffer Overflow Attack Vector: Network Unauthenticated An unauthenticated stack-based buffer overflow vulnerability in the...

CVE-2025-21333

CVE-2025-21333 Hyper-V NT Kernel Integration VSP vkrnlintvsp.sys Paged Pool heap overflow → Local Privilege Escalation LPE. This directory contains lab PoC source code based on MrAle98/CVE-2025-21333-POC, including a local patch. 1. Vulnerability Summary Item| Content ---|--- CVE| CVE-2025-21333...

CVE20264893poc

Topology: https://medium.com/@yanyuyingshu/reproduction-journal-dnsmasq-ecs-validation-and-buffer-overflow-flaws-e0fe0f66f60c Steps​ 1.vi /etc/dnsmasq.conf​ port=5353​ listen-address=xxx.xxx.xxx.x bind-interfaces​ no-resolv​ no-hosts​ no-poll​ cache-size=1000​ log-queries​ log-facility=-​...

CVE-2025-29338

CVE-2025-29338 — Security Advisory Buffer Overflow in NXP moal.ko Wi-Fi Kernel Driver woalsetupmoduleparam / parsecfggetline Field| Value ---|--- CVE ID| CVE-2025-29338 Severity| High CVSS v3.1 Score| 7.8 CVSS v3.1 Vector| CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H Vulnerability Type| Stack-Bas...

CVE-2026-42945

🛡️ CVE-2026-42945 - NGINX Rift Critical Heap-Based Buffer Overflow in NGINX 📌 Overview CVE-2026-42945 also known as NGINX Rift is a critical security vulnerability in the ngxhttprewritemodule of NGINX. Type : Heap-based Buffer Overflow CWE-122 Discovered : May 2026 Existed For : 18 years...

CVE-2025-46819

CVE-2025-46819 – Redis Lua Long-String Delimiter Out-of-Bounds Read Malformed long-string delimiter causing Lua lexer OOBs read on Redis 8.2.1. Overview Lua's long-string parser in Redis 8.2.1 mishandles malformed =... sequences, returning sentinel values that lead to buffer underflows or excessi...

nginxrift-CVE-2026-42945

NGINX Rift RCE Exploit CVE-2026-42945 from @DepthFirstDisclosures A professional Proof-of-Concept PoC tool for researching and identifying the NGINX Rift vulnerability, a critical heap-based buffer overflow in the ngxhttprewritemodule. Vulnerability Overview CVE ID: CVE-2026-42945 Alias: NGINX Ri...

CVE-2025-65018-Heap-buffer-overflow-in-libpng-ps4-ps5-

Poc for CVE-2025-65018-Heap-buffer-overflow-in-libpng-ps4-ps5- Usage: 1-press share button and make screenshot 2-with ftp go to path:/user/avcontents/photo/NPXS20001/NPXS20001/XXX/ you will find screenshot that you make. 3-copy it to pc and run it with makepng.py it will output poc.png 4-rename i...

CVE-2015-8522.RCE

CVE-2015-8522 The Tivoli FastBack Server 6.1.4 application is vulnerable to a stack-based buffer overflow allowing threat-actors to gain Arbitrary Code Execution ACE via a remote TCP-connection. The PoC provided in this repository leverages this vulnerability to both execute CMD.exe on the target...

CVE-2026-76071

CVE-2026-76071: Unauthenticated Pre-Auth Stack Buffer Overflow via sscanf %^, in skkset.cgi ipFilterList Handler in Netis NC63 Researcher: Özcan Ersan @ozcanpng Disclosure status CVE: CVE-2026-76071 Vendor: Netis Systems Co., Ltd. Product: Netis NC63 AC1200 Wireless Dual Band Gigabit MU-MIMO Rout...

CVE-2026-27654

CVE-2026-27654 NGINX ngxhttpdavmodule Heap Buffer Overflow via sizet Underflow Remote DoS / Potential RCE Description ngxhttpdavcopymovehandler in src/http/modules/ngxhttpdavmodule.c computes the destination URI length by subtracting the location prefix length from the Destination header's URI pa...