261639 matches found
CVE-2026-70653 libvips: Possible heap-based buffer read overflow when decoding a well-crafted RLE Radiance image
libvips is a fast image processing library with low memory needs. Prior to version 8.18.3, the old-style Radiance RLE decoder in libvips/foreign/radiance.c can process a repeat marker at the beginning of a scanline in scanlinereadold and read q-1 before any prior pixel exists. A crafted Radiance...
CVE-2026-69242 libvips: Integer overflow leading to heap buffer overflow leading to possible attacker-controlled mmap-resident write
libvips is a fast image processing library with low memory needs. Prior to version 8.18.3, a crafted many-band TIFF processed through VipsForeignLoadTiff can evade scanline validation in libvips/iofuncs/image.c and cause an integer overflow in vipsimagesanity. The resulting buffer-region...
CVE-2026-69242 libvips: Integer overflow leading to heap buffer overflow leading to possible attacker-controlled mmap-resident write
libvips is a fast image processing library with low memory needs. Prior to version 8.18.3, a crafted many-band TIFF processed through VipsForeignLoadTiff can evade scanline validation in libvips/iofuncs/image.c and cause an integer overflow in vipsimagesanity. The resulting buffer-region...
CVE-2026-69242
libvips versions prior to 8.18.3 are affected by an integer overflow in vips_image_sanity within libvips/iofuncs/image.c. A crafted many-band TIFF processed through VipsForeignLoadTiff evades scanline validation, causing the overflow. The resulting buffer-region calculation can access attacker-co...
CVE-2026-61711 vulnerabilities
Vulnerabilities for packages: podman, scorecard, guac, kaniko, conftest, kubescape...
CVE-2026-76022
Buffer overflow in Network in Google Chrome prior to 151.0.7922.173 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-76022
A buffer overflow in the Network component of Google Chrome prior to 151.0.7922.173 allows a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. The vulnerability was reported by 0xAlessandro on 2026-08-07 and is rated High severity by Chromium (CVSS 8.8). The f...
CVE-2026-76022
Buffer overflow in Network in Google Chrome prior to 151.0.7922.173 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...
EUVD-2026-63599
Buffer overflow in Network in Google Chrome prior to 151.0.7922.173 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-76022
Buffer overflow in Network in Google Chrome prior to 151.0.7922.173 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...
exploit-foxit-4.1.1-title-bof
В этом репозитории нет README...
Learning-History-of-CFF-bug-in-iphone
iPhone における CFF バグの学習履歴 CFFフォントに飛び込み、偶然にもあるjailbreakからCFFパース処理におけるbofについて学ぶ。ただの楽しみだ。 それで……CFFって一体何だ？ 私の知識では、これはファイルフォーマットの一種だ。だが、Wikipediaが何と言っているか見てみよう：「CFFは、FontSetとして知られる単一のユニットに複数のフォントをまとめて保存するためのコンテナとして機能する。」https://docs.fileformat.com/font/cff/ つまり、基本的にはフォントをまとめて保存できる。いいだろう。で、次はどうする？...
MicroC-u-os2-vuln-code-extracted-from-
MicroC-u-os2-vuln-code-extracted-from- Атака переполнения буфера и её предотвращение для системы на базе soft-processor FPGA — 7-я Международная конференция по инновациям в электронике и коммуникационной технике ICIECE'18...
Remote-buffer-overflow-over-wifi_stack-in-wpa_supplicant-binary-in-android-11-platform-samsung-a20e
Remote-buffer-overflow-over-wifistack-in-wpasupplicant-binary-in-android-11-platform-samsung-a20e Удалённое переполнение буфера через wifistack в бинарном файле wpasupplicant в Android 11, платформа: Samsung A20e, стандартные настройки — работает из коробки...
GHSA-9X89-V382-MJH7 vulnerabilities
Vulnerabilities for packages: openssl, libcrypto3-2.34...
LogoFail-PoC
🇮🇱 BringThemHome NeverAgainIsNow 🇮🇱 私たちは、テロ組織ハマスによって人質に取られたすべての市民の安全な帰還を要求します。すべての人質が解放され、無事に帰還するまで、私たちは休みません。あなたも彼らを家に連れ戻すのを助けることができます。https://stories.bringthemhomenow.net/ BIOSイメージパーサーエクスプロイトツール 💻 このツールは、BIOSイメージパーサーのバッファオーバーフロー脆弱性を悪用するデモです。教育目的のみを意図しています。 概要 ℹ️...
sweyntooth_bluetooth_low_energy_attacks
SweynTooth — выпуская хаос в Bluetooth Low Energy Этот репозиторий является частью результатов исследованияASSET Research Group. SweynTooth охватывает семейство из 18 уязвимостей в различных наборах средств разработки SDK Bluetooth Low Energy BLE от шести крупных производителей систем-на-кристалл...
CVE-2026-77148
A vulnerability was found in Comfast CF-N1-S 2.6.0.1. This impacts the function sub44B50C of the file /cgi-bin/mbox-config?method=SET§ion=ptestchannel of the component Web Management. The manipulation results in stack-based buffer overflow. The attack can be launched remotely. The exploit has...
DEBIAN-CVE-2026-72854
msgpackunpackerexpandbuffer in src/unpack.c, reached through the public msgpackunpackerreservebuffer API, computes its new buffer size using an unchecked sizet addition of the requested size and the amount already used. The doubling loop guards its own multiplication against overflow, but the...
CVE-2026-72854
msgpackunpackerexpandbuffer in src/unpack.c, reached through the public msgpackunpackerreservebuffer API, computes its new buffer size using an unchecked sizet addition of the requested size and the amount already used. The doubling loop guards its own multiplication against overflow, but the...