sqlite: SQLite: Arbitrary code execution and crash via heap-based buffer overflow in FTS5

A flaw was found in SQLite, specifically within its FTS5 full-text search extension. Attackers can exploit a heap-based buffer overflow by providing a specially crafted database. This crafted database contains malicious metadata that triggers an integer underflow during FTS5 MATCH query processin...

Moderate: Red Hat Security Advisory: libgcrypt security update

An update for libgcrypt is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common...

Libgcrypt: Libgcrypt: Denial of Service and buffer overflow via crafted ECDH ciphertext

A flaw was found in Libgcrypt. A remote attacker could exploit this vulnerability by sending crafted Elliptic Curve Diffie-Hellman ECDH ciphertext to the gcrypkdecrypt function. This can lead to a heap-based buffer overflow, potentially causing a denial of service DoS condition...

CVE-2026-68768

A flaw was found in hashcat. A vulnerability exists where the software attempts to write more data than its allocated memory can hold, specifically in the function responsible for writing output files. This can happen when processing a specially crafted hash file containing an excessively long...

CVE-2026-68765

A flaw was found in hashcat. Attackers can exploit a heap buffer overflow vulnerability in the KeePass AESKDF/KDBX v4 module by providing an oversized ninth hash field token. The module processes input up to 600 hexadecimal characters into a fixed 256-byte buffer without proper length validation...

Moderate: Red Hat Security Advisory: libgcrypt security update

An update for libgcrypt is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common...

Libgcrypt: Libgcrypt: Denial of Service and buffer overflow via crafted ECDH ciphertext

A flaw was found in Libgcrypt. A remote attacker could exploit this vulnerability by sending crafted Elliptic Curve Diffie-Hellman ECDH ciphertext to the gcrypkdecrypt function. This can lead to a heap-based buffer overflow, potentially causing a denial of service DoS condition...

EUVD-2026-64846

RustDesk's Windows clipboard redirection copies a peer-supplied length into a fixed-size caller buffer without an upper bound check. When an OLE paste consumer such as explorer.exe calls IStream::Read with a buffer of cb bytes, CliprdrStreamRead in libs/clipboard/src/windows/wfcliprdr.c requests...

CVE-2026-76840

RustDesk (through 1.4.9 ) contains a heap buffer overflow in its Windows CLIPRDR clipboard redirection module (libs/clipboard/src/windows/wf_cliprdr.c). The peer-supplied cbRequested length from a CLIPRDR FileContentsResponse is copied via CopyMemory into the caller's fixed-size buffer without be...

CVE-2026-76840 RustDesk through 1.4.9 Heap Buffer Overflow via Unvalidated CLIPRDR FileContentsResponse Length

RustDesk's Windows clipboard redirection copies a peer-supplied length into a fixed-size caller buffer without an upper bound check. When an OLE paste consumer such as explorer.exe calls IStream::Read with a buffer of cb bytes, CliprdrStreamRead in libs/clipboard/src/windows/wfcliprdr.c requests...

CVE-2024-0039-Exploit

CVE-2024-0039-Exploit Описание Python-скрипт для использование уязвимости CVE-2024-0039: выполнения произвольного кода на уязвимых устройствах Android. ВНИМАНИЕ : Этот код предназначен только для образования и созидания, службе на стороне добра, тксзть! Использование Запустите скрипт с необходимы...

CVE-2026-42533

CVE-2026-42533 — nginx map/regex capture clobbering 追跡サイト CVE-2026-42533 のパッチ適用状況トラッカーです。これは、nginx の 2 パス式評価エンジンにおけるヒープバッファオーバーフローです。nginx は LEN パスで文字列式を測定し、PCRE キャプチャ状態を保存・復元せずに VALUE パスで書き込むため、正規表現 map を評価すると、同じ式内で以前に参照されたキャプチャが破壊され、2 つのパスの間でバッファサイズの計算が一致しなくなります。認証されていない攻撃者は、細工した HTTP...

CVE-2026-0006-openapv-poc

CVE-2026-0006: libopenapvAndroid APV 코덱의 힙 버퍼 오버플로우 Mobile Hacking Lab의 패치 분석 및 재현 CVSS 9.8 Critical | 실제 환경에서 활발히 악용됨 | 2026년 3월 패치됨 참고: 저희는 이 취약점을 발견하지 않았습니다. CVE-2026-0006을 발견하고 책임 있게 보고한 모든 공로는 원래 연구자들에게 있습니다. 이 저장소는 보안 커뮤니티가 관련 버그 클래스와 악용 기술을 이해하도록 돕기 위한 저희의 독자적인 패치 분석, 재현 및 교육용 자료 를 담고 있습니다...

CVE-2025-5548

FreeFloat FTP 분석 및 CVE-2025-5548 악용 Anderson Steven — 사이버보안 석사, 모듈 6취약점 개인 과제: 취약점 분석 및 악용 방법론 이 저장소를 만든 이유 저는 단순히 "작동하는 익스플로잇을 여기 있다"고 제출하고 싶지 않았습니다. 이 저장소는 메모리 손상 취약점에 직면했을 때 제가 실제로 작업하는 방식을 담고 있습니다: 무엇을 먼저 살피는지, 어떤 순서로 가설을 배제하는지, 각 단계에서 어떤 도구를 사용하는지, 그리고 그 이유가 무엇인지. CVE-2025-5548을 중심 축으로 사용한 이...

RLSA-2026:58571 Moderate: qemu-kvm security, bug fix, and enhancement update

Kernel-based Virtual Machine KVM is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm packages provide the user-space component for running virtual machines that use KVM. Security Fixes: qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling...

qemu-kvm security, bug fix, and enhancement update

An update is available for qemu-kvm. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Kernel-based Virtual Machine KVM is a full virtualization solution for Linu...

CVE-2026-72854

A flaw was found in msgpack-c. An integer overflow vulnerability exists in the msgpackunpackerexpandbuffer function. This flaw can lead to an undersized memory buffer being allocated, even though the system reports a successful reservation. If an attacker can influence the length provided to the...

sqlite: SQLite: Arbitrary code execution via crafted FTS5 full-text search data

A flaw was found in SQLite's FTS5 full-text search extension. This vulnerability involves memory corruption, specifically an out-of-bounds read and a heap buffer overflow, which can be triggered by supplying a crafted database with malformed FTS5 page data. When an FTS5 MATCH query is executed...

Important: Red Hat Security Advisory: sqlite security update

An update for sqlite is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring Syst...

sqlite: SQLite: Arbitrary code execution and crash via heap-based buffer overflow in FTS5

A flaw was found in SQLite, specifically within its FTS5 full-text search extension. Attackers can exploit a heap-based buffer overflow by providing a specially crafted database. This crafted database contains malicious metadata that triggers an integer underflow during FTS5 MATCH query processin...