261705 matches found
sqlite: SQLite: Arbitrary code execution and crash via heap-based buffer overflow in FTS5
A flaw was found in SQLite, specifically within its FTS5 full-text search extension. Attackers can exploit a heap-based buffer overflow by providing a specially crafted database. This crafted database contains malicious metadata that triggers an integer underflow during FTS5 MATCH query processin...
Important: Red Hat Security Advisory: sqlite security update
An update for sqlite is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...
sqlite: SQLite: Arbitrary code execution via crafted FTS5 full-text search data
A flaw was found in SQLite's FTS5 full-text search extension. This vulnerability involves memory corruption, specifically an out-of-bounds read and a heap buffer overflow, which can be triggered by supplying a crafted database with malformed FTS5 page data. When an FTS5 MATCH query is executed...
EUVD-2026-64922
Netis NC63 firmware through V3.0.0.3327 contains a stack-based buffer overflow vulnerability that allows unauthenticated remote attackers to overwrite saved stack state by supplying an oversized destHost parameter to the ipFilterList=mod action in netis.cgi. Attackers can exploit widthless sscanf...
CVE-2026-76071
Netis NC63 (AC1200 Wireless Dual Band Gigabit MU-MIMO Router) firmware through V3.0.0.3327 contains a pre-authentication stack-based buffer overflow in /bin/netis.cgi. The destHost parameter in the ipFilterList=mod action uses widthless %[^,] sscanf scansets that copy unbounded input into fixed 1...
CVE-2026-76070
Netis NC63 Wireless AC1200 router firmware through V3.0.0.3327 contains a pre-authentication stack-based buffer overflow in the login handler /bin/netis.cgi. The custom Base64 decoder writes decoded password bytes into a fixed 64-byte stack buffer without capacity checks, allowing an unauthentica...
EUVD-2026-64921
Netis NC63 firmware through V3.0.0.3327 contains a stack-based buffer overflow vulnerability that allows unauthenticated remote attackers to overwrite saved stack state by submitting an oversized Base64-encoded password to the login handler in /bin/netis.cgi. Attackers can exploit the custom Base...
CVE-2026-76070 Netis NC63 V3.0.0.3327 Stack Buffer Overflow via Login Password Parameter
Netis NC63 firmware through V3.0.0.3327 contains a stack-based buffer overflow vulnerability that allows unauthenticated remote attackers to overwrite saved stack state by submitting an oversized Base64-encoded password to the login handler in /bin/netis.cgi. Attackers can exploit the custom Base...
Important: Red Hat Security Advisory: gstreamer1-plugins-base security update
An update for gstreamer1-plugins-base is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
gstreamer: GStreamer: Arbitrary code execution via OGG file parsing buffer overflow
A flaw was found in GStreamer. This vulnerability, a stack-based buffer overflow, occurs during the parsing of OGG files due to improper validation of user-supplied data length. A remote attacker could exploit this by tricking a user into visiting a malicious page or opening a malicious file,...
IIS_6.0_WebDAV_Ruby
IIS6.0WebDAVRuby IIS 6.0 버퍼 오버플로우를 위한 Ruby 익스플로잇 CVE-2017-7269 이 익스플로잇은 Zhiniang Peng과 Chen Wu가 발견한 ScStoragePathFromUrl 버퍼 오버플로우를 이용합니다. 사용법: ruby exploit.rb 인코딩 옵션 는 필수 옵션을 나타냅니다...
CVE-2017-14980
Exploit-CVE-2017-14980 PoC exploit لـ CVE-2017-14980 — ثغرة stack-based buffer overflow في Sync Breeze Enterprise 10.0.28. 📖 التحليل الفني الكامل للاستغلال: 👉 https://davigsantana.github.io/posts/buffer-overflow/ حول يحتوي هذا المستودع على proof-of-concept PoC تم تطويره لأغراض تعليمية وبحثية،...
android-gadget
أداة أندرويد-جادجت ملخص بعض إصدارات نواة لينكس المستخدمة في أندرويد تتأثر بالمشكلة CVE-2021-39685. يمكن العثور على معلومات مفصلة وإثبات المفهوم لـ CVE-2021-39685 في مستودع inspector-gadget. يحتوي هذا المستودع على إثبات المفهوم الذي يستهدف بعض أجهزة USB الخاصة بأندرويد بما في ذلك: faccessory...
CVE-2026-19874
A heap-based buffer overflow vulnerability exists in Konami's Metal Gear Online 3, originating from improper validation of lobby data fields related to kicked players. The affected function processes a list of kicked player identifiers using the lobby data key "kicknum" to determine the number of...
CVE-2026-19874
CVE-2026-19874 is a heap-based buffer overflow (CWE-122) in Konami's Metal Gear Online 3 (Steam AppID 287700, version 1.1.2.8 ), rated CVSS 9.1 Critical . The vulnerability resides in the parsing of Steam lobby metadata for the player-removal feature: the kick_num field is not validated against t...
EUVD-2026-64916
A heap-based buffer overflow vulnerability exists in Konami's Metal Gear Online 3, originating from improper validation of lobby data fields related to kicked players. The affected function processes a list of kicked player identifiers using the lobby data key "kicknum" to determine the number of...
CVE-2026-19874 Konami's Metal Gear Online 3 contains a heap-based buffer overflow
A heap-based buffer overflow vulnerability exists in Konami's Metal Gear Online 3, originating from improper validation of lobby data fields related to kicked players. The affected function processes a list of kicked player identifiers using the lobby data key "kicknum" to determine the number of...
multi_path
multipath - استغلال لثغرة p0 issue 1558 CVE-2018-4241 @i41nbeer mptcpusrconnectx هو معالج استدعاء النظام connectx لعائلة المقابس APMULTIPATH. منطق هذه الدالة يفشل في التعامل بشكل صحيح مع عناوين sockaddr المصدر والوجهة التي ليست AFINET أو AFINET6: root@kitploit: // التحقق من salen لـ AFINET: if...
CVE-2026-58081
A flaw was found in iconv. Several encoding modules, including HZ, UTF-7, VIQR, and ZW, did not properly validate the size of the provided output buffer before writing converted characters. This oversight could allow an application using iconv to convert untrusted input with one of the affected...
kernel: dlm: validate length in dlm_search_rsb_tree
A flaw was found in the Linux kernel's Distributed Lock Manager dlm module. An attacker could send specially crafted network messages with an oversized length parameter to the dlmdumprsbname function. This lack of validation can lead to an out-of-bounds write in the dlmsearchrsbtree function,...