261711 matches found
Libgcrypt: Libgcrypt: Denial of Service and buffer overflow via crafted ECDH ciphertext
A flaw was found in Libgcrypt. A remote attacker could exploit this vulnerability by sending crafted Elliptic Curve Diffie-Hellman ECDH ciphertext to the gcrypkdecrypt function. This can lead to a heap-based buffer overflow, potentially causing a denial of service DoS condition...
EUVD-2026-64846
RustDesk's Windows clipboard redirection copies a peer-supplied length into a fixed-size caller buffer without an upper bound check. When an OLE paste consumer such as explorer.exe calls IStream::Read with a buffer of cb bytes, CliprdrStreamRead in libs/clipboard/src/windows/wfcliprdr.c requests...
CVE-2026-76840
RustDesk (through 1.4.9 ) contains a heap buffer overflow in its Windows CLIPRDR clipboard redirection module (libs/clipboard/src/windows/wf_cliprdr.c). The peer-supplied cbRequested length from a CLIPRDR FileContentsResponse is copied via CopyMemory into the caller's fixed-size buffer without be...
CVE-2026-76840 RustDesk through 1.4.9 Heap Buffer Overflow via Unvalidated CLIPRDR FileContentsResponse Length
RustDesk's Windows clipboard redirection copies a peer-supplied length into a fixed-size caller buffer without an upper bound check. When an OLE paste consumer such as explorer.exe calls IStream::Read with a buffer of cb bytes, CliprdrStreamRead in libs/clipboard/src/windows/wfcliprdr.c requests...
CVE-2024-0039-Exploit
CVE-2024-0039-Exploit Descrição Script Python para exploração da vulnerabilidade CVE-2024-0039: execução de código arbitrário em dispositivos Android vulneráveis. ATENÇÃO : Este código destina-se apenas para educação e criação, servindo ao lado do bem, por assim dizer! Uso Execute o script com os...
CVE-2026-42533
CVE-2026-42533 — nginx map/regex कैप्चर क्लोबरिंग ट्रैकिंग साइट CVE-2026-42533 के लिए पैच-स्थिति ट्रैकर, जो nginx के दो-पास स्क्रिप्ट मूल्यांकन इंजन में एक हीप बफ़र ओवरफ़्लो है। nginx एक स्ट्रिंग एक्सप्रेशन को LEN पास में मापता है और उसे VALUE पास में लिखता है, बिना PCRE कैप्चर स्थिति को सहेजे और...
CVE-2026-0006-openapv-poc
CVE-2026-0006: Estouro de Buffer no Heap em libopenapv Codec APV do Android Análise de Patch e Reprodução por Mobile Hacking Lab CVSS 9.8 Crítico | Explorado ativamente na natureza | Corrigido em março de 2026 Nota: Não descobrimos esta vulnerabilidade. Todo o crédito pela descoberta e relato...
CVE-2025-5548
FreeFloat FTP को तोड़ना: CVE-2025-5548 का विश्लेषण और शोषण एंडरसन स्टीवन — साइबरसुरक्षा में मास्टर, मॉड्यूल 6 कमजोरियाँ व्यक्तिगत प्रस्तुति: कमजोरियों के विश्लेषण और शोषण की पद्धति यह रिपॉजिटरी क्यों मैं केवल "यहाँ शोषण काम कर रहा है" देने का इरादा नहीं रखता था। यह रिपॉजिटरी बताती है कि मैं मेमोर...
qemu-kvm security, bug fix, and enhancement update
An update is available for qemu-kvm. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Kernel-based Virtual Machine KVM is a full virtualization solution for Linu...
RLSA-2026:58571 Moderate: qemu-kvm security, bug fix, and enhancement update
Kernel-based Virtual Machine KVM is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm packages provide the user-space component for running virtual machines that use KVM. Security Fixes: qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling...
CVE-2026-72854
A flaw was found in msgpack-c. An integer overflow vulnerability exists in the msgpackunpackerexpandbuffer function. This flaw can lead to an undersized memory buffer being allocated, even though the system reports a successful reservation. If an attacker can influence the length provided to the...
sqlite: SQLite: Arbitrary code execution via crafted FTS5 full-text search data
A flaw was found in SQLite's FTS5 full-text search extension. This vulnerability involves memory corruption, specifically an out-of-bounds read and a heap buffer overflow, which can be triggered by supplying a crafted database with malformed FTS5 page data. When an FTS5 MATCH query is executed...
Important: Red Hat Security Advisory: sqlite security update
An update for sqlite is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring Syst...
sqlite: SQLite: Arbitrary code execution and crash via heap-based buffer overflow in FTS5
A flaw was found in SQLite, specifically within its FTS5 full-text search extension. Attackers can exploit a heap-based buffer overflow by providing a specially crafted database. This crafted database contains malicious metadata that triggers an integer underflow during FTS5 MATCH query processin...
CVE-2026-41089-Netlogon-RCE
🚨 CVE-2026-41089: गंभीर Windows Netlogon RCE Active Directory डोमेन कंट्रोलर्स पर बिना प्रमाणीकरण के रिमोट कोड निष्पादन 🧠 अवधारणात्मक अवलोकन मैं CVE-2026-41089 का यह तकनीकी विश्लेषण प्रकाशित कर रहा हूँ, जो Windows Netlogon सेवा के भीतर गहराई में स्थित एक अत्यंत गंभीर भेद्यता है। मेरे विश्लेषण से...
CVE-2026-42533
CVE-2026-42533 — nginx हीप बफर ओवरफ्लो PoC एक्सप्लॉइट टू-पास कैप्चर क्लोबरिंग के माध्यम से प्री-ऑथेंटिकेशन रिमोट कोड एक्ज़ीक्यूशन सार्वजनिक PoC 2026-07-27 को जारी — प्रतीक्षा न करें, अभी पैच करें। | ---|--- CVE| CVE-2026-42533 CVSS 4.0| 9.2 गंभीर प्रकार| हीप बफर ओवरफ्लो CWE-122 प्रभावित| nginx...
CVE-2021-3064
CVE-2021-3064: Pan-OS Buffer Overflow Remoto + HTTP Smuggling Exploração Este exploit utiliza uma vulnerabilidade de HTTP Smuggling para entregar um payload a um endpoint que de outra forma seria inacessível em firewalls Pan-OS; o endpoint é vulnerável a um estouro de buffer que pode ser explorad...
CVE-2026-74664
A flaw was found in the Linux kernel's Open vSwitch component. When processing flow updates, the ovsflowcmdnew function preallocates a reply buffer based on the request's flow identifier. If a shorter User Flow ID UFID is provided, but the system matches an existing flow with a longer key...
nginx-rift-private-lab
NGINX Rift Preuve de concept d'exécution de code à distance RCE pour CVE-2026-42945 , un débordement de tas critique dans le ngxhttprewritemodule de NGINX introduit en 2008. Ce bug permet une exécution de code à distance sans authentification sur les serveurs utilisant les directives rewrite et...