261725 matches found
ROOT-OS-DEBIAN-13-CVE-2026-61861 CVE-2026-61861 in imagemagick - Patched by Root
Root has patched CVE-2026-61861 in the imagemagick package for Root:Debian:13. Multiple fixed versions available...
FreeRDP: FreeRDP: Remote code execution or denial of service via audio input integer overflow
A flaw was found in FreeRDP, an open-source implementation of the Remote Desktop Protocol RDP. This vulnerability, an integer overflow in the audio input redirection channel, allows a remote attacker to supply a malicious FramesPerPacket value. This can lead to a heap-based buffer overflow,...
katana
कटाना 2016 से 2019 के बीच जारी Qualcomm उपकरणों के लिए एक BootROM शोषण।. शोषण का संक्षिप्त विवरण MSM8998 Nazgul SoC के साथ, कमांड 0x13 SAHARARESETSTATEMACHINEID जोड़ा गया था। यह कमांड bootsaharaentry में कॉल करता है, जो Sahara को पुनःआरंभ करने वाला है। दोष यह है कि इसमें प्रत्येक कॉल स्टैक पॉइंटर...
ROOT-OS-DEBIAN-13-CVE-2026-5450 CVE-2026-5450 in glibc - Patched by Root
Root has patched CVE-2026-5450 in the glibc package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2026-5928 CVE-2026-5928 in glibc - Patched by Root
Root has patched CVE-2026-5928 in the glibc package for Root:Debian:13. Multiple fixed versions available...
ioctlance
IOCTLance Description Presented at CODE BLUE 2023, this project titled Enhanced Vulnerability Hunting in WDM Drivers with Symbolic Execution and Taint Analysis introduces IOCTLance, a tool that enhances its capacity to detect various vulnerability types in Windows Driver Model WDM drivers. In a...
ROOT-OS-DEBIAN-13-CVE-2026-56409 CVE-2026-56409 in expat - Patched by Root
Root has patched CVE-2026-56409 in the expat package for Root:Debian:13. Multiple fixed versions available...
FreeRDP: FreeRDP: Remote code execution or denial of service via audio input integer overflow
A flaw was found in FreeRDP, an open-source implementation of the Remote Desktop Protocol RDP. This vulnerability, an integer overflow in the audio input redirection channel, allows a remote attacker to supply a malicious FramesPerPacket value. This can lead to a heap-based buffer overflow,...
wongpress
Exploração Real de Vulnerabilidades de Buffer Overflow e Format String para Obter RCE em Servidor Ubuntu CVEs Relacionados CVE-2024-2961 : Vulnerabilidade de buffer overflow na função iconv do Glibc CVE-2024-29510 : Vulnerabilidade de format string no Ghostscript interpretador da linguagem...
FreeRDP: FreeRDP: Remote code execution or denial of service via audio input integer overflow
A flaw was found in FreeRDP, an open-source implementation of the Remote Desktop Protocol RDP. This vulnerability, an integer overflow in the audio input redirection channel, allows a remote attacker to supply a malicious FramesPerPacket value. This can lead to a heap-based buffer overflow,...
FreeRDP: FreeRDP: Remote code execution or denial of service via heap-based buffer overflow
A heap-based buffer overflow in FreeRDP's cryptorsacommon allows an unauthenticated remote attacker to trigger a denial of service or potential remote code execution. By sending a crafted ciphertext during RDP Standard Security key establishment, the attacker can force a data write before the siz...
Important: Red Hat Security Advisory: freerdp security update
An update for freerdp is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available fo...
CVE-2026-31024
CVE-2026-31024 Report di vulnerabilità: Buffer Overflow basato su stack e divulgazione di informazioni in Steghide Field| Value ---|--- Applicazione target| Steghide Binario Linux Versione interessata| 0.5.1 Confermata; versioni precedenti probabilmente interessate Tipo di vulnerabilità| Buffer...
fgt-cve-2023-27997-exploit
fgt-cve-2023-27997-exploit Script de Exploit PoC com ROP Chain para FortiGate SSL‑VPN CVE‑2023‑27997 Conteúdo Descrição Versões Afetadas Instalação Uso Exemplo de Saída Detalhes Técnicos Avisos Referências Descrição fgt-cve-2023-27997-exploit.py é um script de exploit Proof‑of‑Concept PoC escrito...
Moderate: Red Hat Security Advisory: qemu-kvm security, bug fix, and enhancement update
An update for qemu-kvm is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...
qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling
A flaw was found in QEMU's virtio-blk device. The issue arises because the device does not properly validate the size of input descriptors before writing data. A malicious guest with high privileges could exploit this vulnerability by submitting a malformed virtio-blk SCSI request, leading to an...
CVE-2026-42945-Reverse-Shell-POC
CVE-2026-42945 NGINX Rift PoC di RCE con Reverse Shell Proof-of-concept di esecuzione remota di codice per CVE-2026-42945 , un overflow del buffer heap nel ngxhttprewritemodule di NGINX. Questo fork estende il PoC di trigger pubblico con un listener di reverse shell integrato e parametri di...
windows-x86-shellcode-poc
Preuve de concept de débordement de tampon Windows x86 pour débutants Ceci est un tutoriel simple et autonome sur les exploits de débordement de tampon basé sur la pile pour Windows 32 bits. Aucun guide externe requis — tout ce dont vous avez besoin est ici. Qu'est-ce que ce dépôt ? vulnerable.c ...
pentest-writeups
pentest-writeups Kioptrix Level 1 writeup - CVE-2003-0201 Samba trans2open Kioptrix Level 1 — Writeup di Penetration Testing Autore: Amirbek Raxmatullayev @americo444 Data: 2026-06-17 Piattaforma: VulnHub Difficoltà: Principiante Obiettivo: Ottenere accesso root 1. Configurazione dell'Ambiente...
SOC-L1-OSINT-Investigation-MikroTik-CVE-2018-1156
SOC L1 Bedrohungsuntersuchung: Mehrere exponierte Dienste von MikroTik RouterOS Analyst: Jonatan Alexander Guerrero Gomez | Rollen-Ziel: SOC L1 / Jr. Cybersecurity Analyst Status: Untersuchung abgeschlossen | Schweregrad: Hoch Zusammenfassung Proaktive Bedrohungssuche, die ein öffentlich...