Important: Red Hat Security Advisory: gstreamer1-plugins-base security update

An update for gstreamer1-plugins-base is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

IIS_6.0_WebDAV_Ruby

IIS6.0WebDAVRuby Ruby-Exploit für den IIS 6.0 Pufferüberlauf CVE-2017-7269 Dieser Exploit nutzt den von Zhiniang Peng und Chen Wu entdeckten Pufferüberlauf in ScStoragePathFromUrl aus. Verwendung: ruby exploit.rb Kodierungsoption kennzeichnet Pflichtangaben...

CVE-2017-14980

Exploit-CVE-2017-14980 PoC exploit para CVE-2017-14980 — uma vulnerabilidade de stack-based buffer overflow no Sync Breeze Enterprise 10.0.28. 📖 Análise técnica completa do exploit: 👉 https://davigsantana.github.io/posts/buffer-overflow/ Sobre Este repositório contém um proof-of-concept PoC...

android-gadget

android-gadget Sommario Alcune revisioni del kernel Linux utilizzate in Android sono interessate dal problema CVE-2021-39685. Informazioni dettagliate e un POC per CVE-2021-39685 sono disponibili nel repository inspector-gadget. Questo repository include un POC che mira ad alcuni gadget USB...

CVE-2026-19874

A heap-based buffer overflow vulnerability exists in Konami's Metal Gear Online 3, originating from improper validation of lobby data fields related to kicked players. The affected function processes a list of kicked player identifiers using the lobby data key "kicknum" to determine the number of...

CVE-2026-19874

CVE-2026-19874 is a heap-based buffer overflow (CWE-122) in Konami's Metal Gear Online 3 (Steam AppID 287700, version 1.1.2.8 ), rated CVSS 9.1 Critical . The vulnerability resides in the parsing of Steam lobby metadata for the player-removal feature: the kick_num field is not validated against t...

EUVD-2026-64916

A heap-based buffer overflow vulnerability exists in Konami's Metal Gear Online 3, originating from improper validation of lobby data fields related to kicked players. The affected function processes a list of kicked player identifiers using the lobby data key "kicknum" to determine the number of...

CVE-2026-19874 Konami's Metal Gear Online 3 contains a heap-based buffer overflow

A heap-based buffer overflow vulnerability exists in Konami's Metal Gear Online 3, originating from improper validation of lobby data fields related to kicked players. The affected function processes a list of kicked player identifiers using the lobby data key "kicknum" to determine the number of...

multi_path

multipath - Exploit für p0 Issue 1558 CVE-2018-4241 @i41nbeer mptcpusrconnectx ist der Handler für den connectx-Systemaufruf für die APMULTIPATH Socket-Familie. Die Logik dieser Funktion behandelt Quell- und Ziel-Sockaddr, die weder AFINET noch AFINET6 sind, nicht korrekt: root@kitploit: // verif...

CVE-2026-58081

A flaw was found in iconv. Several encoding modules, including HZ, UTF-7, VIQR, and ZW, did not properly validate the size of the provided output buffer before writing converted characters. This oversight could allow an application using iconv to convert untrusted input with one of the affected...

kernel: dlm: validate length in dlm_search_rsb_tree

A flaw was found in the Linux kernel's Distributed Lock Manager dlm module. An attacker could send specially crafted network messages with an oversized length parameter to the dlmdumprsbname function. This lack of validation can lead to an out-of-bounds write in the dlmsearchrsbtree function,...

Important: Red Hat Security Advisory: sqlite security update

An update for sqlite is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerabilit...

sqlite: SQLite: Arbitrary code execution and crash via heap-based buffer overflow in FTS5

A flaw was found in SQLite, specifically within its FTS5 full-text search extension. Attackers can exploit a heap-based buffer overflow by providing a specially crafted database. This crafted database contains malicious metadata that triggers an integer underflow during FTS5 MATCH query processin...

sqlite: SQLite: Arbitrary code execution via crafted FTS5 full-text search data

A flaw was found in SQLite's FTS5 full-text search extension. This vulnerability involves memory corruption, specifically an out-of-bounds read and a heap buffer overflow, which can be triggered by supplying a crafted database with malformed FTS5 page data. When an FTS5 MATCH query is executed...

CVE-2026-55193

A flaw was found in FreeRDP. FreeRDP clients using TS Gateway are vulnerable to a heap-buffer-overflow. A malicious gateway can send a specially crafted response fragment, causing the client to write beyond its allocated buffer. This can lead to a client crash, resulting in a Denial of Service Do...

CVE-2026-55191

A flaw was found in FreeRDP. FreeRDP clients that negotiate RDPGFX AVC444 with an H.264 decoder backend are vulnerable to a heap-buffer-overflow. A malicious Remote Desktop Protocol RDP server can supply crafted surface dimensions, causing an undersized buffer to be allocated. This can lead to a...

Important: Red Hat Security Advisory: sqlite security update

An update for sqlite is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerabilit...

sqlite: SQLite: Arbitrary code execution and crash via heap-based buffer overflow in FTS5

A flaw was found in SQLite, specifically within its FTS5 full-text search extension. Attackers can exploit a heap-based buffer overflow by providing a specially crafted database. This crafted database contains malicious metadata that triggers an integer underflow during FTS5 MATCH query processin...

sqlite: SQLite: Arbitrary code execution via crafted FTS5 full-text search data

A flaw was found in SQLite's FTS5 full-text search extension. This vulnerability involves memory corruption, specifically an out-of-bounds read and a heap buffer overflow, which can be triggered by supplying a crafted database with malformed FTS5 page data. When an FTS5 MATCH query is executed...

CVE-2026-76840

RustDesk's Windows clipboard redirection copies a peer-supplied length into a fixed-size caller buffer without an upper bound check. When an OLE paste consumer such as explorer.exe calls IStream::Read with a buffer of cb bytes, CliprdrStreamRead in libs/clipboard/src/windows/wfcliprdr.c requests...