261848 matches found
CVE-2026-76840
RustDesk (through 1.4.9 ) contains a heap buffer overflow in its Windows CLIPRDR clipboard redirection module (libs/clipboard/src/windows/wf_cliprdr.c). The peer-supplied cbRequested length from a CLIPRDR FileContentsResponse is copied via CopyMemory into the caller's fixed-size buffer without be...
EUVD-2026-64846
RustDesk's Windows clipboard redirection copies a peer-supplied length into a fixed-size caller buffer without an upper bound check. When an OLE paste consumer such as explorer.exe calls IStream::Read with a buffer of cb bytes, CliprdrStreamRead in libs/clipboard/src/windows/wfcliprdr.c requests...
CVE-2026-76840 RustDesk through 1.4.9 Heap Buffer Overflow via Unvalidated CLIPRDR FileContentsResponse Length
RustDesk's Windows clipboard redirection copies a peer-supplied length into a fixed-size caller buffer without an upper bound check. When an OLE paste consumer such as explorer.exe calls IStream::Read with a buffer of cb bytes, CliprdrStreamRead in libs/clipboard/src/windows/wfcliprdr.c requests...
CVE-2024-0039-Exploit
CVE-2024-0039-Exploit Beschreibung Python-Skript zur Ausnutzung der Schwachstelle CVE-2024-0039: Ausführung von beliebigem Code auf anfälligen Android-Geräten. ACHTUNG : Dieser Code dient nur zu Bildungs- und Schaffenszwecken, im Dienste des Guten, sozusagen! Verwendung Führen Sie das Skript mit...
CVE-2026-42533
CVE-2026-42533 — Sito di tracciamento della sovrascrittura di cattura nginx map/regex Tracker dello stato delle patch per CVE-2026-42533 , un heap buffer overflow nel motore di valutazione script a due passate di nginx. nginx misura un'espressione stringa in una passata LEN e la scrive in una...
CVE-2026-0006-openapv-poc
CVE-2026-0006: Heap Buffer Overflow in libopenapv Android APV Codec Patch-Analyse & Reproduktion von Mobile Hacking Lab CVSS 9.8 Kritisch | Aktiv in freier Wildbahn ausgenutzt | Gepatched im März 2026 Hinweis: Wir haben diese Schwachstelle nicht entdeckt. Die Anerkennung für das Finden und...
CVE-2025-5548
Analisi e sfruttamento di FreeFloat FTP: CVE-2025-5548 Anderson Steven — Master in Cybersicurezza, Modulo 6 Vulnerabilità Consegna individuale: Metodologia di analisi e sfruttamento delle vulnerabilità Perché questo repository Non volevo semplicemente consegnare "ecco l'exploit funzionante". Ques...
RLSA-2026:58571 Moderate: qemu-kvm security, bug fix, and enhancement update
Kernel-based Virtual Machine KVM is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm packages provide the user-space component for running virtual machines that use KVM. Security Fixes: qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling...
qemu-kvm security, bug fix, and enhancement update
An update is available for qemu-kvm. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Kernel-based Virtual Machine KVM is a full virtualization solution for Linu...
CVE-2026-72854
A flaw was found in msgpack-c. An integer overflow vulnerability exists in the msgpackunpackerexpandbuffer function. This flaw can lead to an undersized memory buffer being allocated, even though the system reports a successful reservation. If an attacker can influence the length provided to the...
sqlite: SQLite: Arbitrary code execution via crafted FTS5 full-text search data
A flaw was found in SQLite's FTS5 full-text search extension. This vulnerability involves memory corruption, specifically an out-of-bounds read and a heap buffer overflow, which can be triggered by supplying a crafted database with malformed FTS5 page data. When an FTS5 MATCH query is executed...
Important: Red Hat Security Advisory: sqlite security update
An update for sqlite is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring Syst...
sqlite: SQLite: Arbitrary code execution and crash via heap-based buffer overflow in FTS5
A flaw was found in SQLite, specifically within its FTS5 full-text search extension. Attackers can exploit a heap-based buffer overflow by providing a specially crafted database. This crafted database contains malicious metadata that triggers an integer underflow during FTS5 MATCH query processin...
CVE-2026-41089-Netlogon-RCE
🚨 CVE-2026-41089: RCE critica di Windows Netlogon Esecuzione remota di codice non autenticata sui controller di dominio Active Directory 🧠 Panoramica concettuale Pubblico questa analisi tecnica di CVE-2026-41089 , una vulnerabilità estremamente critica che risiede in profondità nel servizio Windo...
CVE-2026-42533
CVE-2026-42533 — PoC Exploit per l'Heap Buffer Overflow di nginx Esecuzione remota di codice pre-autenticazione tramite sovrascrittura dei gruppi di cattura a due passate PoC pubblico rilasciato il 2026-07-27 — Non aspettare, applica la patch ora. | ---|--- CVE| CVE-2026-42533 CVSS 4.0| 9.2 Criti...
CVE-2021-3064
CVE-2021-3064: Pan-OS Buffer Overflow Remoto + Contrabbando HTTP Exploit Questo exploit sfrutta una vulnerabilità di HTTP Smuggling per consegnare un payload a un endpoint altrimenti inaccessibile sui firewall Pan-OS; l'endpoint è vulnerabile a un overflow che può essere sfruttato per eseguire...
CVE-2026-74664
A flaw was found in the Linux kernel's Open vSwitch component. When processing flow updates, the ovsflowcmdnew function preallocates a reply buffer based on the request's flow identifier. If a shorter User Flow ID UFID is provided, but the system matches an existing flow with a longer key...
nginx-rift-private-lab
NGINX Rift Prova de conceito de RCE para CVE-2026-42945 , um overflow crítico de heap buffer no ngxhttprewritemodule do NGINX introduzido em 2008. O bug permite execução remota de código não autenticada contra servidores que usam as diretivas rewrite e set. Este fork estende o PoC original com um...
FreeRDP: FreeRDP: Remote code execution or denial of service via audio input integer overflow
A flaw was found in FreeRDP, an open-source implementation of the Remote Desktop Protocol RDP. This vulnerability, an integer overflow in the audio input redirection channel, allows a remote attacker to supply a malicious FramesPerPacket value. This can lead to a heap-based buffer overflow,...