CVE-2026-102505

Imager versions before 1.037 for Perl overflow a heap buffer fetching float samples from a paletted image in igsampffp. For a paletted image, getsamples with type "float" allocates a buffer of one sample per pixel and fetches every requested channel of each pixel into it. Requesting more than one...

SOC-L1-OSINT-Investigation-MikroTik-CVE-2018-1156

SOC L1 Threat Investigation: MikroTik RouterOS Multiple Exposed Services Analyst: Jonatan Alexander Guerrero Gomez | Role Target: SOC L1 / Jr. Cybersecurity Analyst Status: Investigation Closed | Severity: High Executive Summary Proactive threat hunting exercise indentifying a public-facing...

CVE-2023-6931

CVE-2023-6931 Kernel Panic PoC for CVE-2023-6931 Description CVE-2023-6931 is a vulnerability in perfevent that leads to a heap buffer overflow caused by an integer overflow in the readsize of a group. What is a Performance Event perf event? perfevents is a performance monitoring and analysis...

CVE-2008-4654

CVE-2008-4654 A fully functional exploit for the stack-based buffer overflow vulnerability CVE-2008-4654 in VideoLan’s VLC Media Player 0.9.4 when processing TiVo files. It targets a 32-bit binary running on a 64-bit Windows system and uses a WOW64 egghunter to bypass limited stack space. Usage...

CVE-2023-40296

CVE-2023-40296 async-sockets-cpp through 0.3.1 contains an off-by-one buffer overflow vulnerability in static void ReceiveFromUDPSocket udpSocket at udpsocket.hpp, around lines 160-167. The buffer overflow affects all corresponding UDP servers. The remote buffer overflow can be triggered by...

CVE-2023-38632

CVE-2023-38632 async-sockets-cpp through 0.3.1 contains a remote buffer overflow vulnerability in static void ReceiveTCPSocket socket at tcpsocket.hpp, lines 102-110. The buffer overflow affects all corresponding TCP servers. The remote buffer overflow can be triggered by connecting to a socket a...

CVE-2022-43343

Description for CVE-2022-43343 N-Prolog v1.91 was discovered to contain a global buffer overflow vulnerability in the function gettoken at Main.c Reproduction To reproduce the vulnerability, download a vulnerable version of N-Prolog v1.91 and compile the project: git clone...

redis-cve-2025-62507

Exploit Scripts — CVE-2025-62507 Directory Structure scripts/ ├── exploitx86.py x86-64 ROP exploit ├── exploitarm64.py ARM64 AArch64 ROP exploit └── gdbwithsymbols.sh GDB debugging helper script Vulnerability Summary Item| Description ---|--- CVE| CVE-2025-62507 Vulnerability Type| Stack Buffer...

FreeRDP: FreeRDP: Remote code execution or client crash via malicious TS Gateway

A flaw was found in FreeRDP. FreeRDP clients using TS Gateway are vulnerable to a heap-buffer-overflow. A malicious gateway can send a specially crafted response fragment, causing the client to write beyond its allocated buffer. This can lead to a client crash, resulting in a Denial of Service Do...

EvilSunCheck

EvilSun Vulnerability Checker CVE-2020-14871 This is a little Python script to detect the "EvilSun" vulnerability CVE-2020-14871 on Solaris systems. The vulnerability is a buffer overflow in the Pluggable Authentication Module PAM pamunixauth when handling keyboard-interactive authentication in...

FreeRDP: FreeRDP: Remote code execution or client crash via malicious TS Gateway

A flaw was found in FreeRDP. FreeRDP clients using TS Gateway are vulnerable to a heap-buffer-overflow. A malicious gateway can send a specially crafted response fragment, causing the client to write beyond its allocated buffer. This can lead to a client crash, resulting in a Denial of Service Do...

Nginx-Rift

NGINX Rift RCE Proof of concept for CVE-2026-42945 , a critical heap buffer overflow in NGINX's ngxhttprewritemodule introduced in 2008. The bug enables unauthenticated remote code execution against servers using rewrite and set directives. This vulnerability — along with three other memory...

Nginx-Rift

NGINX Rift RCE Proof of concept для CVE-2026-42945 — критического переполнения буфера в куче в ngxhttprewritemodule NGINX, появившегося в 2008 году. Уязвимость позволяет неаутентифицированному удалённому выполнению кода на серверах, использующих директивы rewrite и set. Эта уязвимость — наряду с...

CVE-2025-27363-proof-of-concept

Proof-of-concept for CVE-2025-27363 that crashes FreeType 2.13.0. This modifies Roboto Flex, a variable font, so that the "%" character glyph 8 is now a composite glyph with 0xfffd subglyphs. Rendering the edited font with FreeType 2.13.0 the last version before the fix crashes, with ASAN detecti...

CVE-2024-46451

CVE-2024-46451 TOTOLINK AC1200 T8 Exploit - Buffer Overflow Vulnerability This repository contains a Python script that exploits a buffer overflow vulnerability in the TOTOLINK AC1200 T8 version v4.1.5cu.861B20230220 in the setWiFiAclRules function via the desc parameter. Vulnerability Details...

Moderate: Red Hat Security Advisory: ghostscript security update

An update for ghostscript is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fr...

ghostscript: ghostscript: Heap buffer overflow via JPEG 2000 output adapter

A flaw was found in Ghostscript. This heap-based buffer overflow vulnerability in the JPEG 2000 output adapter allows an attacker to cause memory corruption by supplying a specially crafted PDF file. The crafted PDF contains a JPEG 2000 image with mismatched component subsampling factors...

CVE-2018-4407-iOS-exploit

CVE-2018-4407 iOS Attack Exploit CVE-2018-4407 is a Simple and Very Fast BOF attack Against iOS/mac that can lead to DOS. The vulnerability is a heap buffer overflow in the networking code in the XNU operating system kernel. XNU is used by both iOS and macOS, which is why iPhones, iPads, and...

CVE-2026-39259

SmallerC scanf s Stack.md SmallerC - scanf %s Stack Buffer Overflow Project: https://github.com/alexfru/SmallerC SmallerC's scanf implementation does not enforce an upper bound on string reads when %s or % is used without an explicit field width in the format string The runtime will continue...

CVE-2026-102505

The perl-Imager library (versions before 1.037 ) is vulnerable to a heap-based buffer overflow when processing floating-point samples from a paletted image in i_gsampf_fp . The root cause is that the getsamples() function with type "float" incorrectly allocates a buffer for only one sample per pi...