USN-8865-1 edk2 vulnerabilities

It was discovered that EDK II incorrectly handled CMS key unwrapping in the embedded OpenSSL library. An attacker could possibly use this issue to cause a heap buffer overflow, resulting in a denial of service. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu...

USN-8865-1: EDK II vulnerabilities

It was discovered that EDK II incorrectly handled CMS key unwrapping in the embedded OpenSSL library. An attacker could possibly use this issue to cause a heap buffer overflow, resulting in a denial of service. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu...

Security update for rpm

This update for rpm fixes the following issue: Security issues fixed: CVE-2026-44605: heap buffer overflow in NDB database backend due to unchecked 32-bit arithmetic when parsing the slot table bsc1269584. Other updates and bugfixes: Fix libelf handle not being closed, resulting in build errors...

SUSE-SU-2026:4457-1 Security update for rpm

This update for rpm fixes the following issue: Security issues fixed: - CVE-2026-44605: heap buffer overflow in NDB database backend due to unchecked 32-bit arithmetic when parsing the slot table bsc1269584. Other updates and bugfixes: - Fix libelf handle not being closed, resulting in build erro...

CVE-2025-43300

📚 CVE-2025-43300 - भेद्यता का विस्तृत विश्लेषण 🎯 सारांश CVE-2025-43300 DNG डिजिटल नेगेटिव फ़ाइलों के प्रसंस्करण में एक बफर ओवरफ़्लो भेद्यता है जो TIFF मेटाडेटा और JPEG डेटा के बीच असंगति के कारण होती है, जो रिमोट कोड निष्पादन RCE की अनुमति देती है। 🔍 1. DNG फ़ाइल की शारीरिक रचना स्तरित संरचना: DN...

CVE-2026-105285

A security vulnerability has been detected in Totolink A3002MU 1.0.0-B20230403.1455. This affects an unknown function of the file /boafrm/formIpQoS of the component QoS Rule Handler. The manipulation of the argument addQos/comment/entryname leads to stack-based buffer overflow. Remote exploitatio...

libgd: buffer overflow when processing specially crafted GIF file

A flaw was found in libgd. Processing a specially crafted GIF file allows a remote attacker to trigger a buffer overflow, resulting in an application crash and a denial of service. Arbitrary code execution is possible in theory, but considered highly unlikely because standard image decompression...

Important: Red Hat Security Advisory: gd security update

An update for gd is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CV...

nginx-rift-detect

nginx-rift-detect نص كشف سلوكي لـ CVE-2026-42945 NGINX Rift — تجاوز سعة المخزن المؤقت الكومي heap buffer overflow في ngxhttprewritemodule الموجود في nginx منذ 2008. ⚠️ إخلاء مسؤولية هذه الأداة مخصصة فقط لاختبارات الأمان المصرح بها والبحث العلمي. قم بتشغيلها فقط على أنظمة تملكها أو لديك إذن كتابي...

CVE-2026-42945

CVE-2026-42945 Nginx Rift - Kit PoC Un kit complet de preuve de concept pour CVE-2026-42945 Nginx Rift, une vulnérabilité critique de débordement de tas heap buffer overflow dans le module ngxhttprewritemodule de Nginx. Résumé de la vulnérabilité Champ| Détails ---|--- Identifiant CVE|...

CVE-2025-60752

CVE-2025-60752 CVE-2025-60752 का PoC प्रभावित उत्पाद: Tinyc Http Server पूर्ण लेख उपलब्ध है: https://zer0matt.blogspot.com/2026/05/cve-2025-60752-tinyc-http-server-stack.html विवरण जब Tinyc एक विशेष रूप से तैयार इनपुट प्राप्त करता है, तो स्टैक बफर ओवरफ्लो होता है। यह ओवरफ्लो इसलिए होता है क्योंकि...

lab-cve-2023-4863

CVE-2023-4863 — مختبر استغلال libwebp إعادة إنتاج CVE-2023-4863 تجاوز سعة المخزن المؤقت في الكومة في libwebp في بيئة Docker معزولة تمامًا وآلية بالكامل. مبني على تمرين وحدة الاختراق الأخلاقي من CEFIRE. ماذا يفعل هذا المختبر يشغّل ثماني حاويات في شبكة خاصة: الحاوية| الدور ---|--- attacker| ينشئ...

CVE-2025-20260-POC

CVE-2025-20260 एक्सप्लॉइट यह CVE-2025-20260 के लिए एक प्रूफ ऑफ कॉन्सेप्ट है। यह ClamAV सॉफ्टवेयर की PDF स्कैनिंग प्रक्रियाओं में एक कमजोरी है। एक विशेष रूप से तैयार, दुर्भावनापूर्ण PDF फ़ाइल भेजकर बफर ओवरफ्लो उत्पन्न करना संभव है, जिसके परिणामस्वरूप सेवा से वंचित करना या मनमाना कोड निष्पादन हो सक...

CVE-2026-19184

The NXP GAU ADC driver drivers/adc/adcmcuxgauadc.c validated the caller-supplied sequence-buffersize, which is expressed in bytes, against the number of active channels, which is a sample count. It then stored that byte count directly in data-resultslength and used it in mcuxgauadcreadsamples as...

CVE-2026-105285 Totolink A3002MU QoS Rule formIpQoS stack-based overflow

A security vulnerability has been detected in Totolink A3002MU 1.0.0-B20230403.1455. This affects an unknown function of the file /boafrm/formIpQoS of the component QoS Rule Handler. The manipulation of the argument addQos/comment/entryname leads to stack-based buffer overflow. Remote exploitatio...

EUVD-2026-92383

A security vulnerability has been detected in Totolink A3002MU 1.0.0-B20230403.1455. This affects an unknown function of the file /boafrm/formIpQoS of the component QoS Rule Handler. The manipulation of the argument addQos/comment/entryname leads to stack-based buffer overflow. Remote exploitatio...

R7000_httpd_BOF_CVE-2020-15416

R7000httpdBOFCVE-2020-15416 मैंने आपको Netgear R7000 वाई-फाई राउटर के लिए QEMU यूज़र मोड का उपयोग करके डिबगिंग वातावरण स्थापित करने का तरीका प्रदर्शित किया। फिर मैं Netgear वाई-फाई राउटर httpd Buffer Overflow VulnerabilityCVE-2020-15416 के एक एक्सप्लॉइट का वॉकथ्रू प्रदान करता हूँ। यह...

CVE-2024-31449

CVE-2024-31449 Redis هي قاعدة بيانات غير علائقية مفتوحة المصدر في الذاكرة. ملخص ثغرة تجاوز سعة المخزن المؤقت للمكدس Stack Buffer Overflow موجودة في جميع إصدارات Redis التي تحتوي على محرك Lua تتعلق بدالة bit.tohex داخل محرك Lua يُستخدم وحدة bit للعمليات البتية تقوم دالة bit.tohex بتحويل القيم...

libvirt: Integer overflow in NodeGetFreePages RPC handler leading to heap buffer overflow

A flaw was found in libvirt. An unprivileged local user could exploit an integer overflow vulnerability in the NodeGetFreePages RPC handler. This flaw allows crafted values to bypass a size check, leading to an undersized memory buffer. Subsequently, real NUMA node data can overwrite this buffer...

Important: Red Hat Security Advisory: libvirt security, bug fix, and enhancement update

An update for libvirt is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...