FreeRDP: FreeRDP: Heap buffer overflow via oversized LB_LOAD_BALANCE_INFO routing token can lead to heap corruption.

A flaw was found in FreeRDP. A malicious RDP Remote Desktop Protocol server or a man-in-the-middle attacker could exploit a heap buffer overflow vulnerability during connection negotiation, prior to authentication. By sending a specially crafted Server Redirection PDU Protocol Data Unit with an...

CVE-2022-27666

CVE-2022-27666 Dépassement de tampon heap buffer overflow dans l'implémentation IPsec ESP6 du noyau Linux linux 5.13.19. Configuration en tant qu'utilisateur root 1. Construire le noyau dans la VM Installer les dépendances : apt update && apt install -y \ build-essential bc bison flex \ libssl-de...

-Win10-x64-CloudMe-Sync-1.10.9-Buffer-Overflow-SEH-DEP-Bypass

-Win10-x64-CloudMe-Sync-1.10.9-Buffer-Overflow-SEH-DEP-Bypass النسخة الخاصة بي - Win10 x64 CloudMe-Sync-1.10.9-Buffer-Overflow-SEH-DEP-Bypass...

CVE-2003-0264_EXPLOIT

CVE-2003-0264EXPLOIT تجاوز سعة المخزن المؤقت في Seattle Lab Mail SLmail 5.5 - POP3 تجاوز سعة مخزن مؤقت قائم على المكدس خطوة بخطوة 1 تفحيش التطبيق في الخطوة الأولى سنقوم بتفحيش التطبيق باستخدام سكربت Spike بسيط في الوقت نفسه سيكون لدينا SLmail موصولًا ويعمل بـ Immunity Debugger المزيد عن...

rabbitmq-c: rabbitmq-c: Heap buffer overflow leading to denial of service

A flaw was found in rabbitmq-c. A malicious AMQP Advanced Message Queuing Protocol server or an on-path attacker can send an undersized frame size during the login handshake. This can lead to a heap buffer overflow, causing memory corruption and potentially a denial of service. Code execution is...

Important: Red Hat Security Advisory: librabbitmq security update

An update for librabbitmq is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fr...

gimp: gimp: heap-based buffer overflow in ICO loader via integer overflow in embedded PNG dimensions

A flaw was found in GIMP's ICO file loader. When processing an ICO file containing an embedded PNG image, an integer overflow can occur during the calculation of the required buffer size. This leads to an undersized buffer being allocated, causing a heap-based buffer overflow when the decoded pix...

Important: Red Hat Security Advisory: gimp security update

An update for gimp is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

gimp: integer overflow when generating a thumbnail preview for a PSD file

A flaw was found in the file-psd plugin in GIMP. When generating a thumbnail preview for a specially crafted PSD Photoshop Document image file, an integer overflow occurs during the multiplication of values from an embedded JPEG header. This leads to an undersized heap allocation, resulting in a...

cve-2022-46395-qemu

CVE-2022-46395 مختبر QEMU r36p0 يحتوي هذا المستودع على مختبر QEMU/no-Mali لإعادة إنتاج حالة التشغيل المحمولة لـ CVE-2022-46395 ضد سلسلة برنامج تشغيل Arm Mali r36p0. المختبر مخصص للبحث المحلي عن الثغرات واختبار الانحدار. لا يحمل حمولة تصعيد الامتيازات الخاصة بـ Pixel من الاستغلال الأصلي. في وضع...

CVE-2026-53921

🚨 CVE-2026-53921 - odhcpd Критическое переполнение буфера стека в OpenWrt odhcpd Удалённое неаутентифицированное переполнение буфера стека, допускающее потенциальноеудалённое выполнение кода RCE с правами root. 📖 Обзор Свойство| Значение ---|--- ID CVE| CVE-2026-53921 Серьёзность| 🔴 Критическая...

CVE-2025-69720

CVE-2025-69720: تجاوز سعة المخزن المؤقت للمكدس في -i لـ ncurses infocmp CWE-121 المُبلغ: Yixuan Cao جامعة شنتشن، [email protected] البيئة المضيف: openEuler 22.03 LTS Linux aarch64 سلسلة الأدوات: clang 12.0.1 للنظام + AddressSanitizer المصدر: ncurses-6.4 و ncurses-6.5 قبل التصحيح 20251213...

samsung-exynos-sms-stack-overflow-cve-2025-54328-critical-zero-click-baseband-rce

CVE-2025-54328 — تجاوز سعة المخزن المؤقت للمكدس في RP-DATA لرسائل SMS في Samsung Exynos إثبات مفهوم مفاهيمي لـ CVE-2025-54328، وهو تجاوز سعة مخزن مؤقت للمكدس حرج بدرجة CVSS 10.0 في محلل RP-DATA لرسائل SMS في برنامج القاعدة الأساسي لـ Samsung Exynos. مقال الشرح الكامل: Samsung Exynos SMS Stack...

CVE-2019-18634

CVE-2019-18634 La CVE-2019-18634 est une vulnérabilité qui affecte Sudo dans les versions 1.8.25 lorsque pwfeedback est activé dans le fichier sudoers. Elle permet à un attaquant d'élever ses privilèges jusqu'à root en exploitant un débordement de tampon basé sur le BSS, où les structures de...

CVE-2019-1663-Binary-Analysis

CVE-2019-1663의 바이너리 분석 저자: Corentin Wolff 취약점의 기원 취약점의 출처 이 취약점은 0x0002BF64 함수에서 비롯되며, strcpy 함수를 잘못 사용하여 버퍼 오버플로우 공격에 취약하게 만듭니다. 명확성을 위해 이 함수는 Login으로 이름이 변경되었습니다. 아래는 문제를 보여주는 코드 조각입니다. undefined4 Loginchar param1, char param2, char param3, int param4 ... 이 조각에서 strcpy 함수가 부적절하게 사용되어 버퍼 오버플로우...

kernel: dm-verity: fix buffer overflow in FEC calculation

A flaw was found in the dm-verity component of the Linux kernel. A buffer overflow occurs during Forward Error Correction FEC calculation, allowing an attacker to write past the end of an allocated buffer. This out-of-bounds write can corrupt the syndrome buffer, potentially leading to system...

CVE-2025-5548

Техническое исследование уязвимости CVE-2025-5548 Введение В данной работе анализируется уязвимость CVE-2025-5548 , связанная с переполнением буфера в стеке в FreeFloat FTP Server v1.0. Основная цель лабораторной работы — понять, как ведёт себя уязвимое приложение при обработке поддельных входных...

CVE-2026-20539: Buffer Over-read

In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-20540: Buffer Over-read

In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation...

ROS-20261005-73-0036

The vulnerability of the faudiooutepcomplete function in the drivers/usb/gadget/function/fuac1legacy.c file of the Linux operating system’s device drivers is related to writing beyond buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...