398133 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-15340
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - lwIP SMTP client does not check the size of inputs, potentially allowing a buffer overflow. CVE-2026-15340 Note that Nessus relies on the presence of the packag...
icicle
MSP430 crash analysis Crashes found in MSP430 binaries by Icicle. | Target| Description ---|---|--- I03| Goodwatch| Incorrect comparison when writing to dmesgbuffer I04| Goodwatch| Zero message length I05| Goodwatch| RNG Overflow I06| Goodwatch| Out-of-bounds access in OOK keypress I07| Goodwatch...
sonicwall-cve-2019-7482
sonicwall cve-2019-7482 stack-based overflow...
go-without-bounds-cve-2026-67822-stack-overflow-in-tenda-w6-s-wifissidset
CVE-2026-67822 — Tenda W6-S wifiSSIDset Stack Buffer Overflow PoC Companion PoC for the Hunt-Benito article "GO Without Bounds: CVE-2026-67822 — Stack Overflow in Tenda W6-S'swifiSSIDset Form Handler". CVE-2026-67822 CVSS 9.8 Critical, CWE-121 is a stack-based buffer overflow in formwrlSSIDset, t...
cve-2006-6184
CVE-2006-6184 This is a python-based standalone exploit for CVE-2006-6184. This exploit triggers a stack-based buffer overflow in Allied Telesyn TFTP Server AT-TFTP 1.9, and possibly earlier, allowing remote attackers to cause a denial of service or execute arbitrary code. Instructions Updated fo...
CVE-2026-41089-Netlogon
🛡️ AI Security Tool Module CVE-2026-41089: Netlogon Stack Buffer Overflow Official security verification module for the AI Security Tool Ecosystem 🌐 Demo • 📚 Project Website • 💬 Community Chat Site Navigation: Home • Updates • Downloads • Modules 🧠 Conceptual Overview I am publishing a detailed...
CVE-2026-55200
Security Report: CVE-2026-55200 📝 General Description CVE-2026-55200 is a critical heap-based buffer overflow vulnerability dynamic memory corruption affecting the libssh2 library in versions up to 1.11.1. It allows a malicious SSH server to compromise vulnerable clients that connect to it. ⚡...
CVE-2021-3156
CVE-2021-3156 Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege escalation to root via sudoedit -s and a command-line argument that ends with a single backslash character. Credit to: Advisory by Baron Samedit of Qualys How to...
Recreate-cve-2023-21768
Root Cause: Comparing the AFD.sys between the 202209 and 202307 versions, in the function AfdNotifyRemoveIOCompletion, both the 202209 and 202307 Windows versions include a step that uses the ProbeForWrite function to check whether a memory region is in user mode. However, the buffer address...
CVE-2026-106292
A buffer overflow flaw was found in the Fonts component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/524587778...
CVE-2026-75350
A flaw was found in OpENer. A remote attacker can trigger a buffer overflow in the GetAttributeList function by sending specially crafted EtherNet/IP service requests. Successful exploitation can crash the application, resulting in a Denial of Service DoS...
cfengine-CVE_2015_0235
CVE20150235 gethostbyname buffer overflow exploit in glibc - CVE-2015-0235 https://community.qualys.com/blogs/laws-of-vulnerabilities/2015/01/27/the-ghost-vulnerability Originally Sourced from Ben Bomgardners post to the help-cfengine mailing list...
poppler: poppler: Denial of Service via stack-based buffer overflow in PDF decryption
A flaw was found in Poppler. A stack-based buffer overflow vulnerability exists in the decryption routine when processing encrypted PDF documents. By providing an overly long password during document decryption, an attacker can overwrite memory buffers. This issue primarily leads to a Denial of...
CVE-2026-75350
EIPStackGroup OpENer v2.3 / master commit 76b95cf contains a buffer overflow in the GetAttributeList implementation for the EtherNet/IP GetAttributeList service. This allows a remote attacker to cause a denial of service...
CVE-2026-107816
MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the qcinfo plugin could be confused by a query containing embedded null bytes. Reading informationschema.querycacheinfo after such a query was cached could acces...
CVE-2025-7795
CVE-2025-7795 – Tenda Router Buffer Overflow Exploit Author : Byte Reaper Telegram : @ByteReaper0 CVE-ID : CVE-2025-7795 Vulnerability Type : Buffer Overflow Target : Tenda Routers Exploit : Remote, Unauthenticated 📝 Description A buffer overflow vulnerability exists in certain Tenda router model...
EUVD-2026-95931
RIOT is an open-source microcontroller operating system designed for Internet of Things devices and other embedded systems. In 2026.07 and earlier, the nanoCoAP client function nanocoapsockgetslice in sys/net/applicationlayer/nanocoap/sock.c accepts a Block2 response when blockcb sees the expecte...
Google-Nest-Cam-Bug-Disclosures
Google-Nest-Cam-Bug-Disclosures Affected: Dropcam Pro, Nest Cam Indoor/Outdoor models Latest Build Affected: 205-600052 Partial Fixed Build: 205-600055 UPDATE The latest fw version 205-600055 does not fix the WiFi dissassociation vulnerability in the Dropcam Pro. If the supplied WiFi network does...
DEBIAN-CVE-2026-107815
MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the CONNECT engine's DOS table type used an incorrect boundary check that permitted a one-byte null write beyond a stack buffer at an attacker-controlled offset...
CVE-2026-107815
MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the CONNECT engine's DOS table type used an incorrect boundary check that permitted a one-byte null write beyond a stack buffer at an attacker-controlled offset...