CVE-2026-83891: Stack-based Buffer Overflow

Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

CVE-2026-70302: Heap-based Buffer Overflow

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

CVE-2026-70287: Heap-based Buffer Overflow

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

Windows-CVE-2024-38063

Windows CVE-2024-38063 CVE ID: CVE-2024-38063 CVSS 3.1 Score: 9.8 Critical EPSS Score: Low - 0.088% https://www.cvedetails.com/epss/CVE-2024-38063/epss-score-history.html Impact: Remote Code Execution Affected Components: Windows TCP/IP stack Attack Vector: Network Remote Vulnerability Details...

CVE-2025-5548

🐞CVE-2025-5548 Buffer overflow in FreeFloat FTP Server 1.0 🎯 Stack Buffer Overflow Exploitation This repository contains the documentation and practical development of a cybersecurity project focused on reverse engineering and the exploitation of memory-level vulnerabilities Stack Buffer Overflow...

CVE-2007-5036

CVE-2007-5036 Airsensor M520 - HTTPd Unauthenticated Remote Denial of Service / Buffer Overflow PoC Exploit-DB publication at https://www.exploit-db.com/exploits/4426/ Author Alex Hernandez aka @alt3kx...

CVE-2001-1442

CVE-2001-1442 ISC INN 2.x - Command-Line Buffer Overflow Exploit-DB publication 1: https://www.exploit-db.com/exploits/20777/ Exploit-DB publication 2: https://www.exploit-db.com/exploits/20778/ Packetstorm publication at https://packetstormsecurity.com/files/24684/defcom.innfeed.txt.html...

CVE-2025-65018-Heap-buffer-overflow-in-libpng-ps4-ps5-

Poc for CVE-2025-65018-Heap-buffer-overflow-in-libpng-ps4-ps5- Usage: 1-press share button and make screenshot 2-with ftp go to path:/user/avcontents/photo/NPXS20001/NPXS20001/XXX/ you will find screenshot that you make. 3-copy it to pc and run it with makepng.py it will output poc.png 4-rename i...

EUVD-2026-98095

The Bluetooth host's ATT transmit path releases a buffer it does not own when signing fails. chansend in subsys/bluetooth/host/att.c documents and every other error exit implements the contract that on failure the caller retains ownership of the netbuf; the BTATTOPSIGNEDWRITECMD branch instead...

CVE-2026-19938 Use-after-free of an ATT PDU buffer when signing an outgoing Bluetooth ATT Signed Write Command fails

The Bluetooth host's ATT transmit path releases a buffer it does not own when signing fails. chansend in subsys/bluetooth/host/att.c documents and every other error exit implements the contract that on failure the caller retains ownership of the netbuf; the BTATTOPSIGNEDWRITECMD branch instead...

CVE-2026-85457

IBM Planning Analytics 2.0, and 2.1 could allow a remote authenticated attacker to execute arbitrary code due to a stack-based buffer overflow...

CVE-2003-0264

CVE-2003-0264 Exploit for buffer overflow in SLmail 5.5 CVE-2003-0264 Based on: https://github.com/Gallopsled/pwntools https://github.com/rapid7/metasploit-framework Example output: $ ./slmail-into-shell.py + Opening connection to 192.168.15.100 on port 110: Done + Trying to bind to 0.0.0.0 on po...

CVE-2002-0201

CVE-2002-0201 Cyberstop Web Server for Windows 0.1 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long HTTP GET request, possibly triggering a buffer overflow. Exploit-db publication at https://www.exploit-db.com/exploits/21237/ Securityfocus...

CVE-2026-85457

IBM Planning Analytics versions 2.0 and 2.1 are affected by a stack-based buffer overflow (CWE-121). This vulnerability could allow a remote authenticated attacker to perform arbitrary code execution . No specific exploit details or remediation instructions are provided in the documents.

CVE-2026-85457 IBM Planning Analytics Local is affected by security vulnerabilities

IBM Planning Analytics 2.0, and 2.1 could allow a remote authenticated attacker to execute arbitrary code due to a stack-based buffer overflow...

CVE-2026-53922

odhcpd is the DHCPv6, DHCPv4, and router-advertisement server used by OpenWrt. In commit cfddd56 and earlier, an unauthenticated host on the same link can first obtain two bindings through normal DHCPv6 SOLICIT and REQUEST exchanges and then send a crafted RENEW containing multiple IANA options. ...

AZL-108060 CVE-2026-103658 affecting package aspell 0.60.8.1-1

GNU Aspell 0.60.8.2 first vulnerable version is not known contains a heap-based buffer overflow write CWE-122 in its read-only dictionary loader. String::reserve in common/string.hpp computes its capacity check with a signed int ints + 1, so a requested size of 0x7FFFFFFF wraps negative and the...

DEBIAN-CVE-2026-103658

GNU Aspell 0.60.8.2 first vulnerable version is not known contains a heap-based buffer overflow write CWE-122 in its read-only dictionary loader. String::reserve in common/string.hpp computes its capacity check with a signed int ints + 1, so a requested size of 0x7FFFFFFF wraps negative and the...

CVE-2026-103658

GNU Aspell 0.60.8.2 first vulnerable version is not known contains a heap-based buffer overflow write CWE-122 in its read-only dictionary loader. String::reserve in common/string.hpp computes its capacity check with a signed int ints + 1, so a requested size of 0x7FFFFFFF wraps negative and the...

UBUNTU-CVE-2026-103658

GNU Aspell 0.60.8.2 first vulnerable version is not known contains a heap-based buffer overflow write CWE-122 in its read-only dictionary loader. String::reserve in common/string.hpp computes its capacity check with a signed int ints + 1, so a requested size of 0x7FFFFFFF wraps negative and the...