EUVD-2026-91586

Stack-based Buffer Overflow, Integer Overflow or Wraparound vulnerability in Apache Thrift php bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

CVE-2026-66837 Apache Thrift: PHP accelerator sizes a stack buffer from a wire-controlled string length

Stack-based Buffer Overflow, Integer Overflow or Wraparound vulnerability in Apache Thrift php bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

CVE-2026-66837

A flaw exists in the Apache Thrift PHP bindings (versions before 0.25.0 ) where an integer overflow allows a wire-controlled string length to improperly size a stack buffer. This leads to a stack-based buffer overflow when processing specially crafted data. A remote, unauthenticated attacker can ...

CVE-2026-83632

Versions of Apache Thrift prior to 0.25.0 are vulnerable to a Heap-based buffer overflow , Integer overflow or wraparound , and Allocation of resources without limits or throttling . Specifically, the C++ THttpTransport component can grow its line buffer without bound. This vulnerability could le...

EUVD-2026-91583

Allocation of resources without limits or throttling, Integer overflow or wraparound, Heap-based buffer overflow vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

CVE-2026-83632 Apache Thrift: C++ THttpTransport grows its line buffer without bound

Allocation of resources without limits or throttling, Integer overflow or wraparound, Heap-based buffer overflow vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

EUVD-2026-91579

A vulnerability was detected in Tenda AC9 15.03.02.13. Affected is an unknown function of the file /goform/fastsettinginternetset of the component POST Request Handler. Performing a manipulation of the argument netWanType results in stack-based buffer overflow. The attack is possible to be carrie...

CVE-2026-104611

A stack-based buffer overflow vulnerability exists in the Tenda AC9 (version 15.03.02.13). The flaw is located within an unknown function in the /goform/fast_setting_internet_set file of the POST Request Handler component. By manipulating the netWanType argument, an attacker can trigger the overf...

EUVD-2026-91570

A security vulnerability has been detected in Tenda HG7, HG9 and HG10 300001138enxpon. This impacts the function boaGetVar of the file /boaform/formLoopBack of the component Boa Web Server. Such manipulation of the argument Ethtype leads to stack-based buffer overflow. The attack can be executed...

CVE-2026-104610

A stack-based buffer overflow vulnerability exists in the Boa Web Server component of Tenda HG7, HG9, and HG10 (300001138_en_xpon) devices. The issue is triggered by manipulating the Ethtype argument within the boaGetVar function of the /boaform/formLoopBack file. This vulnerability can be exploi...

CVE-2026-104610 Tenda HG7/HG9/HG10 Boa Web Server formLoopBack boaGetVar stack-based overflow

A security vulnerability has been detected in Tenda HG7, HG9 and HG10 300001138enxpon. This impacts the function boaGetVar of the file /boaform/formLoopBack of the component Boa Web Server. Such manipulation of the argument Ethtype leads to stack-based buffer overflow. The attack can be executed...

CVE-2026-41089-PoC

CVE-2026-41089 — LongLogon 크래셔 PoC Windows Server 2025의 Netlogon 서비스에서 발생하는 인증 전 스택 버퍼 오버플로우입니다. 네트워크상의 어떤 호스트에서든 단일 CLDAP 패킷UDP/389 하나면 충분합니다: lsass.exe가 STATUSSTACKBUFFEROVERRUN0xc0000409으로 종료되고 도메인 컨트롤러가 재부팅됩니다. 구성 요소: netlogon.dll, NlGetLocalPingResponse / BuildSamLogonResponse 벡터: UDP/389 패킷...

CVE-2026-36980-Kernel-BSOD-DoS-PoC

CVE-2026-36980-Kernel-BSOD-DoS-PoC 프로젝트 날짜: 2026년 2월 / pwdrvio.sys 커널 드라이버의 IOCTL 핸들러에서 버퍼 오버플로우 취약점을 발견했습니다. 이 취약점을 통해 권한이 없는 로컬 공격자가 커널 풀 메모리를 손상시켜 즉각적인 시스템 충돌BSOD 및 서비스 거부Denial of Service를 유발할 수 있습니다. 2026-02-09 공급업체에 통보 2026-03-05 공급업체가 인정 2026-03-05 MITRE에 CVE 요청 2026-05-10 90일 조정 공개 기간 이후 ...

AZL-105392 CVE-2026-93925 affecting package thrift 0.24.0-1

Stack-based buffer overflow, Incorrect bitwise shift of integer vulnerability in Apache Thrift C++ THeaderProtocol. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

CVE-2026-93925

Stack-based buffer overflow, Incorrect bitwise shift of integer vulnerability in Apache Thrift C++ THeaderProtocol. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

CVE-2026-91135

Heap-based buffer overflow vulnerability in Apache Thrift C++ THeaderTransport. When an application enables the ZLIB transform for the frames it sends, THeaderTransport::transform copies the compressed frame into the write buffer without making sure it fits. Data that does not compress, such as...

AZL-105425 CVE-2026-91135 affecting package thrift 0.24.0-1

Heap-based buffer overflow vulnerability in Apache Thrift C++ THeaderTransport. When an application enables the ZLIB transform for the frames it sends, THeaderTransport::transform copies the compressed frame into the write buffer without making sure it fits. Data that does not compress, such as...

CVE-2026-86325

A stack-based buffer overflow vulnerability exists in protocol gateways' account management interface. The vulnerability is caused by insufficient length validation of the accountname parameter when processing account management requests. An attacker authenticated as a read-only user to the...

CVE-2026-93925

A flaw was found in Apache Thrift. An incorrect bitwise integer shift in the C++ THeaderProtocol implementation can cause a stack-based buffer overflow. A remote, unauthenticated attacker could exploit this vulnerability by sending specially crafted input, resulting in a Denial of Service DoS...

CVE-2026-27654-PoC

CVE-2026-27654 – nginx ngxhttpdavmodule DAV Alias 경로 처리 PoC 이 저장소는 nginx의 ngxhttpdavmodule에 존재하는 힙 오버플로heap-overflow 취약점인 CVE‑2026‑27654 에 대한 개념 증명PoC 익스플로잇을 제공합니다. 이 버그는 특수하게 조작된 Destination 헤더와 alias 기반 location을 사용하는 MOVE/COPY 요청을 처리할 때 발생하는 sizet 언더플로underflow에서 비롯됩니다. ⚠️ 면책 조항: 이 도구는 공인된 보안 연...