EUVD-2009-5119

Green Dam Youth Escort version 3.17 is vulnerable to a stack-based buffer overflow when processing overly long URLs. The flaw resides in the URL filtering component, which fails to properly validate input length before copying user-supplied data into a fixed-size buffer. A remote attacker can...

CVE-2025-5548

💣 Exploit Development - Buffer Overflow This repository documents the full process of exploiting a Buffer Overflow vulnerability, following a structured methodology from initial analysis to execution flow control. 🎯 Objective The goal of this phase is to develop a functional exploit that allows...

CVE-2025-23247

CVE-2025-23247 Epic Collab with @reubensammut : as alaways : wip for CVE-2025-23247 . ATM just crash PoC which shows we control buffer and offset, so we got aaw. Bug from https://talosintelligence.com/vulnerabilityreports/TALOS-2025-2151 checksec ./cuobjdump '/home/vlad/cuobjdump' Arch:...

Scalar-Venom-Attack

This paper analyzes cryptographic vulnerabilities discovered in modern cryptographic key management infrastructure, with a particular focus on critical flaws in the architecture of hardware security modules HSMs when handling elliptic curve private keys. The study focuses on a class of attacks th...

CVE-2025-5548

🛡️ CVE-2025-5548 – FreeFloat FTP Server Buffer Overflow Exploit 📌 Overview This repository documents the discovery and exploitation of a stack-based buffer overflow vulnerability in the FreeFloat FTP Server application. The vulnerability resides in the handling of the USER command, where unsafe...

FreeRDP: FreeRDP: Remote code execution or client crash via malicious TS Gateway

A flaw was found in FreeRDP. FreeRDP clients using TS Gateway are vulnerable to a heap-buffer-overflow. A malicious gateway can send a specially crafted response fragment, causing the client to write beyond its allocated buffer. This can lead to a client crash, resulting in a Denial of Service Do...

CVE-2026-103227

A weakness has been identified in GPAC up to 26.07.0. Affected by this issue is the function gfdashresolveurl of the file src/mediatools/dashclient.c of the component DASH Client. This manipulation causes buffer overflow. The attack is possible to be carried out remotely. Upgrading to version...

openSUSE 16 Security Update : python-pymongo (openSUSE-SU-2026:22003-1)

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:22003-1 advisory. Changes in python-pymongo: - CVE-2026-96749: integer overflow in BSON document encoding allows an unprivileged user to write outside the bounds ...

SUSE SLES15: libpython2_7-1_0 / python / python-base / python-curses / etc (SUSE-SU-2026:4411-1)

The remote SUSE Linux SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4411-1 advisory. - CVE-2026-6879: quadratic behavior in xml.etree.ElementPath index predicates can lead to a denial of service via high CPU usage bsc1273148. -...

Apache HTTP Server 2.4.68 mod_vhost_alias Stack Overflow

Apache HTTP Server versions through 2.4.68 contain a stack-based buffer overflow in modvhostalias when VirtualDocumentRoot uses a hostname format specifier and LimitRequestFieldSize is raised above the default. The supplied tool performs a non-intrusive version check using the Server header...

openSUSE 16 Security Update : chromium (openSUSE-SU-2026:21987-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21987-1 advisory. Changes in chromium: - Chromium 154.0.8037.57 boo1282334: CVE-2026-95350: Buffer overflow in ANGLE CVE-2026-95357: Out of bounds write in GPU...

UBUNTU-CVE-2026-103226

A vulnerability was identified in Artifex Ghostscript up to 10.09.0. Affected is the function type1callsubr of the file devices/vector/gdevpsfx.c of the component Pdfwrite. The manipulation leads to stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit is publicl...

Rocky Linux 10.2 [CIQ] Security Update: gvfs / gvfs-client / gvfs-client-debuginfo / gvfs-debuginfo / etc Multiple Vulnerabilities (crlsa-2026_73998)

The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202673998 advisory. gvfs: SFTP: heap-based buffer overflow in readreply CVE-2026-84268 gvfs: gvfs-admin socket ownership race permits local root CVE-2026-88924 Tenable has...

Linux Distros Unpatched Vulnerability : CVE-2026-103680

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in tnef. A heap-based buffer overflow can occur in the findfreenumber function when generating numbered backup suffixes for duplicate filenames...

MiracleLinux 9 : gvfs-1.48.1-8.el9_8.1 (AXSA:2026-1955:04)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1955:04 advisory. gvfs: SFTP: heap-based buffer overflow in readreply CVE-2026-84268 gvfs: gvfs-admin socket ownership race permits local root CVE-2026-88924 Tenable...

openSUSE 16: cross-aarch64-glibc-devel / cross-ppc64le-glibc-devel / etc (openSUSE-SU-2026:21968-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21968-1 advisory. - CVE-2026-6368: invalid free via wordexp WRDEAPPEND rollback bsc1274726. - CVE-2026-6791: stack overflow in wordexp tilde expansion bsc1274723....

PT-2026-104205

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.25.0 Description A stack-based buffer overflow and an incorrect bitwise shift of integer occur in the Apache Thrift C++ THeaderProtocol. A stack-based buffer overflow happens when a program writes more data to...

ROS-20261002-73-0070

The vulnerability of regular expression functions in the PostgreSQL database management system is related to buffer overflows in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2026-103226

A vulnerability was identified in Artifex Ghostscript up to 10.09.0. Affected is the function type1callsubr of the file devices/vector/gdevpsfx.c of the component Pdfwrite. The manipulation leads to stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit is publicl...

CVE-2026-103242

A heap-based buffer overflow flaw was found in rpm. RPMTAGFILESIGNATURES in a crafted, unsigned RPM package's main header is declared with the wrong header type, causing hex2binv to allocate a one-byte buffer and then write the tag's attacker-controlled, hex-decoded content — of attacker-chosen...