CVE-2015-8088

CVE-2015-8088 PoC代码来源。 CVE详情： https://vulners.com/cve/CVE-2015-8088 漏洞详情： http://kernfunny.org/blog/cve-2015-8088-heap-based-buffer-overflow-in-the-hifi-driver-of-huawei-smart-phone.html...

UnjailMe

UnjailMe 一个基于以下内容的沙箱逃逸： Rani Idan（Zimperium）的概念验证 CVE-2018-4087 @cheesecakeufo 的 securityd 溢出概念验证（零日漏洞，无已知 CVE，感谢 Abraham！） 关于 ZIMPERIUM PoC Rani 使用了 Jonathan Levine 的 sbtool 来找出沙箱内可通信的服务。 然后他在 bluetoothd 下发现了更多内容，并设置了拦截发送至该服务及来自该服务的消息的代码。 通过这样做，他发现可以劫持许多守护进程的会话，并泄露客户端端口。 由此，他发现可以为客户端到 bluetoothd...

CVE-2025-4255---Buffer-Overflow

PCMan FTP Server 2.0.7 - Stack-Based Buffer Overflow A comprehensive proof-of-concept exploit tool suite, and cross-platform analysis targeting PCMan FTP Server v2.0.7 CVE-2025-4255. This repository documents the progress and efforts required to discover a protocol crash, calculate raw memory...

cve-2024-49113-ldap_nightmare_reproduction

CVE-2024-49113 — LDAP Nightmare Ejecución remota de código en el cliente LDAP de Windows desbordamiento de búfer basado en montón Campo| Valor ---|--- CVE| CVE-2024-49113 Alias| LDAP Nightmare CVSS 3.1| 9.8 — CRÍTICO CWE| CWE-122 — Desbordamiento de búfer basado en montón Descubierto| SafeBreach...

tmux-fuzzing

Laboratorio de Fuzzing: Mejorando el Fuzzing para tmux Seguridad de Software @ EPFL, Primavera 2025 Resumen En este laboratorio, mejoramos los esfuerzos de fuzzing para el multiplexor de terminal tmux dentro de la infraestructura OSS-Fuzz de Google. Primero establecimos una línea base evaluando l...

cve-2023-33476

CVE-2023-33476 ReadyMedia MiniDLNA versiones desde 1.1.15 hasta 1.3.2 es vulnerable a un desbordamiento de búfer. La vulnerabilidad es causada por una lógica de validación incorrecta al manejar peticiones HTTP que usan codificación de transferencia por fragmentos. Esto provoca que otro código...

CVE-2022-40363

CVE-2022-40363 Un desbordamiento de búfer en el componente nfcdeviceloadmifareuldata de Flipper Devices Inc., Flipper Zero anterior a v0.65.2 permite a los atacantes causar una Denegación de Servicio DoS mediante un archivo NFC manipulado. autenticación| complejidad| vector ---|---|--- no...

CVE-2026-79113

OpenAPV before 1.1.1.0 has a readbitstream heap-based buffer overflow...

CVE-2026-63292

⚠️ CVE-2026-63292 — Vulnerabilidad de seguridad en Apache HTTP Server 🔐 --- 🔎 Descripción general CVE-2026-63292 es una vulnerabilidad de desbordamiento de búfer basado en pila que afecta al módulo modvhostalias de Apache HTTP Server. El problema puede desencadenarse bajo configuraciones...

EUVD-2026-91869

OpenAPV before 1.1.1.0 has a readbitstream heap-based buffer overflow...

CVE-2026-79113

OpenAPV before 1.1.1.0 has a readbitstream heap-based buffer overflow...

CVE-2026-79113

The software OpenAPV (versions prior to 1.1.1.0 ) is vulnerable to a heap-based buffer overflow within the read_bitstream function. This vulnerability is associated with CWE-190 (Integer Overflow or Wraparound). The impact of this flaw is classified as MEDIUM severity with a CVSS v4.0 score of 5....

CVE-2026-79113

OpenAPV before 1.1.1.0 has a readbitstream heap-based buffer overflow...

CVE-2026-79113

OpenAPV before 1.1.1.0 has a readbitstream heap-based buffer overflow...

CVE-2019-20326

CVE-2019-20326 GNOME gThumb 和 Linux Mint Pix 使用 cairoio 模块通过 Cairo 图形库显示多种图像格式。在 gThumb 版本 3.8.3 和 Pix 版本 2.4.5 中，cairoio 容易受到堆缓冲区溢出的影响，通过一个宽度或高度大于 32767 像素的 JPEG 图像。该漏洞存在于函数 cairoimagesurfacecreatefromjpeg 中，位于 extensions/cairoio/cairo-image-surface-jpeg.c。 cairoio 支持的最大 JPEG 尺寸为 32767 x 32767...

CVE-2026-17544-PoC

CVE-2026-17544 — PHP bcmath bccomp: escritura fuera de límites Stack Smashing CVSS 9.8 Crítico · CWE-787 · GHSA-x692-q9x7-8c3f Resumen bcstr2num en ext/bcmath/libbcmath/src/str2num.c libbcmath integrado, PHP 8.4+ contiene una escritura fuera de límites por desfase de N off-by-N. Cuando la scale...

Linux Distros Unpatched Vulnerability : CVE-2026-103227

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A weakness has been identified in GPAC up to 26.07.0. Affected by this issue is the function gfdashresolveurl of the file src/mediatools/dashclient.c of the...

SUSE SLES15 Security Update : openssl-3-livepatches (SUSE-SU-2026:4418-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2026:4418-1 advisory. This update for openssl-3-livepatches fixes the following issue: - CVE-2026-84782: DTLS Retransmits Handshake Messages From a Stale Buffer Offset...

RockyLinux 9 : libvirt (RLSA-2026:74424)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:74424 advisory. libvirt: swtpm privilege escalation via symlink following CVE-2026-63622 libvirt: Integer overflow in NodeGetFreePages RPC handler leading to heap buffe...

Fedora 43 : unbound (2026-41f949afc4)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-41f949afc4 advisory. Update to 1.26.1 rhbz2535076 Security fix list from upstream: - Fix CVE-2026-81642, Heap buffer overflow and possible Remote Code Execution when...