Google-Nest-Cam-Bug-Disclosures

Google-Nest-Cam-Bug-Disclosures Afectados: Dropcam Pro, modelos Nest Cam Indoor/Outdoor Última compilación afectada: 205-600052 Compilación parcialmente corregida: 205-600055 ACTUALIZACIÓN La última versión de firmware 205-600055 no corrige la vulnerabilidad de desasociación WiFi en Dropcam Pro. ...

CVE-2026-95284

A flaw was found in chromium-browser. A buffer overflow vulnerability in the ANGLE graphics engine allows a remote attacker to execute arbitrary code outside the browser sandbox an isolated security environment. An attacker could exploit this vulnerability by enticing a user to visit a specially...

CVE-2026-2005

CVE-2026-2005 — Desbordamiento de búfer en el heap de pgcrypto de PostgreSQL Commit objetivo: 4b324845ba5d24682b9b3708a769f00d160afbd7 PostgreSQL 18.1 — vulnerable Resumen Campo| Detalle ---|--- CVE| CVE-2026-2005 Tipo| Desbordamiento de búfer en el heap Componente| contrib/pgcrypto/pgp-pubdec.c ...

CVE-2021-47881

CVE-2021-47881 Desbordamiento de búfer local basado en pila en dataSIMS Avionics ARINC 4.5.3 Data Device Corporation Hola, soy Kağan Çapar. En febrero de 2020 encontré un desbordamiento de búfer local basado en pila en el software de bus de datos de aviónica dataSIMS de DDC y publiqué una prueba ...

CVE-2026-103631

Buffer overflow in WebRTC in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-103631

Buffer overflow in WebRTC in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

EUVD-2026-91715

Buffer overflow in WebRTC in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-103631

Google Chrome versions prior to 154.0.8037.97 are vulnerable to a heap-based buffer overflow in WebRTC . A remote attacker can exploit this vulnerability by serving a crafted HTML page to execute arbitrary code inside the browser sandbox. This issue was reported by Xinyang Ge and is addressed in ...

CVE-2026-103631

Buffer overflow in WebRTC in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-39113

CVE-2026-39113: Desbordamiento de búfer en el montón en la extensión SQLAR opcional de SQLite Resumen ejecutivo CVE-2026-39113 es un desbordamiento de búfer en el montón en la extensión SQLAR opcional de SQLite. En una aplicación que haya cargado la extensión, un atacante que pueda invocar...

cve-2025-22457

CVE-2025-22457 模拟：基于栈的缓冲区溢出分析 本项目涉及因嵌入式系统（固件）输入验证缺失（使用 strcpy）而导致的基于栈的缓冲区溢出漏洞的实验室环境模拟、逆向工程分析及利用。 🛠️ 依赖要求 要在本地环境中运行此模拟，必须安装以下工具： Kali Linux（或类似的基于 Debian 的发行版） gcc（编译器） gdb（GNU 调试器 - 用于动态分析） python3（用于漏洞利用脚本） ⚙️ 安装与编译 为了在实验室环境中观察漏洞而不受现代操作系统保护机制（栈金丝雀、NX、PIE）的干扰，编译时需要禁用内存保护。 打开终端，使用以下命令编译源代码： gcc...

CVE-2026-66837

A flaw was found in Apache Thrift. An integer overflow within the PHP bindings leads to a stack-based buffer overflow when processing specially crafted data. A remote, unauthenticated attacker could exploit this flaw to crash the service, leading to a Denial of Service DoS...

CVE-2026-95281

A flaw was found in chromium-browser. A buffer overflow vulnerability in the Almost Native Graphics Layer Engine ANGLE allows a remote attacker to execute arbitrary code outside of the sandbox environment. This issue can be triggered when a user is convinced to view a specially crafted HTML page...

NGINX-ngx_http_rewrite_module-heap-buffer-overflow-CVE-2026-9256

CVE-2026-9256 NGINX ngxhttprewritemodule PoC 推导过程与思考 适用范围：仅用于本地靶场、授权复现环境、漏洞验证和防护规则分析。不要对未授权目标使用。本文中的 PoC 思路只验证远程可见的 NGINX worker crash 行为，不包含 RCE、ASLR 绕过或稳定利用链。 1. 漏洞背景 CVE-2026-9256 是 NGINX ngxhttprewritemodule 中的堆缓冲区溢出漏洞。漏洞触发并不是单纯访问某个固定 URI，而是依赖特定的 rewrite 配置模式：rewrite 正则中存在互相重叠的 PCRE 捕获组，并且...

AZL-105947 CVE-2026-83632 affecting package thrift 0.24.0-1

Allocation of resources without limits or throttling, Integer overflow or wraparound, Heap-based buffer overflow vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

CVE-2026-83632

Allocation of resources without limits or throttling, Integer overflow or wraparound, Heap-based buffer overflow vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

CVE-2026-66837

Stack-based Buffer Overflow, Integer Overflow or Wraparound vulnerability in Apache Thrift php bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

CVE-2026-104611

A vulnerability was detected in Tenda AC9 15.03.02.13. Affected is an unknown function of the file /goform/fastsettinginternetset of the component POST Request Handler. Performing a manipulation of the argument netWanType results in stack-based buffer overflow. The attack is possible to be carrie...

CVE-2026-104610

A security vulnerability has been detected in Tenda HG7, HG9 and HG10 300001138enxpon. This impacts the function boaGetVar of the file /boaform/formLoopBack of the component Boa Web Server. Such manipulation of the argument Ethtype leads to stack-based buffer overflow. The attack can be executed...

PoC-CVE-2025-69419

CVE-2025-69419 – OpenSSL 堆缓冲区溢出复现器 概述 此仓库包含一个针对 CVE-2025-69419 的最小概念验证复现器，该漏洞影响存在漏洞的 OpenSSL 版本。 该 PoC 演示了在处理特制的 BMPString friendlyName 时，PKCS12getfriendlyname 中报告的堆越界写入。 此项目的目标是为开发人员和安全研究人员提供一个简单的回归测试。 该 PoC 不实施漏洞利用技术 ，仅用于重现 AddressSanitizer 检测到的内存破坏。 测试版本 OpenSSL 3.0.7（ASan/UBSan 构建） 漏洞...