CVE-2026-109940

FreeRDP version 3.0.0-beta1 before 3.32.0 on Unix builds with PKCS#11 support is vulnerable to a stack-based buffer overflow . The issue resides in the wprintKeyName() function within WinPR's NCrypt PKCS#11 provider, where a key's CKA_ID (up to 64 bytes) is hex-encoded into a fixed 128-byte stack...

CVE-2026-109940 FreeRDP 3.0.0-beta1 before 3.32.0 Stack Buffer Overflow via PKCS#11 Key Name

FreeRDP 3.0.0-beta1 before 3.32.0 on Unix builds with PKCS11 support has a stack-based buffer overflow in wprintKeyName in WinPR's NCrypt PKCS11 provider. It hex-encodes a key's CKAID, which can be up to 64 bytes, into a fixed 128-byte stack buffer. An attacker supplying a malicious PKCS11 token ...

CVE-2026-109940 FreeRDP 3.0.0-beta1 before 3.32.0 Stack Buffer Overflow via PKCS#11 Key Name

FreeRDP 3.0.0-beta1 before 3.32.0 on Unix builds with PKCS11 support has a stack-based buffer overflow in wprintKeyName in WinPR's NCrypt PKCS11 provider. It hex-encodes a key's CKAID, which can be up to 64 bytes, into a fixed 128-byte stack buffer. An attacker supplying a malicious PKCS11 token ...

CVE-2026-108573

A flaw was found in assimp. A remote attacker could exploit this vulnerability by providing a specially crafted Polygon File Format PLY file, triggering an out-of-bounds read in the buffer parsing mechanism. This issue can cause an application crash, resulting in a Denial of Service DoS, or...

CVE-2026-9256-POC

CVE-2026-9256-POC CVE-2026-9256 Nginx heap buffer overflow POC...

CVE-2009-3999-HP-Power-Manager-4.2-Build-7-Buffer-Overflow

As part of my OSCP preparation I came across CVE-2009-3999 HP Power Manager 4.2 Build 7 Buffer Overflow exploit. This latest script is updated to resolve Python 3 compatibility issues regarding string and byte handling, ensuring the payload is transmitted as raw binary to avoid memory mangling...

CVE-2026-42945

CVE-2026-42945 — NGINX Rift Heap Buffer Overflow in NGINXngxhttprewritemodule Metric| Value ---|--- CVSS v4.0| 9.2 Critical CVSS v3.1| 8.1 High — AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CWE| 122 — Heap-based Buffer Overflow Introduced| June 2008 — v0.6.27 Discovered| April 2026 — DepthFirst Research...

CVE-2026-38422

CVE-2026-38422: Remote Code Execution via Combined Buffer Overflows in Tasmota fetchjpg CVE: CVE-2026-38422 Severity: Critical CVSS 9.8 Product: Arendst Tasmota Affected Version: = 15.3.0.3 File: tasmota/tasmotaxdrvdriver/xdrv10scripter.ino Function: fetchjpg Author: Saidakbarxon Maxsudxonov...

empty_list

emptylist - exploit for p0 issue 1564 CVE-2018-4243 iOS 11.0 - 11.3.1 kernel r/w @i41nbeer BUG: getvolattrlist takes a user controlled bufferSize argument via the fgetattrlist syscall. When allocating a kernel buffer to serialize the attr list to there's the following comment: / Allocate a target...

CVE-2026-67456

NVIDIA Warp is affected by a heap-based buffer overflow vulnerability. A successful exploit of this issue could result in a denial of service impact. No specific versions, root causes, or remediation details are provided in the documents. Exploitation details are not provided.

CVE-2026-67456

NVIDIA Warp contains a vulnerability where an attacker could cause a heap-based buffer overflow. A successful exploit of this vulnerability might lead to denial of service...

CVE-2026-65148

The NVIDIA DALI library contains a stack-based buffer overflow vulnerability. A successful exploit of this flaw could allow an attacker to achieve code execution , information disclosure , data tampering , and denial of service . The provided documents do not include specific details regarding th...

CVE-2026-65148

NVIDIA DALI contains a vulnerability where an attacker could cause a stack-based buffer overflow. A successful exploit of this vulnerability might lead to code execution, information disclosure, data tampering, and denial of service...

CVE-2026-11499

🚨 CVE-2026-11499 Stack-Based Buffer Overflow in Tenda HG7 / HG9 / HG10 Routers 📖 Overview CVE-2026-11499 is a reported stack-based buffer overflow vulnerability affecting several Tenda router models , including: HG7 HG9 HG10 Successful exploitation may allow an attacker to trigger a crash, denial...

CVE-2026-90052

A flaw was found in the Linux kernel's dm-integrity component. This vulnerability arises from an incorrect checksum calculation during the discard operation, specifically when the tag size is smaller than the digest size. This can lead to a buffer overflow, where data is written beyond the...

CVE-2026-38427

CVE-2026-38427: Integer Wraparound → Heap Buffer Overflow in Tasmota fetchjpg CVE: CVE-2026-38427 Severity: Critical CVSS 9.8 Product: Arendst Tasmota Affected Version: = 15.3.0.3 File: tasmota/tasmotaxdrvdriver/xdrv10scripter.ino Function: fetchjpg — case 2 MJPEG frame fetch Author: Saidakbarxon...

RLSA-2026:80498 Important: flatpak security update

Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. Security Fixes: flatpak: Flatpak: Arbitrary code execution via missing symlink protection CVE-2026-90616 flatpak: flatpak: Arbitrary write access as root via extra-data extraction CVE-2026-96275...

RLSA-2026:80497 Important: flatpak security update

Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. Security Fixes: flatpak: Flatpak: Arbitrary code execution via missing symlink protection CVE-2026-90616 flatpak: flatpak: Arbitrary write access as root via extra-data extraction CVE-2026-96275...

RLSA-2026:80514 Moderate: compat-openssl11 security update

The OpenSSL toolkit provides support for secure communications between machines. This version of OpenSSL package contains only the libraries from the 1.1.1 version and is provided for compatibility with previous releases. Security Fixes: openssl: heap buffer overflow in CMS key unwrapping...

compat-openssl11 security update

An update is available for compat-openssl11. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The OpenSSL toolkit provides support for secure communications betwe...