CVE-2025-27363-proof-of-concept

Концепт-эксплойт для CVE-2025-27363, который приводит к падению FreeType 2.13.0. Он изменяет Roboto Flex — вариативный шрифт, — так что символ «%» глиф 8 теперь является составным глифом с субглифами 0xfffd. Отрисовка изменённого шрифта с помощью FreeType 2.13.0 последней версии перед исправление...

EUVD-2026-94985

IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 is vulnerable to a buffer overflow, caused by improper bounds checking. A local user could overflow the buffer and execute arbitrary code on the system...

CVE-2026-14991

IBM DataPower Gateway versions 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 are vulnerable to a buffer overflow (CWE-787: Out-of-bounds Write). This flaw is caused by improper bounds checking , which could allow a local user to overf...

CVE-2026-14991 IBM DataPower Gateway Out-of-bounds Write

IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 is vulnerable to a buffer overflow, caused by improper bounds checking. A local user could overflow the buffer and execute arbitrary code on the system...

EUVD-2026-94984

IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote authenticated attacker to execute arbitrary code due to a buffer overflow...

CVE-2026-15781

IBM DataPower Gateway versions 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 are vulnerable to a stack-based buffer overflow (CWE-121). This flaw could allow a remote authenticated attacker to execute arbitrary code on the system. IBM...

CVE-2026-15781 IBM DataPower Gateway Buffer Overflow

IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote authenticated attacker to execute arbitrary code due to a buffer overflow...

EUVD-2026-94970

IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to a heap-based buffer overflow...

CVE-2026-15824

The IBM DataPower Gateway is vulnerable to a heap-based buffer overflow (CWE-787: Out-of-bounds Write), which could allow a remote attacker to cause a denial of service . Affected versions include 10.5.0.0 through 10.5.0.22 , 10.6.1 through 10.6.6 , 10.6.0.0 through 10.6.0.10 , and 11.0.0.0 throu...

CVE-2026-15824 IBM DataPower Gateway Denial of Service

IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to a heap-based buffer overflow...

EUVD-2026-94965

IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to a buffer overflow...

CVE-2026-16164

The IBM DataPower Gateway is vulnerable to an out-of-bounds write (CWE-787) caused by a buffer overflow . This flaw impacts versions 10.5.0.0 through 10.5.0.22 , 10.6.1 through 10.6.6 , 10.6.0.0 through 10.6.0.10 , and 11.0.0.0 through 11.0.0.2 . A remote attacker can exploit this vulnerability t...

CVE-2026-16164 IBM DataPower Gateway Out-of-bounds Write

IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to a buffer overflow...

CVE-2024-46451

CVE-2024-46451 TOTOLINK AC1200 T8 Эксплойт - Уязвимость переполнения буфера Этот репозиторий содержит Python-скрипт, который эксплуатирует уязвимость переполнения буфера в TOTOLINK AC1200 T8 версия v4.1.5cu.861B20230220 в функции setWiFiAclRules через параметр desc. Детали уязвимости Тип уязвимос...

CVE-2026-16179

IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow an attacker to cause a heap buffer underwrite and potentially crash the service...

CVE-2026-16170

IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to a heap buffer overflow...

CVE-2018-4407-iOS-exploit

Эксплойт атаки CVE-2018-4407 на iOS CVE-2018-4407 — это простая и очень быстрая BOF-атака против iOS/mac, которая может привести к DOS. Уязвимость представляет собой переполнение буфера в куче в сетевом коде ядра операционной системы XNU. XNU используется как в iOS, так и в macOS, поэтому затрону...

CVE-2026-39259

SmallerC scanf s Stack.md SmallerC — переполнение буфера стека при scanf %s Проект: https://github.com/alexfru/SmallerC Реализация scanf в SmallerC не налагает верхнюю границу на чтение строк, когда %s или % используется без явной ширины поля в строке формата. Среда выполнения продолжает запись в...

Low: Red Hat Security Advisory: libxml2 security update

An update for libxml2 is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available...

libxml2: Stack Buffer Overflow in xmllint Interactive Shell Command Handling

A flaw was found in the interactive shell of the xmllint command-line tool, used for parsing XML files. When a user inputs an overly long command, the program does not check the input size properly, which can cause it to crash. This issue might allow attackers to run harmful code in rare...