EUVD-2026-80050

Heap-based buffer overflow in Microsoft Edge Chromium-based allows an unauthorized attacker to execute code over a network...

EUVD-2026-80049

A flaw was found in the file-psd plugin in GIMP. When generating a thumbnail preview for a specially crafted PSD Photoshop Document image file, an integer overflow occurs during the multiplication of values from an embedded JPEG header. This leads to an undersized heap allocation, resulting in a...

EUVD-2026-80013

Integer overflow or wraparound vulnerability in Samsung Opensource Escargot allows attackers with write access to the bytecode-cache directory to cause a heap-based buffer overflow and denial of service via a crafted cache file. This issue affects Escargot: ac94df78493ee6fede286620d94f724e46b4d23...

CVE-2026-69486

Heap-based buffer overflow in Microsoft Edge Chromium-based allows an unauthorized attacker to execute code over a network...

CVE-2026-92248

A flaw was found in the file-psd plugin in GIMP. When generating a thumbnail preview for a specially crafted PSD Photoshop Document image file, an integer overflow occurs during the multiplication of values from an embedded JPEG header. This leads to an undersized heap allocation, resulting in a...

CVE-2026-92248 Gimp: integer overflow when generating a thumbnail preview for a psd file

A flaw was found in the file-psd plugin in GIMP. When generating a thumbnail preview for a specially crafted PSD Photoshop Document image file, an integer overflow occurs during the multiplication of values from an embedded JPEG header. This leads to an undersized heap allocation, resulting in a...

CVE-2026-92248

CVE-2026-92248 is a heap-based buffer overflow in the file-psd plugin of GIMP . When GIMP generates a thumbnail preview for a specially crafted PSD file, an integer overflow occurs during multiplication of values from an embedded JPEG header, causing an undersized heap allocation. The subsequent ...

CVE-2026-92259

CVE-2026-92259 is an integer overflow or wraparound vulnerability in Samsung Opensource Escargot , an open-source JavaScript engine. An attacker with local write access to the bytecode-cache directory can plant a crafted cache file that triggers a heap-based buffer overflow , resulting in a denia...

cve-2021-29627

CVE-2021-29627 Algún código para desencadenar el bug incluyendo macsetfd spray. Se necesita algún spray target, sin embargo...

CVE-2026-92248

A flaw was found in the file-psd plugin in GIMP. When generating a thumbnail preview for a specially crafted PSD Photoshop Document image file, an integer overflow occurs during the multiplication of values from an embedded JPEG header. This leads to an undersized heap allocation, resulting in a...

Triple_fetch

triplefetch - ianbeer https://bugs.chromium.org/p/project-zero/issues/detail?id=1247 这是针对 CVE-2017-7047 的利用程序，该漏洞是 libxpc 中的一个逻辑错误，允许恶意消息发送者发送由共享内存支持（backed）的 xpcdata 对象。xpc 消息的消费者似乎没有预料到，当接收者正在处理 xpcdata 对象时，其缓冲区的内容可能被发送者修改。 该项目利用 CVE-2017-7047 构建了一个概念验证的远程 lldb debugserver 存根（stub），能够附加到 iOS...

CVE-2023-4911

CVE-2023-4911 - Looney Tunables Esto es una prueba de concepto por ahora bastante rudimentaria para CVE-2023-4911. Hasta ahora solo he verificado que funciona en Ubuntu 22.10 kinetic. La versión actual del exploit contiene una cantidad considerable de offsets "mágicos". Si tienes sugerencias sobr...

exploits

exploits CVE-2021-22600: Linux kernel LPE exploit CVE-2021-3156: Linux local privilege escalation through heap overflow in sudo Demo CVE-2021-3156: One shot exploit for heap overflow vulnerability in sudo CVE-2020-6507: Out of bounds write in V8. Chrome versions = 83.0.4103.97. RCE CVE-2020-16040...

CVE-2021-21974_vuln_dectection

Detector de Vulnerabilidad CVE-2021-21974 Una herramienta de seguridad basada en Python para detectar la vulnerabilidad CVE-2021-21974 en implementaciones de SLP Service Location Protocol, dirigida específicamente a sistemas VMware ESXi. Esta herramienta realiza una detección segura, sin...

CVE-2026-42945-NGINX-Rift-Toolkit

CVE-2026-42945 Nginx Rift 漏洞工具包 全面的工具包，用于扫描、修补和测试 CVE-2026-42945 —— nginx 中的严重 RCE 漏洞 目录 概述 CVE 详情 功能特点 工具包组件 系统要求 安装 使用方法 工作流程示例 安全注意事项 故障排除 贡献 概述 本工具包提供了用于扫描、修补和测试 CVE-2026-42945 的全面工具。这是一个影响 nginx 的严重远程代码执行漏洞 ，影响主版本 1.26.3 之前以及稳定版 1.24.1 之前的版本。 该漏洞在 ASLR 被禁用时，利用堆喷射技术利用畸形 HTTP/2 头部解析。 CVE 详情...

memoro

Memoro Memoro es un perfilador de montón heap altamente detallado. Memoro no solo te muestra dónde y cuándo tu programa realiza asignaciones de montón, sino que también te mostrará cómo tu programa realmente utilizó esa memoria. Memoro recopila información detallada sobre los accesos al montón,...

CVE-2023-28753

CVE-2023-28753 An integer overflow vulnerability that potentially leads to heap memory corruption. To demonstrate the heap corruption: build the ncrx server with ASAN root@kitploit: make ./ncrx 31337 advasarial client root@kitploit: python exploit.py -g | nc -u 127.0.0.1 31337...

CVE-2026-69218

Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, When Ember receives an HTTP/2 HEADERS or PUSHPROMISE frame without ENDHEADERS, H2Connection buffers the header block and subsequent CONTINUATION fragments without a size bound. A remote peer can keep an incomplete bloc...

CVE-2021-3156

CVE-2021-3156 概述 Heap-based buffer overflow in Sudo CVE-2021-3156 由于sudo转义\不当而造成的堆溢出漏洞，LPE 影响范围 从1.8.2到1.8.31p2的所有版本 从1.9.0到1.9.5p1的所有稳定版本 检测命令 sudoedit -s '' perl -e 'print "A" x 65536' 如果出现类似Segmentation fault core dumped即表明存在漏洞 相关文献...

shadow

shadow :: jemalloc 之奥秘 shadow 是一个 jemalloc 堆漏洞利用框架。它的设计目标是独立于使用 jemalloc 作为堆分配器的目标应用程序（无论是 Android 的 libc、Firefox、FreeBSD 的 libc、独立 jemalloc，还是其他任何实现）。当前版本（2.0）已在以下目标上进行了广泛测试： Android 6-9 libc（ARM32 和 ARM64） Firefox（x86 和 x86-64）运行于 Windows 和 Linux 除了工具的源代码之外，此仓库还包含关于设置 Android 用户态调试环境以使用 shadow...