CVE-2026-80671

In the Linux kernel, the following vulnerability has been resolved: perf sched: Fix registerpid overflow, strcpy, and BUGON registerpid has several issues when processing untrusted perf.data: 1. Integer overflow: pid + 1 sizeofstruct taskdesc can wrap to a small value on 32-bit systems when pid i...

CVE-2026-80617

In the Linux kernel, the following vulnerability has been resolved: net: airoha: fix foechecktime allocation size foechecktime is declared as u16 pointer but was allocated with only ppenumentries bytes instead of ppenumentries sizeofu16. When airohappefoeverifyentry is called with hash =...

CVE-2026-42945-nginx-rift-poc

NGINX Rift — CVE-2026-42945 RCE proof-of-concept for CVE-2026-42945 , a critical heap buffer overflow in NGINX's ngxhttprewritemodule introduced in 2008. Enables unauthenticated remote code execution against servers using rewrite ... ?... + set capture combinations. Original vulnerability...

CVE-2026-80617

CVE-2026-80617 affects the Linux kernel's airoha network driver . The vulnerability is a heap buffer overflow in foe_check_time, which is declared as a u16 pointer but was allocated with only ppe_num_entries bytes instead of ppe_num_entries * sizeof(u16). When airoha_ppe_foe_verify_entry() is cal...

cve-2021-3156

CVE-2021-3156 -- Baron Samedit Vulnerability Environment Create the image using Dockerfile root@kitploit: docker build -t cve-2021-3156:ubuntu2004 . Create a container using the image root@kitploit: docker run --rm -it cve-2021-3156:ubuntu2004 /bin/bash Vulnerability Cause In Sudo versions prior ...

CVE-2025-27363-proof-of-concept

Proof-of-concept for CVE-2025-27363 that crashes FreeType 2.13.0. This modifies Roboto Flex, a variable font, so that the "%" character glyph 8 is now a composite glyph with 0xfffd subglyphs. Rendering the edited font with FreeType 2.13.0 the last version before the fix crashes, with ASAN detecti...

CVE-2018-4407-iOS-exploit

CVE-2018-4407 iOS Attack Exploit CVE-2018-4407 is a Simple and Very Fast BOF attack Against iOS/mac that can lead to DOS. The vulnerability is a heap buffer overflow in the networking code in the XNU operating system kernel. XNU is used by both iOS and macOS, which is why iPhones, iPads, and...

PoC-in-GitHub

PoC in GitHub 2026 CVE-2026-0009 2026-06-01 In multiple locations, there is a possible tapjacking due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2023-40031

CVE-2023-40031 Analysis and Reproduction of notepad++ Heap Buffer Overflow Vulnerability CVE-2023-40031 Vulnerability Overview Notepad++ is a well-known open-source code editor that runs on Windows and supports multiple programming languages. Recently, security researchers examined Notepad++ and...

nginx-rce-cve-2026-42945

5. CVE-2026-42945 - RCE Crítico en NGINX CVSS 9.2 Clasificación Categoría: 0-Day / Ejecución Remota de Código CVE: CVE-2026-42945 CVSS: 9.2 Crítico Fecha de descubrimiento: 12 de mayo de 2026 Fecha de parche: Mayo de 2026 parche de seguridad trimestral de F5 Fuente: GitHub...

one-multiply-too-many-cve-2026-70638-llama-cpp-android-jni-integer-overflow

CVE-2026-70638 - Estouro de Inteiro no JNI LLaMA-Android do llama.cpp PoC complementar para o artigo da Hunt-Benito "Uma Multiplicação a Mais: CVE-2026-70638 — Estouro de Inteiro na Alocação de Heap do JNI Android do llama.cpp" →...

CVE-2025-21333

CVE-2025-21333 Hyper-V NT Kernel Integration VSP vkrnlintvsp.sys Paged Pool heap overflow → Local Privilege Escalation LPE. This directory contains lab PoC source code based on MrAle98/CVE-2025-21333-POC, including a local patch. 1. Vulnerability Summary Item| Content ---|--- CVE| CVE-2025-21333...

CVE-2018-1000030

CVE-2018-1000030 Python 2.7.14 is vulnerable to a Heap-Buffer-Overflow as well as a Heap-Use-After-Free. Python versions prior to 2.7.14 may also be vulnerable and it appears that Python 2.7.17 and prior may also be vulnerable however this has not been confirmed ERRASANTHREADC18...

CVE-2021-3156

Título del Proyecto Generador de exploit para CVE-2021-3156 sudo Instalación 1. Instala dependencias ./install.sh 2. Ejecuta generador de exploit: ./run.sh 3. Si la versión de sudo del sistema es vulnerable se genera un exploit para la versión instalada 4. El exploit se genera en exploit.c y el...

ai-vuln-rediscovery-nginx-cve-2026-42945

nginx में CVE-2026-42945 की AI-सहायता प्राप्त पुनःखोज यह रिपॉज़िटरी nginx ngxhttprewritemodule के विरुद्ध एक पुनरुत्पादनीय AI-सहायता प्राप्त भेद्यता पुनःखोज प्रयोग का दस्तावेज़ीकरण करता है, जिसे बाद में CVE-2026-42945 से जोड़ा गया। यह प्रयोग जानबूझकर संकीर्ण है। असुरक्षित फ़ाइल,...

CVE-2026-42533-POC

CVE-2026-42533 Overflow del buffer heap e perdita di informazioni dall'heap pre-autenticazione in nginx, causati dalla mancata salvataggio/ripristino dello stato delle catture PCRE tra le due passate del motore degli script. Una variabile map basata su regex valutata tra due riferimenti di cattur...

CVE-2024-26229

must be only the translated markdown. Let's write it. CVE-2024-26229 Vulnerabilità di elevazione dei privilegi del servizio CSC di Windows. Quando un programma scrive dati in un buffer che superano la sua capacità di gestione, si verifica un buffer overflow basato su heap, causando il trabocco di...

EUVD-2026-67305

A heap-based buffer overflow vulnerability in Fireware OS's iked process allows an authenticated administrator to crash the IKE daemon iked, resulting in a denial of service, by saving a specially crafted configuration...

EUVD-2026-67361

A heap-based buffer overflow vulnerability exists in openNDS before 11.0.0 that allows an unauthenticated attacker on the captive portal network to crash the openNDS daemon denial of service and potentially achieve remote code execution. This is in httpmicrohttpd.c...

CVE-2022-30114

Fastweb FastGate 'cmproxy' Pufferüberlauf CVE-2022-30114 Einleitung Dieses Skript ist ein Proof of Concept PoC für CVE-2022-30114 und verursacht einen Neustart der Fastweb FastGate Heimrouter, sowohl der GPON- als auch der VDSL2-Version. CVE-2022-30114 ist ein heap-basierter Pufferüberlauf in der...