CVE-2026-80570

A flaw was found in the synaptics-rmi4 component of the Linux kernel. This vulnerability occurs when an error in processing a report request or command leads to an incorrect size being used for subsequent data operations. A local user could exploit this by manipulating the video format, causing t...

CVE-2026-80568

A flaw was found in the Linux kernel's synaptics-rmi4 input driver. Changing the diagnostic report type while a video stream V4L2 is active can alter the expected report size. Since V4L2 buffers are allocated based on the initial size at stream start, a larger subsequent report could lead to a he...

CVE-2019-18634-writeup

Análise do CVE-2019-18634 https://www.exploit-db.com/exploits/47995 Sudo 1.8.25p - 'pwfeedback' Buffer Overflow PoC A opção pwfeedback do sudo pode ser usada para fornecer feedback visual quando o usuário está digitando sua senha. Para cada tecla pressionada, um asterisco é impresso. Esta opção f...

CVE-2022-0185-Case-Study

CVE-2022-0185-Case-Study Questo case study è il risultato di un compito del corso ECE 9069: Introduction to Hacking : https://whisperlab.org/introduction-to-hacking/ Panoramica di CVE-2022-0185 CVE-2022-0185 è un difetto di overflow del buffer basato su heap trovato nel modo in cui la funzione...

writeup_split

Riepilogo CVE-2024-0684 Una vulnerabilità nel programma "split" di GNU coreutils permette un heap buffer overflow con dati controllati dall'utente. È stata introdotta nel commit 40bf1591bb4362fa91e501bcec7c2029c5f65a43 il 4 marzo 2023. Una correzione è stata rilasciata con il commit...

CVE-2021-3156

CVE-2021-3156 Beschreibung Sudo vor 1.9.5p2 hat einen Heap-basierten Pufferüberlauf, der eine Privilegieneskalation zu root über "sudoedit -s" und ein Befehlszeilenargument, das mit einem einzelnen Backslash-Zeichen endet, ermöglicht...

CVE-2025-54574-Squid-Heap-Buffer-Overflow

CVE-2025-54574-Squid-Heap-Buffer-Overflow Vulnerabilità trovata su Squid Proxy. CVE-2025-54574 — Overflow critico del buffer heap in Squid Proxy Questo repository documenta il processo di scoperta, analisi e divulgazione responsabile di CVE-2025-54574, un overflow critico del buffer heap in Squid...

CVE-2008-5416

CVE-2008-5416 Microsoft SQL Server spreplwritetovarbin Speicherverfälschung durch SQL-Injection Ein heap-basierter Pufferüberlauf kann auftreten, wenn die undokumentierte erweiterte gespeicherte Prozedur "spreplwritetovarbin" aufgerufen wird. Diese Sicherheitsanfälligkeit betrifft alle Versionen...

CVE-2023-4863

livello 1: craft.c - bad.webp root@kitploit: exist: docker 813b6b757038 /webp cd CVE-2023-4863 make -f makefile.unix -B fatal error: jpeglib.h: No such file or directory apt-get update apt-get install libjpeg-dev fatal error: png.h: No such file or directory apt-get install libpng-dev fatal error...

Apple-Remote-Crash-Tool-CVE-2018-4407

Apple-Remote-Crash-Tool-CVE-2018-4407 Lässt jedes macOS High Sierra- oder iOS 11-Gerät im selben WiFi-Netzwerk abstürzen Nur ein kleines Tool, das eine öffentliche 'Heap-Pufferüberlauf-Sicherheitslücke' CVE-2018-4407 ausnutzt und es erleichtert, ganze Netzwerke anzugreifen. Anforderungen MacOS...

EUVD-2026-66483

In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - block sinput when F54 queue is busy Changing the input diagnostic report type mid-stream changes the report size. Since V4L2 buffers are allocated based on the size at stream start, changing the input whil...

EUVD-2026-66485

In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - zero report size on F54 work error In rmif54work, if an error occurs during report request or command verification, the code jumped directly to the 'error' label, bypassing the 'abort' label where...

CVE-2023-38545-libcurl-SOCKS5-heap-buffer-overflow

Dichiarazione di non responsabilità Questo articolo è destinato esclusivamente alla discussione tecnica e all'apprendimento. Qualsiasi conseguenza o danno, diretto o indiretto, derivante dall'uso delle informazioni fornite in questo articolo è di esclusiva responsabilità dell'utente; l'autore...

CVE-2024-38077-MadLicense-exploit

CVE-2024-38077 MadLicense — полный фреймворк для эксплуатации 📚 Техническая документация для презентации В этом документе объясняется каждый компонент фреймворка, зачем он существует и как работает эксплуатация heap buffer overflow в современных Windows. 🎯 Что такое CVE-2024-38077? Уязвимость...

PoC-in-GitHub

PoC in GitHub 2026 CVE-2026-0009 2026-06-01 In multiple locations, there is a possible tapjacking due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2021-39863

CVE-2021-39863 Adobe Acrobat Reader DC 21.005.20048.43252 32 बिट यह संस्करण डाउनलोड करें : https://ardownload2.adobe.com/pub/adobe/reader/win/AcrobatDC/2100520048/AcroRdrDC2100520048enUS.exe ASLR, DEP को बायपास करता है CFG को बायपास नहीं करता विश्लेषण टीम ब्लॉग टीम सदस्य ब्लॉग - mntly Adobe root...

CVE-2022-24903-Heap-based-buffer-overflow-Hand-On-Lab

CVE-2022-24903 핸즈온 랩 저자: Andrew Beshay Mousa rsyslog 힙 버퍼 오버플로 취약점을 시연하는 실용적인 핸즈온 랩입니다. TCP syslog 수신 시 octet-counted framing을 통해 rsyslog 힙 버퍼 오버플로 취약점CVE-2022-24903을 재현하고 이해할 수 있는 실용적인 랩 환경입니다. Table of Contents 개요 랩 아키텍처 사전 요구사항 취약점 상세 랩 설정 대상 머신 Ubuntu 공격자 머신 Kali 익스플로잇 검증 문제 해결 완화 조치 참고 자료 개요...

nginx-rce-cve-2026-42945

5. CVE-2026-42945 - गंभीर NGINX RCE CVSS 9.2 वर्गीकरण श्रेणी: 0-डे / दूरस्थ कोड निष्पादन CVE: CVE-2026-42945 CVSS: 9.2 गंभीर खोज की तिथि: 12 मई, 2026 पैच की तिथि: मई 2026 F5 त्रैमासिक सुरक्षा रिलीज़ स्रोत: GitHub DepthFirstDisclosures/Nginx-Rift भेद्यता विवरण NGINX के ngxhttprewritemodule घटक में...

NGINX-ngx_http_rewrite_module-heap-buffer-overflow-CVE-2026-9256

CVE-2026-9256 NGINX ngxhttprewritemodule PoC 推导过程与思考 适用范围：仅用于本地靶场、授权复现环境、漏洞验证和防护规则分析。不要对未授权目标使用。本文中的 PoC 思路只验证远程可见的 NGINX worker crash 行为，不包含 RCE、ASLR 绕过或稳定利用链。 1. 漏洞背景 CVE-2026-9256 是 NGINX ngxhttprewritemodule 中的堆缓冲区溢出漏洞。漏洞触发并不是单纯访问某个固定 URI，而是依赖特定的 rewrite 配置模式：rewrite 正则中存在互相重叠的 PCRE 捕获组，并且...

Baron-Samedit-Heap-Buffer-Overflow-CVE-2021-3156

Baron-Samedit-Débordement-de-Tas-Heap-CVE-2021-3156 Version Vulnérable à l'Exploit La vulnérabilité Baron Samedit CVE-2021-3156 affecte les versions legacy de sudo 1.8.2 à 1.8.31p2 et les versions stables 1.9.0 à 1.9.5p1. Ce défaut de débordement de tas basé sur le heap a été introduit en juillet...