CVE-2026-79825

A heap buffer overflow in HPE NonStop NDSREST (specifically version T1984L01^AAB ) could corrupt the resume-execution address and potentially redirect execution flow. This vulnerability may lead to memory corruption, buffer overflow, or a Denial of Service (DoS) . HPE has released fixes; the affe...

EUVD-2026-101970

A heap buffer overflow in HPE NonStop NDSREST could corrupt resume-execution address and may potentially redirect execution flow...

CVE-2021-3156-Baron-Samedit

CVE-2021-3156 - "Baron Samedit" Lab & Exploit This repository provides a self-contained, educational environment to understand and exploit CVE-2021-3156 , a heap-based buffer overflow in sudo that allows any unprivileged user to gain root privileges on vulnerable systems sudo versions prior to...

Security update for iperf

This update for iperf fixes the following issues: CVE-2026-71217: iperf3 server accepts unbounded peer-controlled JSON parameters enabling remote denial of service via resource exhaustion bsc1284405. CVE-2026-71218: unbounded peer-controlled allocation in JSONread allows unauthenticated remote...

SUSE-SU-2026:4678-1 Security update for iperf

This update for iperf fixes the following issues: - CVE-2026-71217: iperf3 server accepts unbounded peer-controlled JSON parameters enabling remote denial of service via resource exhaustion bsc1284405. - CVE-2026-71218: unbounded peer-controlled allocation in JSONread allows unauthenticated remot...

nginx-cve-2026-42945-check

NGINX CVE-2026-42945 Local Checker Language: 中文 | English This repository provides two standalone local scripts for checking whether a Linux or Windows server has Nginx, OpenResty, or Tengine instances that may be exposed to CVE-2026-42945 related risk. The scripts are read-only. They do not run ...

CVE-2026-42945

CVE-2026-42945: NGINX Rift Heap Buffer Overflow Vulnerability Overview CVE-2026-42945 is a critical heap buffer overflow vulnerability in the NGINX server, known as "NGINX Rift". The vulnerability exists in the processing logic of the rewrite and set directives in NGINX. When specific configurati...

google-chrome-emergency-update

Chrome Emergency Security Update This repository contains information and tools related to Google's emergency Chrome update addressing critical security vulnerabilities. 🚨 Emergency Update Notice Google has issued an emergency Chrome update to patch critical zero-day vulnerabilities being activel...

Cisco-ASA-CVE-2025-20333-Scanner

CVE-2025-20333 Scanner A Python-based diagnostic scanner for Cisco ASA / FTD VPN Web Server Buffer Overflow CVE-2025-20333. CVE-2025-20333 is a critical heap-based buffer overflow vulnerability in the WebVPN file upload handler that can lead to remote code execution RCE as root when successfully...

CVE-2021-3156

CVE-2021-3156 Description Sudo before 1.9.5p2 has a Heap-based Buffer Overflow, allowing privilege escalation to root via "sudoedit -s" and a command-line argument that ends with a single backslash character...

libsoup: libsoup: Heap buffer overflow from WebSocket Pong signal type confusion

A flaw was found in libsoup. When handling an incoming WebSocket Pong frame, SoupWebsocketConnection emitted the ::pong signal with a GByteArray pointer even though the signal is declared to pass a GBytes. Applications connecting a handler that follows the documented GBytes API can trigger heap...

libsoup: libsoup: Heap buffer overflow during outgoing permessage-deflate buffer growth

A flaw was found in libsoup. When the permessage-deflate WebSocket extension compresses a very large outgoing message, truncated size calculations used for GByteArray growth could wrap, causing zlib to write past the allocated buffer and resulting in a heap buffer overflow...

Important: Red Hat Security Advisory: libsoup security update

An update for libsoup is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

libsoup: libsoup: Heap buffer overflow during WebSocket message reassembly

A flaw was found in libsoup. When reassembling fragmented WebSocket messages into a GByteArray, libsoup did not adequately cap total message size against the limits of the underlying buffer type. A remote peer could send fragments that caused size truncation while the implementation still used th...

libsoup: libsoup: Heap buffer overflow during WebSocket receive-buffer growth

A flaw was found in libsoup. When max-incoming-payload-size is unlimited 0, SoupWebsocketConnection could grow its incoming GByteArray based on an attacker-controlled frame length until the length wrapped, causing a heap buffer overflow while reading frame data...

libsoup: libsoup: Heap buffer overflow during WebSocket client-frame masking

A flaw was found in libsoup. When constructing a masked WebSocket client frame for a very large outgoing payload, size values passed to GByteArray allocation APIs could be truncated while the masking routine still used the full length, causing a heap buffer overflow...

CVE-2008-5416

CVE-2008-5416 Microsoft SQL Server spreplwritetovarbin Memory Corruption via SQL Injection A heap-based buffer overflow can occur when calling the undocumented "spreplwritetovarbin" extended stored procedure. This vulnerability affects all versions of Microsoft SQL Server 2000 and 2005, Windows...

MiracleLinux 9 : glibc-2.34-283.el9_8 (AXSA:2026-2040:13)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-2040:13 advisory. glibc: Glibc: Denial of Service via stack exhaustion during tilde expansion CVE-2026-6791 glibc: glibc: Process abort due to invalid memory in worde...

CVE-2026-15176

A vulnerability exists in NGINX Plus and NGINX Open Source when a location is configured that uses the alias directive together with rewrite and a set or return directive referencing the $requestfilename variable. Alternatively, the same result could be achieved when the $requestfilename variable...

CVE-2026-86476

A flaw was found in gst-plugins-base. A heap buffer overflow can be triggered when processing video buffers whose attached GstVideoMeta metadata declares plane strides and offsets that exceed the actual backing memory allocation. The metadata is not range-checked during deserialization, and the...