183 matches found
cve-2026-42945-nginx32-lab
CVE-2026-42945 nginx 32-bit Exploit Lab This repository is a reproducible Docker lab for studying CVE-2026-42945 in nginx 1.30.0. It contains a vulnerable 32-bit target, a primitive trigger, a lab-assisted known-address RCE validator, and a no-introspection brute-force driver. The proof boundary...
CVE-2026-8461-EXP
CVE-2026-8461 "PixelSmash" — FFmpeg MagicYUV Heap OOB Write PoC !WARNING This repository contains a working exploit PoC for a heap corruption vulnerability. It is intended solely for authorized security research, CTF contexts, and defensive analysis. Do not use against systems you do not own or...
CVE-2026-31431
CVE-2026-31431 — From a NULL Pointer to Root: Exploiting AFALG AEAD in the Linux Kernel Bug class: Null pointer dereference → heap OOB write → credential overwrite Affected subsystem: net/alg/afalg.c Impact: Local Privilege Escalation unprivileged user → root Affected kernels: Linux 4.4 – 4.9...
sqlite-session-ncol
abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · sqlite-session-ncol Write-up: https://abraxaslabs.tech/research/sqlite-session-ncol sqlite-session-ncol Class: heap OOB write Reach: Local SQLite 3.53.4 b09c88c14082339b66c7b7158d609a771e64ca69, SOURCEID 2026-07-24...
OESA-2026-4647 mutt security update
Mutt is a small but very powerful text-based mail client for Unix operating systems. Security Fixes: heap OOB write in convertfilefromto via a crafted Content-Type header allows attacker to OOB write when email is used as a template.CVE-2026-107570...
OESA-2026-4646 mutt security update
Mutt is a small but very powerful text-based mail client for Unix operating systems. Security Fixes: heap OOB write in convertfilefromto via a crafted Content-Type header allows attacker to OOB write when email is used as a template.CVE-2026-107570...
OESA-2026-4645 mutt security update
Mutt is a small but very powerful text-based mail client for Unix operating systems. Security Fixes: heap OOB write in convertfilefromto via a crafted Content-Type header allows attacker to OOB write when email is used as a template.CVE-2026-107570...
OESA-2026-4644 mutt security update
Mutt is a small but very powerful text-based mail client for Unix operating systems. Security Fixes: heap OOB write in convertfilefromto via a crafted Content-Type header allows attacker to OOB write when email is used as a template.CVE-2026-107570...
ZDI-CAN-33549
The Bug · Check · Exploit · Detection · Impact · Write-up ---...
AlmaLinux 9.2 [TuxCare] Security Update: mutt Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1792567671)
The AlmaLinux 9.2 host has a package installed that is affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1792567671 advisory. - heap OOB write in convertfilefromto via a crafted Content-Type header allows attacker to OOB write when email is used as a templat...
CVE-2026-105958 Spice-server: spice: heap oob read/write via unchecked migration data offsets
A flaw was found in spice-server. Multiple migration data handlers use client-supplied offsets from SPICEMSGCMIGRATEDATA messages without bounds validation, allowing a malicious authenticated SPICE client during VM live migration to read arbitrary heap memory or trigger heap corruption via...
SUSE CVE-2026-98407
In the Linux kernel, the following vulnerability has been resolved: wifi: rsi: fix heap OOB write on key removal When a key is removed data == NULL, rsihalloadkey runs: memset&setkeyFRAMEDESCSZ, 0, framelen - FRAMEDESCSZ; setkey is a struct rsisetkey , so the subscript is scaled by sizeofstruct...
Rocky Linux 9.6 [TuxCare] Security Update: mutt (ALMALINUX9.6:CLSA-2026:1792092200)
The Rocky Linux 9.6 host has a package installed that is affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1792092200 advisory. - heap OOB write in convertfilefromto via a crafted Content-Type header allows attacker to OOB write when email is used as a template...
AlmaLinux 9.6 [TuxCare] Security Update: mutt (ALMALINUX9.6:CLSA-2026:1792092200)
The AlmaLinux 9.6 host has a package installed that is affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1792092200 advisory. - heap OOB write in convertfilefromto via a crafted Content-Type header allows attacker to OOB write when email is used as a template...
CVE-2026-98407
In the Linux kernel, the following vulnerability has been resolved: wifi: rsi: fix heap OOB write on key removal When a key is removed data == NULL, rsihalloadkey runs: memset&setkeyFRAMEDESCSZ, 0, framelen - FRAMEDESCSZ; setkey is a struct rsisetkey , so the subscript is scaled by sizeofstruct...
AZL-108116 CVE-2026-98407 affecting package kernel for versions less than 6.6.159.1-1
In the Linux kernel, the following vulnerability has been resolved: wifi: rsi: fix heap OOB write on key removal When a key is removed data == NULL, rsihalloadkey runs: memset&setkeyFRAMEDESCSZ, 0, framelen - FRAMEDESCSZ; setkey is a struct rsisetkey , so the subscript is scaled by sizeofstruct...
DEBIAN-CVE-2026-98407
In the Linux kernel, the following vulnerability has been resolved: wifi: rsi: fix heap OOB write on key removal When a key is removed data == NULL, rsihalloadkey runs: memset&setkeyFRAMEDESCSZ, 0, framelen - FRAMEDESCSZ; setkey is a struct rsisetkey , so the subscript is scaled by sizeofstruct...
UBUNTU-CVE-2026-98407
In the Linux kernel, the following vulnerability has been resolved: wifi: rsi: fix heap OOB write on key removal When a key is removed data == NULL, rsihalloadkey runs: memset&setkeyFRAMEDESCSZ, 0, framelen - FRAMEDESCSZ; setkey is a struct rsisetkey , so the subscript is scaled by sizeofstruct...
CVE-2026-98407 wifi: rsi: fix heap OOB write on key removal
In the Linux kernel, the following vulnerability has been resolved: wifi: rsi: fix heap OOB write on key removal When a key is removed data == NULL, rsihalloadkey runs: memset&setkeyFRAMEDESCSZ, 0, framelen - FRAMEDESCSZ; setkey is a struct rsisetkey , so the subscript is scaled by sizeofstruct...
EUVD-2026-101056
In the Linux kernel, the following vulnerability has been resolved: wifi: rsi: fix heap OOB write on key removal When a key is removed data == NULL, rsihalloadkey runs: memset&setkeyFRAMEDESCSZ, 0, framelen - FRAMEDESCSZ; setkey is a struct rsisetkey , so the subscript is scaled by sizeofstruct...