cve-2024-49113-ldap_nightmare_reproduction

CVE-2024-49113 — LDAP Nightmare Windows LDAP 클라이언트 원격 코드 실행힙 기반 버퍼 오버플로...

CVE-2021-3156-Exp

CVE-2021-3156-Exp CVE-2021-3156의 익스플로잇입니다. 하룻밤의 연구 끝에, 드디어 해냈습니다! 감사 https://www.qualys.com/2021/01/26/cve-2021-3156/baron-samedit-heap-based-overflow-sudo.txt...

CVE-2026-55200

보안 보고서: CVE-2026-55200 📝 일반 설명 CVE-2026-55200 은 libssh2 라이브러리버전 1.11.1까지에 영향을 미치는 heap 기반 메모리 오버플로우동적 메모리 손상 취약점입니다. 이 취약점을 통해 악의적인 SSH 서버가 연결하는 취약한 클라이언트를 손상시킬 수 있습니다. ⚡ 기술 세부 사항 취약점 유형: 메모리 오버플로우 Heap-based Buffer Overflow. 주요 영향: 원격 코드 실행 RCE 및 서비스 거부 DoS. 공격 단계: 암호화 인증 전 에 발생합니다. 공격 벡터: 악의적이거...

CVE-2021-3156-Heap-Based-Buffer-Overflow-in-Sudo-Baron-Samedit-

Qualys Security Advisory Baron Samedit: Переполнение буфера в куче в Sudo CVE-2021-3156 ======================================================================== Содержание Краткое описание Анализ Эксплуатация Благодарности Временная шкала...

Security Bulletin: IBM MQ for HPE NonStop is vulnerable to a denial of service issue (CVE-2026-11381)

Summary IBM MQ for HPE NonStop is vulnerable to a denial of service issue when using MQ distribution lists. Vulnerability Details CVEID:CVE-2026-11381 DESCRIPTION: IBM MQ could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to improper...

CVE-2025-47987

CVE-2025-47987: Windows CredSSP Elevation of Privilege 📌 Этот репозиторий содержит документацию и аналитические материалы об уязвимости CVE-2025-47987, ошибке переполнения буфера в куче Heap-based Buffer Overflow, затрагивающей протокол Windows Credential Security Support Provider CredSSP. 📝...

CVE-2026-81474

Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Heap-based Buffer Overflow vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...

CVE-2026-81477

Dell OpenManage Server Administrator (OMSA) , versions prior to 11.1.0.3 , contains a Heap-based Buffer Overflow vulnerability. A high-privileged attacker with remote access could potentially exploit this flaw to achieve arbitrary code execution . The CVSS 3.1 score is 7.2 (HIGH) , reflecting a n...

CVE-2026-81477

Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Heap-based Buffer Overflow vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Code execution...

CVE-2026-81474

Dell OpenManage Server Administrator (versions prior to 11.1.0.3 ) contains a Heap-based Buffer Overflow vulnerability. A low-privileged attacker with local access and no user interaction can exploit this to achieve Elevation of Privileges , with high impact on confidentiality, integrity, and ava...

Important: Red Hat Security Advisory: corosync security update

An update for corosync is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available f...

CVE-2026-27831-POC

CVE-2026-27831-POC CVE-2026-27831용 PoC 익스플로잇 이것은 rldns 버전 1.3의 원격 힙 기반 범위 밖 읽기out-of-bound read로 인해 서비스 거부denial of service를 유발하는 개념 증명 익스플로잇입니다. rldns는 x8664 아키텍처에서 실행되는 Linux, FreeBSD 및 NetBSD용 오픈 소스 DNS 서버입니다. Rldns 버전 1.3에는 서비스 거부로 이어지는 힙 기반 범위 밖 읽기heap-based out-of-bounds read 취약점이 있습니다. 버전...

CVE-2026-92248

A flaw was found in the file-psd plugin in GIMP. When generating a thumbnail preview for a specially crafted PSD Photoshop Document image file, an integer overflow occurs during the multiplication of values from an embedded JPEG header. This leads to an undersized heap allocation, resulting in a...

Linux Distros Unpatched Vulnerability : CVE-2026-92399

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was determined in GPAC 26.07.0. This affects the function rmtclienthandlewsframe of the file src/utils/rmtws.c of the component WebSocket Handle...

RockyLinux 10 : corosync (RLSA-2026:67872)

The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:67872 advisory. corosync: corosync: heap-based buffer overflow in totempg assembly buffer during fragmented message reassembly CVE-2026-81665 Tenable has extracted the precedin...

RockyLinux 9 : corosync (RLSA-2026:67873)

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:67873 advisory. corosync: corosync: heap-based buffer overflow in totempg assembly buffer during fragmented message reassembly CVE-2026-81665 Tenable has extracted the preceding...

RHEL 7 : corosync (RHSA-2026:68574)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:68574 advisory. The corosync packages provide the Corosync Cluster Engine and C APIs for Red Hat Enterprise Linux cluster software. Security Fixes: corosync:...

CVE-2026-92399

GPAC 26.07.0 contains a heap-based buffer overflow in the function rmt_client_handle_ws_frame within the WebSocket Handler component (src/utils/rmt_ws.c). The vulnerability is triggered by manipulating the payload_size argument, allowing a remote attacker to exploit it without authentication or u...

CVE-2026-92399 GPAC WebSocket rmt_ws.c rmt_client_handle_ws_frame heap-based overflow

A vulnerability was determined in GPAC 26.07.0. This affects the function rmtclienthandlewsframe of the file src/utils/rmtws.c of the component WebSocket Handler. Executing a manipulation of the argument payloadsize can lead to heap-based buffer overflow. It is possible to launch the attack...

Important: Red Hat Security Advisory: corosync security update

An update for corosync is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available fo...