CVE-2019-19204

CVE-2019-19204 Ein Problem wurde in Oniguruma 6.x vor 6.9.4rc2 entdeckt. In der Funktion fetchintervalquantifier früher bekannt als fetchrangequantifier in regparse.c wird PFETCH aufgerufen, ohne PEND zu überprüfen. Dies führt zu einem heap-basierten Pufferüberlesen. Forscher: ManhND vom The...

CVE-2021-3156-Exp

CVE-2021-3156-Exp Der Exploit von CVE-2021-3156. Nach einer nächtlichen Recherche habe ich es endlich geschafft! Danksagungen https://www.qualys.com/2021/01/26/cve-2021-3156/baron-samedit-heap-based-overflow-sudo.txt...

CVE-2021-3156-Heap-Based-Buffer-Overflow-in-Sudo-Baron-Samedit-

Qualys Security Advisory Baron Samedit: Heap-basierter Pufferüberlauf in Sudo CVE-2021-3156 ======================================================================== Inhalt Zusammenfassung Analyse Ausnutzung Danksagungen Zeitplan...

CVE-2025-47987

CVE-2025-47987: Windows CredSSP Elevation of Privilege 📌 Questo repository contiene documentazione e risorse di analisi sulla vulnerabilità CVE-2025-47987, un difetto di overflow del buffer nella regione heap Heap-based Buffer Overflow che interessa il protocollo Windows Credential Security Suppo...

cve-2024-49113-ldap_nightmare_reproduction

CVE-2024-49113 — LDAP Nightmare Remotecodeausführung im Windows-LDAP-Client Heap-basierter Pufferüberlauf...

Linux-Heap-Based-Type-Confusion-in-L2CAP

Linux: Confusione di tipo basata su heap in L2CAP CVE-2020-12351 Linux: Confusione di tipo basata su heap in L2CAP PoC CVE-2020-12351 sull'implementazione BLE Perché ho modificato il PoC originale? Il PoC originale è focalizzato sull'invio di un pacchetto l2cap malintenzionato tramite Bluetooth...

CVE-2021-3156

CVE-2021-3156 Ruolo Ansible per la correzione di CVE-2021-3156 per CentOS Introduzione Sudo prima della versione 1.9.5p2 presenta un Buffer Overflow basato su heap, che consente l'escalation dei privilegi a root tramite "sudoedit -s" e un argomento della riga di comando che termina con un singolo...

CVE-2021-3156

CVE-2021-3156 https://www.qualys.com/2021/01/26/cve-2021-3156/baron-samedit-heap-based-overflow-sudo.txt https://blog.qualys.com/vulnerabilities-research/2021/01/26/cve-2021-3156-heap-based-buffer-overflow-in-sudo-baron-samedit https://access.redhat.com/security/vulnerabilities/RHSB-2021-002...

CVE-2026-55200

Report di Sicurezza: CVE-2026-55200 📝 Descrizione Generale Il CVE-2026-55200 è una vulnerabilità critica di overflow di memoria basata sull'heap corruzione della memoria dinamica che colpisce la libreria libssh2 nelle versioni fino alla 1.11.1. Consente a un server SSH malintenzionato di...

CVE-2026-75767

Substance3D - Painter is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-48432

Substance3D - Designer is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

EUVD-2026-65688

Substance3D - Painter is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-75767 Substance3D - Painter | Heap-based Buffer Overflow (CWE-122)

Substance3D - Painter is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-75769 Substance3D - Painter | Heap-based Buffer Overflow (CWE-122)

Substance3D - Painter is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-75766

Adobe Substance3D Painter is affected by a Heap-based Buffer Overflow (CWE-122) vulnerability that can lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction , specifically opening a malicious file. The CVSS 3.1 score is 7.8 (High) with a local...

CVE-2026-48425

Substance3D - Sampler (Adobe) is affected by a Heap-based Buffer Overflow (CWE-122) that can lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction : the victim must open a crafted malicious file. The CVSS 3.1 base score is 7.8 (HIGH) , reflect...

CVE-2026-48423 Substance3D - Sampler | Heap-based Buffer Overflow (CWE-122)

Substance3D - Sampler is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-48432

Substance3D - Designer (Adobe) is affected by a Heap-based Buffer Overflow (CWE-122) that can lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction: a victim must open a malicious file. The CVSS 3.1 base score is 7.8 (HIGH) with vector AV:L/AC...

CVE-2026-48428 Substance3D - Designer | Heap-based Buffer Overflow (CWE-122)

Substance3D - Designer is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

gstreamer1-plugins-good security update

An update is available for gstreamer1-plugins-good. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list GStreamer is a streaming media framework based on graphs of...