CVE-2022-44318

Description of CVE-2022-44318 PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the StringStrcat function in cstdlib/string.c when called from ExpressionParseFunctionCall. Any project or library that uses Picoc also suffers from this issue. An example of this would be...

CVE-2026-42533

CVE-2026-42533 — nginx Heap Buffer Overflow PoC Exploit Pre-Authentication Remote Code Execution via Two-Pass Capture Clobbering Public PoC released 2026-07-27 — Don't wait, patch now. | ---|--- CVE| CVE-2026-42533 CVSS 4.0| 9.2 Critical Type| Heap Buffer Overflow CWE-122 Affected| nginx 0.9.6 –...

CVE-2026-86476

A heap buffer overflow exists in gst-plugins-base within the libgstvideo component. The vulnerability is caused by a failure to range-check GstVideoMeta metadata during deserialization, allowing plane strides and offsets to exceed the actual backing memory allocation. A local attacker controlling...

CVE-2026-86476 Gstreamer1-plugins-base: gst-plugins-base: heap buffer overflow via unvalidated gstvideometa plane extents in gst_video_frame_map_id and video_meta_deserialize

A flaw was found in gst-plugins-base. A heap buffer overflow can be triggered when processing video buffers whose attached GstVideoMeta metadata declares plane strides and offsets that exceed the actual backing memory allocation. The metadata is not range-checked during deserialization, and the...

CVE-2026-86476

A flaw was found in gst-plugins-base. A heap buffer overflow can be triggered when processing video buffers whose attached GstVideoMeta metadata declares plane strides and offsets that exceed the actual backing memory allocation. The metadata is not range-checked during deserialization, and the...

CVE-2023-40294-and-CVE-2023-40295

While I was running boron in my environment, I happened to stumble upon 2 heap buffer overflows in libboron libboron.so.2 version 2.0.8 when processing slightly malformed input. This has been officially tested on both Mac x8664 and Linux x8664: Files for reproduction reproduction.zip Compiling gi...

CVE-2026-73791

A security vulnerability exists in HPE NonStop Hpjmeter (version T0866L50^AAM and earlier ) that can lead to stack and heap buffer overflow . This flaw could potentially result in memory corruption , Denial of Service (DoS) , or other local impacts. HPE has released a fix for this vulnerability; ...

jq-els-backport-cve-2025-48060

jq-els-backport-cve-2025-48060 Backported the upstream fix for CVE-2025-48060 heap buffer overflow in jvstringempty to jq 1.6. Backport CVE-2025-48060 – Backported upstream commit c6e0416 “Fix heap buffer overflow when formatting an empty string” from a newer jq version to jq-1.6, adapting intern...

nGixshell

nGixShell is an nginx CVE scanner and RCE exploit framework. It ships a proof-of-concept for CVE-2026-42945 CVSS 3.1 8.1 HIGH per F5/NVD — a heap buffer overflow in ngxhttprewritemodule — and a scanner covering 64 nginx CVEs with automated HTTP probes, fingerprinting, WAF detection/bypass, web...

CVE-2026-42945-POC

CVE-2026-42945 NGINX Rift - HTB-Ready Exploit Standalone exploit for the NGINX heap buffer overflow vulnerability discovered in 2024. This version is optimized for HackTheBox and CTF environments where you can't set up Docker containers. Vulnerability Details CVE-2026-42945 is a critical heap...

CVE-2021-3156

CVE-2021-3156 Note: These instructions are my own and notes from a stream that I did. If anything is wrong, then let me know. Trust official sources first! Hello everyone, A couple of days back, a serious heap-based buffer overflow has been discovered in sudo that is exploitable by any local user...

CVE-2009-4049

CVE-2009-4049 Heap-based buffer overflow in aswRdr.sys aka the TDI RDR driver in avast! Home and Professional 4.8.1356.0 allows local users to cause a denial of service memory corruption or possibly gain privileges via crafted arguments to IOCTL 0x80002024. While part of the reason as to why I di...

nginx-rift-private-lab

NGINX Rift RCE Proof of concept for CVE-2026-42945 , a critical heap buffer overflow in NGINX's ngxhttprewritemodule introduced in 2008. The bug enables unauthenticated remote code execution against servers using rewrite and set directives. This fork extends the original PoC with an ASLR-bypass...

CVE-2023-4683-Test

CVE-2023-4683-Test This repo holds an easy to use POC for CVE-2023-4683. Just git clone this repo and either extract webp-test or run setup-webp-test.sh. webp-test already has the necessary files git commit 7ba44f80f3b94fc0138db159afea770ef06532a0 of https://chromium.googlesource.com/webm/libwebp...

MSTeams---Vulnerability---Remediation

🛡️ Remediation of CVE-2025-53783: Microsoft Teams RCE 📝 Project Overview This project demonstrates a Vulnerability Management Workflow. Using an Azure VM, I identified a high-severity "Remote Code Execution" RCE flaw in Microsoft Teams, verified its existence through PowerShell, and deployed a...

CVE-2023-38545-POC

CVE-2023-38545 POC for the curl command line tool This POC is based on the earlier POC created by UTsweetyfish, shared in this repository:https://github.com/UTsweetyfish/CVE-2023-38545. Contrary to that POC, this one is for the commandline tool and not the libcurl library, and doesn't require...

CVE-2024-22532

CVE-2024-22532 Description XnSoft XnView Classic 2.51.5 and NConvert 7.163 are vulnerable to Heap-based Buffer Overflow via a crafted .xwd file Vendor XnSoft Affected Products XnView Classic 2.51.5 NConvert 7.163 Impact Denial of Service Remote Code Execution PoC Denial of Service cmdline used...

CVE-2018-4407

CVE-2018-4407 Massive IOS/MAC Attack Exploit CVE-2018-4407 is a Simple and Very Fast BOF attack Against IOS/MAC that can lead to DOS. The vulnerability is a heap buffer overflow in the networking code in the XNU operating system kernel. XNU is used by both iOS and macOS, which is why iPhones,...

ros2_CVE-2024-28231

This repo includes a vulnerable Docker image of ros2 iron based on ubuntu 22 and a matching exploit. We exploit the vulnerability in fastrtps version 2.10.3, enabling denial of service of a remote subscriber via heap buffer overflow. Vulnerable base image Fast RTPS version 2.10.3 and dependencies...

CVE-2023-4863

level 1: craft.c - bad.webp exist: docker 813b6b757038 /webp cd CVE-2023-4863 make -f makefile.unix -B fatal error: jpeglib.h: No such file or directory apt-get update apt-get install libjpeg-dev fatal error: png.h: No such file or directory apt-get install libpng-dev fatal error: tiffio.h: No su...