CVE-2026-9256-Poc

nginx ngxhttprewritemodule Débordement de tas Heap Buffer Overflow Description nginx Plus et nginx Open Source contiennent une vulnérabilité de débordement de tas dans le module ngxhttprewritemodule. Lorsqu'une directive rewrite utilise une expression régulière avec plusieurs groupes de capture...

CVE-2026-42945

🛡️ CVE-2026-42945 - NGINX Rift NGINX में गंभीर हीप-आधारित बफर ओवरफ़्लो 📌 अवलोकन CVE-2026-42945 जिसे NGINX Rift के नाम से भी जाना जाता है NGINX के ngxhttprewritemodule में एक गंभीर सुरक्षा भेद्यता है। प्रकार : हीप-आधारित बफर ओवरफ़्लो CWE-122 खोज : मई 2026 अस्तित्व में था : 18 वर्ष शोषण योग्य :...

CVE-2025-65018-Heap-buffer-overflow-in-libpng-ps4-ps5-

إثبات الاختراق لـ CVE-2025-65018-Heap-buffer-overflow-in-libpng-ps4-ps5- الاستخدام: 1- اضغط زر المشاركة والتقط لقطة شاشة 2- عبر ftp انتقل إلى المسار: /user/avcontents/photo/NPXS20001/NPXS20001/XXX/ ستجد لقطة الشاشة التي التقطتها. 3- انسخها إلى الحاسوب وشغّل عليها makepng.py وسيتم إنشاء poc.png 4-...

CVE-2025-21333

CVE-2025-21333 تجاوز سعة في كومة Paged Pool لمكوّن Hyper-V NT Kernel Integration VSP vkrnlintvsp.sys → رفع صلاحيات محلي LPE. هذا المجلد هو كود PoC للاستخدام المخبري مبني على MrAle98/CVE-2025-21333-POC، ويتضمن تصحيحات محلية. 1. ملخص الثغرة البند| المحتوى ---|--- CVE| CVE-2025-21333 النوع|...

FreeRDP: FreeRDP: Remote code execution or denial of service via audio input integer overflow

A flaw was found in FreeRDP, an open-source implementation of the Remote Desktop Protocol RDP. This vulnerability, an integer overflow in the audio input redirection channel, allows a remote attacker to supply a malicious FramesPerPacket value. This can lead to a heap-based buffer overflow,...

sqlite: SQLite: Arbitrary code execution via crafted FTS5 full-text search data

A flaw was found in SQLite's FTS5 full-text search extension. This vulnerability involves memory corruption, specifically an out-of-bounds read and a heap buffer overflow, which can be triggered by supplying a crafted database with malformed FTS5 page data. When an FTS5 MATCH query is executed...

CVE-2026-27654

CVE-2026-27654 تجاوز سعة المخزن المؤقت في الكومة Heap Buffer Overflow في وحدة ngxhttpdavmodule الخاصة بـ NGINX عبر نقصان من النوع sizet رفض خدمة عن بُعد / احتمالية تنفيذ كود عن بُعد الوصف ngxhttpdavcopymovehandler في src/http/modules/ngxhttpdavmodule.c يحسب طول URI الخاص بالوجهة بطرح طول بادئة...

CVE-2026-42945-POC

CVE-2026-42945 إثبات مفهوم لـ RCE لثغرة CVE-2026-42945 ، وهي ثغرة حرجة من نوع تجاوز سعة المخزن المؤقت في الكومة heap buffer overflow في وحدة ngxhttprewritemodule في NGINX، أُدخل هذا الخطأ إلى الكود عام 2008. تتيح الثغرة تنفيذ كود عن بُعد دون مصادقة ضد الخوادم التي تستخدم توجيهات rewrite وset...

CVE-2026-42945

CVE-2026-42945 - Analyse et reproduction de la vulnérabilité NGINX Rift Vue d'ensemble CVE-2026-42945 nom de code « NGINX Rift » est une vulnérabilité de dépassement de tampon de tas dans le module ngxhttprewritemodule de NGINX, avec un score CVSS v4 de 9,2 Critique. Cette vulnérabilité a été...

Linux Distros Unpatched Vulnerability : CVE-2026-82591

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A security vulnerability has been detected in Open Asset Import Library Assimp up to 6.0.2. The impacted element is the function MD5Importer::MakeDataUnique of...

RHEL 10 : freerdp (RHSA-2026:61378)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:61378 advisory. FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. The xfreerdp client can connect to...

Important: apr-util

Issue Overview: APR-util versions 1.6.3 and earlier function aprpasswordvalidate was not constant-time with regards to hashes or passwords comparisons, potentially leaking their content via a side channel timing attack particularly on platforms without crypt such as Windows, BeOS, NetWare, or...

RHEL 8 : libXfont2 (RHSA-2026:61755)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:61755 advisory. X.Org X11 libXfont2 runtime library Security Fixes: libxfont2: Font Server Client encoding Out-Of-Bounds Read/Write CVE-2026-59679...

RHEL 9 : freerdp (RHSA-2026:61379)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:61379 advisory. FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. The xfreerdp client can connect to...

RHEL 10 : sqlite (RHSA-2026:61697)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:61697 advisory. SQLite is a C library that implements an SQL database engine. A large subset of SQL92 is supported. A complete database is stored in a...

Amazon Linux 2 : apr-util, --advisory ALAS2-2026-3892 (ALAS-2026-3892)

The version of apr-util installed on the remote host is prior to 1.6.5-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3892 advisory. APR-util versions 1.6.3 and earlier function aprpasswordvalidate was not constant-time with regards to hashes or password...

Important: apr-util

Issue Overview: APR-util versions 1.6.3 and earlier function aprpasswordvalidate was not constant-time with regards to hashes or passwords comparisons, potentially leaking their content via a side channel timing attack particularly on platforms without crypt such as Windows, BeOS, NetWare, or...

Linux Distros Unpatched Vulnerability : CVE-2026-80617

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: airoha: fix foechecktime allocation size foechecktime is declared as u16 pointer but was allocated with only ppenumentries bytes instead of ppenumentries...

DEBIAN-CVE-2026-82591

A security vulnerability has been detected in Open Asset Import Library Assimp up to 6.0.2. The impacted element is the function MD5Importer::MakeDataUnique of the file code/AssetLib/MD5/MD5Loader.cpp. The manipulation of the argument iNewIndex leads to heap-based buffer overflow. The attack can...

CVE-2026-82591

A security vulnerability has been detected in Open Asset Import Library Assimp up to 6.0.2. The impacted element is the function MD5Importer::MakeDataUnique of the file code/AssetLib/MD5/MD5Loader.cpp. The manipulation of the argument iNewIndex leads to heap-based buffer overflow. The attack can...