CVE-2026-82591

A security vulnerability has been detected in Open Asset Import Library Assimp up to 6.0.2. The impacted element is the function MD5Importer::MakeDataUnique of the file code/AssetLib/MD5/MD5Loader.cpp. The manipulation of the argument iNewIndex leads to heap-based buffer overflow. The attack can...

CVE-2025-50360

पेपर भाषा में हीप बफर ओवरफ़्लो पेपर भाषा सरलता और वाचालता के लिए एक तेज़ व्याख्या योग्य प्रोग्रामिंग भाषा है। यह डायनेमिकली टाइप्ड है और गार्बेज कलेक्शन सपोर्ट करता है। प्रभावित संस्करण: संस्करण 0.1.1 और पहले, कमिट 961a5d9988c5986d563310275adad3fd181b2bb7 और पहले। स्थिति: अनफिक्स्ड; 15 फरवरी 2024...

CVE-2026-42533-Config-Scanner

nginx capture-clobber scanner A read-only static scanner that flags nginx configurations vulnerable to the complexvalue two-pass capture-clobbering bug class F5/nginx SIRT advisory, July 2026. It parses your config and reports the vulnerable pattern with the reason and location. It does not explo...

PT-2026-83638

Name of the Vulnerable Software and Affected Versions Open Asset Import Library Assimp versions prior to 6.0.3 Description A heap-based buffer overflow occurs when manipulating the iNewIndex argument within the MD5Importer::MakeDataUnique function located in the code/AssetLib/MD5/MD5Loader.cpp...

openSUSE 16: apr-util-devel / libapr-util1-0 / libapr-util1-0-dbd-mysql / etc (openSUSE-SU-2026:21672-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21672-1 advisory. - CVE-2025-49506: hash/password content leak via side channel timing attack against aprpasswordvalidate bsc1274237. - CVE-2026-32327: XML stack...

CVE-2021-3156

CVE-2021-3156 controllo della vulnerabilità CVE-2021-3156 e script di patch Descrizione di CVE-2021-3156: Sudo prima della versione 1.9.5p2 presenta un Heap-based Buffer Overflow, che consente l'escalation dei privilegi a root tramite "sudoedit -s" e un argomento da riga di comando che termina co...

nginx-rift-scanner

nginx-rift-scanner Abhängigkeitsfreier Python 3 Scanner für CVE-2026-42945 "NGINX Rift" — ein CVSS v4.0 9.2 KRITISCHER heap-basierter Pufferüberlauf CWE-122 in ngxhttprewritemodule. Was er erkennt Bei jedem Aufruf werden zwei unabhängige Prüfungen durchgeführt:...

CVE-2026-42945-nginx-rift-poc

NGINX Rift — CVE-2026-42945 Proof-of-concept di RCE per CVE-2026-42945 , una vulnerabilità critica di heap buffer overflow nel modulo ngxhttprewritemodule di NGINX introdotta nel 2008. Consente l'esecuzione remota di codice non autenticata contro server che utilizzano combinazioni di rewrite...

CVE-2026-42945

CVE-2026-42945 Nginx Rift - Toolkit PoC Un toolkit proof-of-concept completo per CVE-2026-42945 Nginx Rift, una vulnerabilità critica di heap buffer overflow nel modulo ngxhttprewritemodule di Nginx. Riepilogo della Vulnerabilità Campo| Dettagli ---|--- ID CVE| CVE-2026-42945 Nome| Nginx Rift Tip...

lab-cve-2023-4863

CVE-2023-4863 — Libwebp-Exploitationslabor Reproduktion von CVE-2023-4863 Heap-Buffer-Overflow in libwebp in einer vollständig isolierten und automatisierten Docker-Umgebung. Basierend auf der Übung des Moduls „Hacking Ético“ von CEFIRE. Was dieses Lab macht Es startet acht Container in einem...

CVE-2023-21716-Analysis-ICT287

CVE-2023-21716 Analisi-ICT287: Esecuzione Remota di Codice in Microsoft Word Panoramica Questo repository documenta l'analisi e la riproduzione di CVE-2023-21716, una vulnerabilità di overflow del buffer basato su heap nel parser RTF di Microsoft Word con un punteggio CVSS di 9.8 Critico. Contenu...

CVE-2022-27666

CVE-2022-27666 Overflow del buffer heap nell'implementazione IPsec ESP6 del kernel Linux linux 5.13.19. Configurazione supponendo utente root 1. Compilare il kernel nella VM Installa le dipendenze: root@kitploit: apt update && apt install -y \ build-essential bc bison flex \ libssl-dev libelf-dev...

CVE-2026-42945_NginxRift

🚀 NGINX Rift PoC Automation — CVE-2026-42945 Driver de automação PoC para exploração de RCE do containernginx-rift · Verificação do alvo → Exploit de comando único → Reverse-shell interativa Um único comando orquestra todo o fluxo do exploit — da verificação do container até obter a shell. ⚠️ Avis...

Linux Distros Unpatched Vulnerability : CVE-2026-38821

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A heap-based buffer overflow vulnerability exists in openNDS before 11.0.0 that allows an unauthenticated attacker on the captive portal network to crash the...

openSUSE 16 Security Update : wget (openSUSE-SU-2026:21665-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21665-1 advisory. Security issued fixed: - CVE-2026-15146: unvalidated IP address in an FTP PASV response can lead to server-side request forgery bsc1271320. -...

CVE-2026-27654-PoC

CVE-2026-27654 – nginx ngxhttpdavmodule DAV Alias Path Handling PoC This repository provides a proof‑of‑concept exploit for CVE‑2026‑27654 , a heap‑overflow vulnerability in the ngxhttpdavmodule of nginx. The bug arises from a size‑t underflow when handling MOVE/COPY requests with specially craft...

CVE-2026-39113

CVE-2026-39113: Estouro de Buffer no Heap na Extensão SQLAR Opcional do SQLite Resumo Executivo O CVE-2026-39113 é um estouro de buffer no heap na extensão SQLAR opcional do SQLite. Em um aplicativo que carregou a extensão, um atacante que consiga invocar sqlaruncompress com um blob comprimido e ...

nginx-rift-check

nginx-rift-check Trova configurazioni vulnerabili a CVE-2026-42945 , l'heap buffer overflow nel ngxhttprewritemodule di nginx. Eseguire una versione di nginx affetta dalla 0.6.27 alla 1.30.0 non basta perché la vulnerabilità sia sfruttabile. La configurazione deve contenere una coppia specifica d...

CVE-2022-0185-POC

CVE-2022-0185 — Prova di concetto Un exploit proof-of-concept per CVE-2022-0185 , un buffer overflow basato su heap nella funzione legacyparseparam del kernel Linux fs/fscontext.c. Ciò consente a un utente locale non privilegiato di elevare i propri privilegi a root. Exploit originale di Crusader...

CVE-2021-3156-Project

CVE-2021-3156 — Baron Samedit Estouro de buffer baseado em heap no sudo → Escalonamento local de privilégios Departamento de Cibersegurança ITSOLERA | Estágio Red Team 2026 root@kitploit: ██████╗ █████╗ ██████╗ ██████╗ ███╗ ██╗ ███████╗ █████╗ ███╗ ███╗███████╗██████╗ ██╗████████╗...