CVE-2026-42945

RIFT — Remote Injection & Fault Trigger Autor: Michael Sanji Winaya Prawiradibrata Co-Autor IA: Varanus — sahabatku Framework de explotación de desbordamiento de búfer de heap dirigido a ngxhttprewritemodule de NGINX. Una sola herramienta para reconocimiento + explotación. Sin dependencias...

CVE-2023-6931

CVE-2023-6931 PoC de Kernel Panic para CVE-2023-6931 Descripción CVE-2023-6931 es una vulnerabilidad en perfevent que conduce a un desbordamiento de búfer en el heap causado por un desbordamiento de enteros en el readsize de un grupo. ¿Qué es un Evento de Rendimiento perf event? perfevents es un...

CVE-2023-40294-and-CVE-2023-40295

Mientras ejecutaba boron en mi entorno, me topé con 2 desbordamientos de búfer en el montón en libboron libboron.so.2 versión 2.0.8 al procesar entradas ligeramente malformadas. Esto ha sido probado oficialmente tanto en Mac x8664 como en Linux x8664: Archivos para la reproducción reproduction.zi...

CVE-2022-44318

Descripción de CVE-2022-44318 Se descubrió que PicoC versión 3.2.2 contiene un desbordamiento de búfer en el montón en la función StringStrcat en cstdlib/string.c cuando se llama desde ExpressionParseFunctionCall. Cualquier proyecto o biblioteca que utilice Picoc también sufre este problema. Un...

Important: Red Hat Security Advisory: freerdp security update

An update for freerdp is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerabili...

FreeRDP: FreeRDP: Heap-buffer-overflow allows arbitrary code execution via crafted RPC response

A flaw was found in FreeRDP. A remote attacker, specifically a malicious TS Gateway, can exploit a heap-buffer-overflow vulnerability by sending a specially crafted Remote Desktop Protocol RDP response. This occurs because the client incorrectly uses a smaller allochint value instead of the actua...

jq-els-backport-cve-2025-48060

jq-els-backport-cve-2025-48060 Backport de la corrección upstream para CVE-2025-48060 desbordamiento de búfer de heap en jvstringempty a jq 1.6. Backport CVE-2025-48060 – Backport del commit upstream c6e0416 “Corrección de desbordamiento de búfer de heap al formatear una cadena vacía” desde una...

CVE-2026-53938

A flaw was found in cjose, a C library for Javascript Object Signing and Encryption JOSE. A remote, unauthenticated attacker can exploit a heap buffer overflow vulnerability in the AES Key Wrap decryption process. By submitting a crafted Javascript Web Encryption JWE to an application, the attack...

expat security update

An update is available for expat. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Expat is a C library for parsing XML documents. Security Fixes: expat: libexpat...

CVE-2026-21095

Heap-based buffer overflow in DNG decoder of libimagecodec.quram.so prior to SMR Sep-2026 Release 1 allows remote attackers to execute arbitrary code...

CVE-2025-27363-proof-of-concept

Prueba de concepto para CVE-2025-27363 que hace fallar FreeType 2.13.0. Esta modifica Roboto Flex, una fuente variable, de modo que el carácter "%" glifo 8 pasa a ser un glifo compuesto con 0xfffd subglifos. Al renderizar la fuente editada con FreeType 2.13.0 la última versión anterior a la...

CVE-2026-21104

CVE-2026-21104 is a heap-based buffer overflow in the KnoxVault trustlet on Samsung mobile devices, affecting firmware prior to SMR Sep-2026 Release 1 . The flaw allows a local privileged attacker to achieve arbitrary code execution . The CVSS 4.0 base score is 7.1 (HIGH) , with a local attack ve...

CVE-2026-21096

Heap-based buffer overflow in JPEG decoder of libimagecodec.quram.so prior to SMR Sep-2026 Release 1 allows remote attackers to execute arbitrary code...

CVE-2026-21096

Heap-based buffer overflow in JPEG decoder of libimagecodec.quram.so prior to SMR Sep-2026 Release 1 allows remote attackers to execute arbitrary code...

EUVD-2026-74636

Heap-based buffer overflow in DNG decoder of libimagecodec.quram.so prior to SMR Sep-2026 Release 1 allows remote attackers to execute arbitrary code...

CVE-2026-21095

Heap-based buffer overflow in DNG decoder of libimagecodec.quram.so prior to SMR Sep-2026 Release 1 allows remote attackers to execute arbitrary code...

CVE-2026-21095

CVE-2026-21095 is a heap-based buffer overflow in the DNG decoder of the libimagecodec.quram.so library on Samsung mobile devices. The vulnerability allows remote attackers to achieve arbitrary code execution by supplying a crafted DNG image file, with the attack vector rated as network-based, lo...

CVE-2018-4407-iOS-exploit

CVE-2018-4407 iOS 攻击利用 CVE-2018-4407 是一种简单且非常快速的 BOF 攻击，针对 iOS/mac，可导致 DOS。该漏洞是 XNU 操作系统内核网络代码中的堆缓冲区溢出。XNU 被 iOS 和 macOS 共同使用，因此 iPhone、iPad 和 Macbook 均受影响。 测试环境 macOS High Sierra 10.13.6 Python 3.6 iOS 11.2.6 注意：scapy 需要从 Github 仓库下载并运行 shell 命令 'python3 setup.py install'...

MGASA-2026-0384 Updated spice-vdagent packages fix security vulnerabilities

Integer overflow in udscswrite leading to heap buffer overflow. CVE-2026-57965 Path traversal in file transfer via unsanitized filename. CVE-2026-57966...

Updated spice-vdagent packages fix security vulnerabilities

Integer overflow in udscswrite leading to heap buffer overflow. CVE-2026-57965 Path traversal in file transfer via unsanitized filename. CVE-2026-57966...