Important: Red Hat Security Advisory: vim security update

An update for vim is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

vim: Vim: Heap buffer overflow allows arbitrary code execution

A heap buffer overflow in Vim allows a local attacker to cause a denial of service or potentially execute arbitrary code. The flaw is triggered by processing a specially crafted spell file, where the setsofo function fails to reset internal data between sections, leading to an out-of-bounds write...

CVE-2021-3156-Baron-Samedit

CVE-2021-3156 - Laboratorio y Exploit "Baron Samedit" Este repositorio proporciona un entorno educativo autocontenido para comprender y explotar CVE-2021-3156 , un desbordamiento de búfer en el montón en sudo que permite a cualquier usuario no privilegiado obtener privilegios de root en sistemas...

Exploit for Heap-based Buffer Overflow in F5 Nginx_Gateway_Fabric

CVE-2026-42533 Lab — NGINX Two-Pass Capture Clobbering RCE...

nginx-cve-2026-42945-check

NGINX CVE-2026-42945 本机检查脚本 语言：中文 | English 本仓库提供两份单机检查脚本，用于在 Linux / Windows 服务器本机排查 Nginx、OpenResty、Tengine 是否存在 CVE-2026-42945 相关风险。 脚本只做只读采集和本地判定，不执行漏洞 PoC，不发送攻击请求，不修改配置，不重启服务，不升级软件。 漏洞背景 CVE-2026-42945 又被称为 NGINX Rift ，公开资料将其描述为 ngxhttprewritemodule 中的堆缓冲区溢出问题。根据 NVD 描述，当 rewrite 指令与后续 rewri...

httpd: mod_proxy_ajp: heap-based buffer over-read and memory disclosure in ajp_parse_data()

A flaw was found in the modproxyajp module of httpd. When processing AJP Apache JServ Protocol messages, the ajpparsedata function attempts to read data beyond the allocated buffer size, allowing an attacker or a malformed request to cause a heap-based buffer over-read. This issue potentially lea...

httpd: Apache HTTP Server: Heap-based Buffer Overflow via malicious backend servers

A flaw was found in Apache HTTP Server. This heap-based buffer overflow vulnerability can be exploited by a malicious backend server when using ProxyPassReverseCookie directives. This could lead to a denial of service DoS condition, making the server unavailable to legitimate users...

httpd: Apache HTTP Server: Heap-based Buffer Overflow via untrusted content in mod_xml2enc

A flaw was found in Apache HTTP Server, specifically within the modxml2enc module. This heap-based buffer overflow vulnerability can be triggered when processing untrusted content through the xml2StartParse function. A remote attacker could potentially exploit this to cause a denial of service,...

Apache HTTP Server: mod_proxy_ajp: Apache HTTP Server mod_proxy_ajp: Arbitrary code execution via heap-based buffer overflow

A flaw was found in modproxyajp of Apache HTTP Server. This heap-based buffer overflow vulnerability allows a remote attacker, by connecting to a malicious AJP Apache JServ Protocol server, to send a specially crafted message. This message can cause modproxyajp to write attacker-controlled data...

Orthanc DICOM Server

ADVISORY SUMMARY Successful exploitation of this vulnerability could allow an authenticated remote attacker to write past the end of a heap allocation when Orthanc decodes an attacker-supplied PNG or JPEG image, resulting in a crash of the Orthanc process and a denial-of-service condition. 2...

CVE-2026-42945

CVE-2026-42945: NGINX Rift ヒープバッファオーバーフロー脆弱性 概要 CVE-2026-42945 は、NGINX サーバーにおける深刻なヒープバッファオーバーフローの脆弱性であり、「NGINX Rift」と呼ばれています。この脆弱性は NGINX の rewrite および set ディレクティブの処理ロジックに存在し、特定の設定条件が満たされた場合、攻撃者は悪意のあるリクエストを構築してヒープオーバーフローを引き起こし、サービス拒否（DoS）や潜在的なリモートコード実行（RCE）を引き起こす可能性があります。 脆弱性の種類 : ヒープバッファオーバーフロー...

CVE-2025-14847-MongoBleed-Exploit

CVE-2025-14847 - MongoBleed 👨‍💻 作者: Furkan KAYAPINAR @FurkanKAYAPINAR ⚠️ 仅供教育用途 针对 MongoDB Server 中严重的未授权内存泄漏漏洞的实验环境及利用脚本。 📋 目录 漏洞概述 受影响版本 安装 实验环境 使用方法 修复方案 法律声明 🔴 漏洞概述 CVE-2025-14847 MongoBleed 是 MongoDB Server 的 zlib 压缩处理中存在的一个严重的未授权内存泄漏漏洞。 属性| 值 ---|--- CVE 编号| CVE-2025-14847 CVSS 评分| 8.7 高危...

CVE-2025-49844

CVE-2025-49844 RediShell AI 製のリバースシェル PoC AI によって作られた Redishell PoC の未検証の完成版。 元の PoC: https://github.com/raminfp/redisexploit/blob/main/exploitpoc.py 韓国人のピース: https://github.com/dwisiswant0/CVE-2025-49844/blob/master/CVE-2025-49844.lua 進捗状況は？ その後、GDB...

Exploit for Use After Free in Linux Linux_Kernel

RMV Exploit — чистая сборка CVE-2026-43499 для iQOO Neo 11 PD...

FreeRDP: FreeRDP: Denial of Service via heap out-of-bounds read

A heap out-of-bounds read vulnerability in FreeRDP allows an unauthenticated, malicious RDP server to cause a Denial of Service. By sending a specially crafted glyph fragment update, the server forces the client to read beyond its allocated memory, crashing the application...

Important: Red Hat Security Advisory: freerdp security update

An update for freerdp is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring...

FreeRDP: FreeRDP: Heap-buffer-overflow allows arbitrary code execution via crafted RPC response

A flaw was found in FreeRDP. A remote attacker, specifically a malicious TS Gateway, can exploit a heap-buffer-overflow vulnerability by sending a specially crafted Remote Desktop Protocol RDP response. This occurs because the client incorrectly uses a smaller allochint value instead of the actua...

Important: Red Hat Security Advisory: freerdp security update

An update for freerdp is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerabili...

FreeRDP: FreeRDP: Denial of Service via heap out-of-bounds read

A heap out-of-bounds read vulnerability in FreeRDP allows an unauthenticated, malicious RDP server to cause a Denial of Service. By sending a specially crafted glyph fragment update, the server forces the client to read beyond its allocated memory, crashing the application...

FreeRDP: FreeRDP: Heap-buffer-overflow allows arbitrary code execution via crafted RPC response

A flaw was found in FreeRDP. A remote attacker, specifically a malicious TS Gateway, can exploit a heap-buffer-overflow vulnerability by sending a specially crafted Remote Desktop Protocol RDP response. This occurs because the client incorrectly uses a smaller allochint value instead of the actua...