122589 matches found
CVE-2026-45761
Suricata versions prior to 7.0.16 and 8.0.5 are affected by a heap buffer overflow in the rule parsing/loading path. A crafted detection rule using mixed-case frame syntax triggers the overflow while Suricata loads signatures โ not via network traffic alone. The CVSS 3.1 score is 3.3 (LOW) , with...
CVE-2026-45761 Suricata detect: case-insensitive frame handling can cause heap buffer overflow during rule load
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 7.0.16 and 8.0.5, a crafted rule using mixed-case frame syntax could trigger a heap buffer overflow while Suricata is loading signatures. The issue is reached...
libtalloc
libtalloc libtalloc ๆฏไธไธช็จไบ GDB ็ python ่ๆฌ๏ผๅฏ็จไบๅๆโๅนณๅกๅ้ ๅจโ๏ผtalloc๏ผใๅ ณไบ talloc ็ไป็ปๅฏไปฅๅจ่ฟ้ๆพๅฐ๏ผ https://talloc.samba.org/talloc/doc/html/index.html libtalloc ็็ตๆๆฅ่ชๅ ถไป็จไบๅๆๅ ็ gdb python ่ๆฌ๏ผไพๅฆ unmaskjemalloc ๅ libheapใไธไบๅบๆฌๅ่ฝไธ่ฟไบ้กน็ฎ็ธๅใ https://github.com/cloudburst/libheap https://github.com/argp/unmaskjemalloc...
libslub
libslub libslub is a python library to examine the SLUB managements structures and object allocations the Linux kernel heap implementation. It is currently designed for use with GDB but could easily be adapted to work with other debuggers. It helps understanding SLUB internals and developing Linu...
libptmalloc
libptmalloc libptmalloc es una biblioteca de Python para examinar ptmalloc la implementaciรณn del heap en el espacio de usuario de glibc. Actualmente estรก diseรฑada para usarse con GDB, pero podrรญa adaptarse fรกcilmente para funcionar con otros depuradores. Instalaciรณn Consulte la Guรญa de instalaciรณ...
libmempool
libmempool Preliminary note: we recommend you to use this as part of asatools but it can also be used standalone. libmempool is a python script and GDB analysis tool to aid in the analysis of mempool-related data structuress found inside various heaps on Cisco ASA devices. Normally this informati...
Foxit-Precise-Heap-Spray
This repository does not have a README...
cve-images
cve-images โ intentionally vulnerable lab images A collection of deliberately vulnerable Docker images for security study in an isolated lab. Started as nginx CVE reproductions and is growing into a broader set of vulnerable-by-design images e.g. DVWA. โ ๏ธ Safety These images are vulnerable on...
Python-precise-heap-spraying-
Python-precise-heap-spraying- Python precise heap spraying 0c0c0c0c...
CVE-2021-44142
CVE-2021-44142 Vulnerability Checker A tool to check if a Samba server is vulnerable to CVE-2021-44142 Background CVE-2021-44142 is a heap out-of-bounds read and write in Samba's vfsfruit module used at Pwn2Own Austin 2021 against the Western Digital PR4100. It was first discovered by Nguyแป n Hoร n...
CTT-Vsyslog-Vortex-CVE-2023-6246
CTT-Vsyslog-Vortex-CVE-2023-6246 CVE-2023-6246 glibc vsysloginternal heap buffer overflow exploitation using Convergent Time Theory ฮฑ = 0.0302011. 33-layer temporal heap spray + phase-locked trigger for reliable local privilege escalation. README.md root@kitploit: CTT-Vsyslog-Vortex Temporal...
CVE-2026-31402
๐ก๏ธ CVE-2026-31402 โ NFSv4 LOCK Replay Cache Heap Overflow CVE-2026-31402: Linux NFS Bug Hidden for 23 Years ๐ Overview CVE-2026-31402 is a heap overflow vulnerability in the NFSv4.0 LOCK replay cache of the Linux kernel. It arises due to improper handling of responses larger than the fixed buffer...
CVE-2021-3156-Sudo-Buffer-Overflow-Linux
CVE-2021-3156 โ Sudo Buffer Overflow Linux Baron Samedit Privilege Escalation Exploit ๐ Overview This project demonstrates the exploitation of CVE-2021-3156 Baron Samedit , a critical heap-based buffer overflow vulnerability in the Linux sudo utility. The vulnerability allows a low-privileged use...
DEBIAN-CVE-2026-88051
Tesseract is an open source OCR engine. In version 5.5.3 and earlier, the callback form of GenericVector::read in src/ccutil/genericvector.h reads the independent int32 fields reserved and sizeused from a .traineddata model without a cap or an invariant check. reservereserved allocates the backin...
DEBIAN-CVE-2026-88052
Tesseract is an open source OCR engine. In version 5.5.3 and earlier, UNICHARSET::loadviafgets in src/ccutil/unicharset.cpp trusts the declared unichar count as a loop bound and uses id as an unchecked index into the unichars vector. unicharinsertbackwardscompatible can leave the vector unchanged...
CVE-2026-88051
Tesseract is an open source OCR engine. In version 5.5.3 and earlier, the callback form of GenericVector::read in src/ccutil/genericvector.h reads the independent int32 fields reserved and sizeused from a .traineddata model without a cap or an invariant check. reservereserved allocates the backin...
CVE-2026-88052
Tesseract is an open source OCR engine. In version 5.5.3 and earlier, UNICHARSET::loadviafgets in src/ccutil/unicharset.cpp trusts the declared unichar count as a loop bound and uses id as an unchecked index into the unichars vector. unicharinsertbackwardscompatible can leave the vector unchanged...
CVE-2026-88053
Tesseract is an open source OCR engine. In version 5.5.3 and earlier, Classify::ReadIntTemplates in src/classify/intproto.cpp reads NumClassPruners, NumClasses, and NumProtoSets from the TESSDATAINTTEMP component of a crafted .traineddata file and uses those values as loop bounds without validati...
CVE-2026-88035 Heap buffer overflow via wrapped size check during SASL username canonicalization in MongoDB C Driver
A size check in the client-side authentication path of the MongoDB C Driver can wrap around, so an unusually large user-name value is accepted and copied past the end of a small buffer. A party able to set the driver's connection settings may cause the application that embeds the driver to...
CVE-2026-88035 Heap buffer overflow via wrapped size check during SASL username canonicalization in MongoDB C Driver
A size check in the client-side authentication path of the MongoDB C Driver can wrap around, so an unusually large user-name value is accepted and copied past the end of a small buffer. A party able to set the driver's connection settings may cause the application that embeds the driver to...