CVE-2025-21333

CVE-2025-21333 Débordement de tas Paged Pool dans Hyper-V NT Kernel Integration VSP vkrnlintvsp.sys → élévation de privilèges locale LPE. Ce répertoire contient le code source du PoC de laboratoire basé sur MrAle98/CVE-2025-21333-POC, incluant des correctifs locaux. 1. Résumé de la vulnérabilité...

CVE-2026-91086

A security vulnerability has been detected in GPAC up to f1219cde. Affected by this issue is the function mpgviddmxprocess of the file filters/reframempgvid.c of the component MPEG Video Reframer. Such manipulation leads to heap-based buffer overflow. The attack can be executed remotely. The...

CVE-2026-91088

A vulnerability has been found in GPAC up to f1219cde. This issue affects the function gfurlconcatenateex of the file utils/url.c of the component URL Handler. The manipulation leads to heap-based buffer overflow. An attack has to be approached locally. Upgrading to version abi-16.23 is capable o...

CVE-2026-91088

GPAC is affected by a heap-based buffer overflow in the gf_url_concatenate_ex function located in utils/url.c (URL Handler component), affecting versions up to commit f1219cde. The flaw is triggered locally with low privileges and passive user interaction, leading to low impact on confidentiality...

EUVD-2026-78303

A vulnerability has been found in GPAC up to f1219cde. This issue affects the function gfurlconcatenateex of the file utils/url.c of the component URL Handler. The manipulation leads to heap-based buffer overflow. An attack has to be approached locally. Upgrading to version abi-16.23 is capable o...

CVE-2026-91088 GPAC URL url.c gf_url_concatenate_ex heap-based overflow

A vulnerability has been found in GPAC up to f1219cde. This issue affects the function gfurlconcatenateex of the file utils/url.c of the component URL Handler. The manipulation leads to heap-based buffer overflow. An attack has to be approached locally. Upgrading to version abi-16.23 is capable o...

CVE-2026-91088 GPAC URL url.c gf_url_concatenate_ex heap-based overflow

A vulnerability has been found in GPAC up to f1219cde. This issue affects the function gfurlconcatenateex of the file utils/url.c of the component URL Handler. The manipulation leads to heap-based buffer overflow. An attack has to be approached locally. Upgrading to version abi-16.23 is capable o...

CVE-2026-48095

CVE-2026-48095 7-Zip est un archiveur de fichiers offrant un taux de compression élevé. Les versions 26.00 et antérieures contiennent une vulnérabilité de débordement de tas heap buffer overflow causée par une sous-allocation dans le tampon du flux compressé NTFS décalage UB de GetCuSize,...

CVE-2026-91086

GPAC (up to commit f1219cde) contains a heap-based buffer overflow in the function mpgviddmx_process within filters/reframe_mpgvid.c, part of the MPEG Video Reframer component. The vulnerability is exploitable remotely with low complexity and no required privileges, though user interaction is req...

EUVD-2026-78301

A security vulnerability has been detected in GPAC up to f1219cde. Affected by this issue is the function mpgviddmxprocess of the file filters/reframempgvid.c of the component MPEG Video Reframer. Such manipulation leads to heap-based buffer overflow. The attack can be executed remotely. The...

CVE-2026-91086 GPAC MPEG Video Reframer reframe_mpgvid.c mpgviddmx_process heap-based overflow

A security vulnerability has been detected in GPAC up to f1219cde. Affected by this issue is the function mpgviddmxprocess of the file filters/reframempgvid.c of the component MPEG Video Reframer. Such manipulation leads to heap-based buffer overflow. The attack can be executed remotely. The...

CVE-2026-91086 GPAC MPEG Video Reframer reframe_mpgvid.c mpgviddmx_process heap-based overflow

A security vulnerability has been detected in GPAC up to f1219cde. Affected by this issue is the function mpgviddmxprocess of the file filters/reframempgvid.c of the component MPEG Video Reframer. Such manipulation leads to heap-based buffer overflow. The attack can be executed remotely. The...

CVE-2018-4121

CVE-2018-4121 - Exploit POC RCE des sections Wasm de Safari par MWR Labs c 2018 Détails cet exploit de preuve de concept ne cible que les versions Safari 11.0.3 13604.5.6 sur macOS 10.13.3 17D47 compiler le payload de votre choix en tant que dylib avec un constructeur exécuter python...

mediatek-wlan-heap-overflow-cve-2026-20452-filogic-router-rce

CVE-2026-20452 — PoC de débordement de tas du point d'accès WLAN MediaTek Exploit de type preuve de concept pour CVE-2026-20452, un débordement de tampon basé sur le tas dans le pilote de point d'accès WLAN de MediaTek. Vulnérabilité CVE : CVE-2026-20452 CVSS : 8.0 ÉLEVÉ CWE : CWE-122 — Débordeme...

CVE-2026-42945

🛡️ CVE-2026-42945 - NGINX Rift Критическое переполнение буфера в куче в NGINX 📌 Обзор CVE-2026-42945 также известная как NGINX Rift — это критическая уязвимость безопасности в модуле ngxhttprewritemodule NGINX. Тип : Переполнение буфера в куче CWE-122 Обнаружена : Май 2026 Существовала : 18 лет...

CVE-2021-21974

CVE-2021-21974 PoC d'exécution de code à distance par débordement de tas OpenSLP dans VMware ESXi Auteur : Aiyakami Aperçu CVE-2021-21974 est une vulnérabilité de débordement de tas dans le service OpenSLP de VMware ESXi. Un attaquant non authentifié peut envoyer des paquets spécialement conçus a...

exploit-CVE-2020-28926

exploit-CVE-2020-28926 Référence https://www.rootshellsecurity.net/remote-heap-corruption-bug-discovery-minidlna/ Compilation Copiez le dossier contenant la source minidlna-1.2.1 et exécutez buildandrun.sh...

CVE-2026-47729

🦑 CVE-2026-47729 - Squidbleed ⚠️ L'ancien cousin de Heartbleed, caché dans Squid depuis 1997. ✨ Fonctionnalités PoC en un seul fichier — Zéro dépendance Serveur FTP malveillant imitant la bannière NetWare + réponse LIST tronquée Détection et décodage en temps réel des jetons Basic Auth et Bearer...

RockyLinux 10 : openssl (RLSA-2026:67154)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:67154 advisory. openssl: OpenSSL: Denial of Service via unbounded memory growth in QUIC server CVE-2026-14456 openssl: QUIC server may trigger double free when...

AlmaLinux 9 : openssl (ALSA-2026:67165)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:67165 advisory. openssl: OpenSSL: Denial of Service via unbounded memory growth in QUIC server CVE-2026-14456 openssl: QUIC server may trigger double free when processin...