66870 matches found
CVE-2021-40346
CVE-2021-40346 โ HAProxy Integer Overflow leading to HTTP Request Smuggling Vulnerability Summary HAProxy is an open-source reverse proxy and load balancer that handles load distribution and ACL access control rules processing. CVE-2021-40346 is an ACL bypass vulnerability that occurs when HAProx...
CVE-2015-1635-POC
CVE-2015-1635-POCใMS15-034 HTTP.sys HTTP.sysใฏใMicrosoft WindowsใHTTPใชใฏใจในใใๅฆ็ใใใซใผใใซใใฉใคใใงใใIISใตใผใใผใฎใใใฉใผใใณในใๆ้ฉๅใใใใใซIIS6.0ใใๅฐๅ ฅใใใIISใตใผใในใใญใปในใฏHTTP.sysใซไพๅญใใฆใใพใใHTTP.sysใชใขใผใใณใผใๅฎ่ก่ๅผฑๆงใฎๅฎไฝใฏใHTTP.sysใฎๆดๆฐใชใผใใผใใญใผ่ๅผฑๆงใงใใ CVE-2015-1635-POC.pyใฏใIP/ใใกใคใณใใใผใใๆๅฎใใฆ่ๅผฑๆงใฎๆค่จผใ่กใใใจใใงใใพใใ POCใฎไฝฟ็จๆนๆณ: python3 CVE-2015-1635-POC....
CVE-2025-32023
CVE-2025-32023 Remote Code Execution in Redis HyperLogLog Operations Vulnerability Summary CVE-2025-32023 is a remote code execution RCE vulnerability in the Redis database, specifically affecting the handling of HyperLogLog data structure operations. This flaw allows an authenticated user to...
redis-stack-CVE-2024-55656
CVE-2024-55656 - Redis Stack - RedisBloom Integer Overflow Remote Code Execution Vulnerability Title: Redis Stack RedisBloom Integer Overflow Remote Code Execution Vulnerability ZDI: ZDI-25-009 CVE: CVE-2024-55656 Credits: rick2600 and gqsilva CVSS: 8.8 HIGH Affected version: RedisBloom v2.6.12...
CVE-2026-7878-eBPF-Verifier-Type-Confusion-Kernel-Memory-Read-Write
6. CVE-2026-7878 โ eBPF ๆค่จผๅจใฎๅๆททไนฑ โ ใซใผใใซใกใขใชใฎ่ชญใฟๆธใ ๆฆ่ฆ eBPF ๆค่จผๅจใฎๅข็่ฟฝ่ทกใซใใใๅพฎๅฆใชๆดๆฐใชใผใใผใใญใผใซใใใๆปๆ่ ใฏ็ฏๅฒๅคใฎใซใผใใซใกใขใชใซใขใฏใปในใใ eBPF ใใญใฐใฉใ ใไฝๆใงใใพใใ ้ๅคงๅบฆ: Critical ใซใผใใซ็นๆจฉๆๆ ผ ใฆใผใถใผใขใผใ eBPF ๆค่จผๅจใทใใฅใฌใผใฟ C & ใจใฏในใใญใคใ // ebpfverifiersim.c - Simulated vulnerable verifier with type confusion include include include include define...
CVE-2024-50944
CVE-2024-50944 Description SimplCommerce is affected by an integer overflow vulnerability in the cart logic, allowing manipulation of product quantities and total prices via crafted quantity parameters. Detection Method An attacker can detect this vulnerability by adding a product to the cart wit...
weightBufs
WeightBufs: WeightBufs is a kernel r/w exploit for all Apple devices with Neural Engine support. Bugs and Exploit by @simo36, you can read my presentation slides at POC for more details about the vulnerabilities and the exploitation techniques. The exploit doesn't rely on any hardcoded address or...
Damn_Vulnerable_C_Program
ๆณจ๏ผใใกใคใซๅใฏimgRead.cใใdvcp.cใซๅคๆดใใใพใใใๅ็ปใใ่ฆงใฎๅ ดๅใฏimgRead.cใจ่กจ็คบใใใพใใใGitHubใชใใธใใชใงใฏdvcp.cใจใชใฃใฆใใพใใฎใงใๆญฃใใใใกใคใซๅใไฝฟ็จใใฆใใ ใใใ Damn Vulnerable C ProgramDVCP ็งใฎYouTubeใใฃใณใใซ: https://www.youtube.com/user/MrHardik05/featured?viewas=subscriber ใใใฏไฝใงใใ๏ผ ใใใฏใไธ่ฌ็ใช็จฎ้กใฎ่ๅผฑๆงใ่ชฌๆใใใใใซ็งใใณใผใใฃใณใฐใใใทใณใใซใชCใใญใฐใฉใ ใงใใไพ: 1. ๆดๆฐใชใผใใผใใญใผ 2...
CVE-2019-19012
Integer overflow in Oniguruma An integer overflow in the searchinrange function in regexec.c in Oniguruma 6.x before 6.9.4rc2 leads to an out-of-bounds read, in which the offset of this read is under the control of an attacker. This only affects the 32-bit compiled version. Remote attackers can...
SUSE SLES15 Security Update : kernel RT (Live Patch 19 for SUSE Linux Enterprise 15 SP7) (SUSE-SU-2026:4433-1)
The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4433-1 advisory. This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.72 fixes various security issues: The following security issues were fixed: -...
Linux Distros Unpatched Vulnerability : CVE-2026-66837
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Stack-based Buffer Overflow, Integer Overflow or Wraparound vulnerability in Apache Thrift php bindings. This issue affects Apache Thrift: before 0.25.0. Users...
CVE-2026-0049
CVE-2026-0049 โ Android DNG zero-click DoS dngsdk MapTable add-overflow Full research material and PoC. Narrative analysis: ๐ฎ๐นBLOG.md ยท ๐ฌ๐งBLOG.en.md. Bug : unsigned integer overflow on fAreaSpec.Plane + fAreaSpec.Planes in dngopcodeMapTable::ProcessArea dngsdk/source/dngmiscopcodes.cpp:388. Impact...
CVE-2026-49919
A flaw was found in FreeType. An attacker could cause an application crash leading to a Denial of Service DoS by tricking a user or application into rendering a specially crafted color font. This issue occurs due to an integer overflow during bitmap dimension calculations when blending color font...
CVE-2026-103629
Integer overflow in Skia in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: High...
DEBIAN-CVE-2026-103629
Integer overflow in Skia in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: High...
CVE-2026-103621
Integer overflow in Compositing in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: High...
DEBIAN-CVE-2026-103621
Integer overflow in Compositing in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: High...
EUVD-2026-91712
Integer overflow in Skia in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: High...
CVE-2026-103629
Google Chrome versions prior to 154.0.8037.97 are vulnerable to an integer overflow in the Skia component. A remote attacker can exploit this by using a crafted HTML page to leak cross-origin data . This issue is rated as High severity by Chromium. The vulnerability is addressed in the 154.0.8037...
