Exploit for CVE-2026-81000

⚡ CVE-2026-81000 - TUNderflow Linux Kernel TUN/TAP Rece...

CVE-2026-42980-POC

CVE-2026-42980 Публичное раскрытие Этот репозиторий содержит материалы публичного раскрытия для CVE-2026-42980 — уязвимости целочисленного переполнения underflow в Windows kernel WMI, которая может быть использована для локального повышения привилегий до NT AUTHORITY\SYSTEM на уязвимых лабораторн...

CVE-2019-14287-write-up

CVE-2019-14287-write-up 4294967295 Ошибка Sudo позволяет ограниченным пользователям выполнять команды от root ДЕМОНСТРАЦИЯ УЯЗВИМОСТИ Добавьте нового пользователя: sudo su - root useradd -m -s /bin/bash testuser passwd testuser // добавьте пароль для пользователя visudo Добавьте новую запись test...

CVE-2026-85769

CVE-2026-85769 Heap out-of-bounds read in libtpms TPM 2.0 volatile-state deserialization. An unbounded optional-block skip in blockskipread advances the unmarshal cursor by an attacker-controlled 16-bit length and drives the signed remaining-size counter negative. Every downstream bounds check th...

CVE-2022-0185-Case-Study

CVE-2022-0185-Case-Study Это тематическое исследование является результатом задания по курсу ECE 9069: Introduction to Hacking : https://whisperlab.org/introduction-to-hacking/ Обзор CVE-2022-0185 CVE-2022-0185 — это ошибка переполнения буфера в куче heap-based buffer overflow, обнаруженная в том...

Windows-CVE-2024-38063

Windows-TCP/IP-IPv6 CVE-2024-38063 Уязвимость CVE-2024-38063 — это уязвимость удалённого выполнения кода в компоненте TCP/IP операционной системы Windows. Согласно официальной информации Microsoft, данная уязвимость имеет наивысший уровень серьезности, оценка CVSS — 9.8. Под её воздействием...

CVE-2026-66729-Out-of-Bounds-Read-in-facil.io-MIME-Parser-leads-to-Server-Crash

Раскрытие уязвимости: чтение за пределами буфера в MIME-парсере facil.io приводит к сбою сервера Присвоенный CVE ID CVE-2026-66729 Продукт: facil.io Затронутые версии: facil.io = 0.6.0 все 0.6.x, все 0.7.x, master; уязвимость появилась при добавлении MIME-парсера в 0.6.0 Компонент:...

CVE-2026-25075-check

Инструмент оценки уязвимости CVE-2026-25075 Безопасно определите, уязвим ли VPN-сервер strongSwan к CVE-2026-25075, не вызывая никаких сбоев. Полное описание см. в подробном отчёте в блоге Bishop Fox. Описание CVE-2026-25075 — это уязвимость целочисленного переполнения вниз integer underflow в...

EulerOS Virtualization 2.12.0 : krb5 (EulerOS-SA-2026-3645)

According to the versions of the krb5 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : An integer underflow vulnerability was found in MIT krb5 in the berval2tldata function in plugins/kdb/ldap/libkdbldap/ldapprincipal2....

EulerOS Virtualization 2.12.1 : krb5 (EulerOS-SA-2026-3591)

According to the versions of the krb5 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : An integer underflow vulnerability was found in MIT krb5 in the berval2tldata function in plugins/kdb/ldap/libkdbldap/ldapprincipal2....

CVE-2026-93395

A missing lower-bound validation in the bsonnewfrombuffer function of libbson allows an integer underflow when processing BSON data with a zero-length prefix. The function reads a 32-bit document length from the input buffer but does not verify that the value is at least 5 the minimum valid BSON...

CVE-2026-93395 Integer Underflow → Heap Out-of-Bounds Read in `bson_new_from_buffer()

A missing lower-bound validation in the bsonnewfrombuffer function of libbson allows an integer underflow when processing BSON data with a zero-length prefix. The function reads a 32-bit document length from the input buffer but does not verify that the value is at least 5 the minimum valid BSON...

CVE-2026-93395

A missing lower-bound validation in the bsonnewfrombuffer function of libbson allows an integer underflow when processing BSON data with a zero-length prefix. The function reads a 32-bit document length from the input buffer but does not verify that the value is at least 5 the minimum valid BSON...

CVE-2026-93395

CVE-2026-93395 is an integer underflow in the bson_new_from_buffer() function of libbson (the MongoDB C driver's BSON library). The function reads a 32-bit document length from input but fails to verify it is at least 5 (the minimum valid BSON document size). When the length field is zero , the e...

EUVD-2026-82471

A missing lower-bound validation in the bsonnewfrombuffer function of libbson allows an integer underflow when processing BSON data with a zero-length prefix. The function reads a 32-bit document length from the input buffer but does not verify that the value is at least 5 the minimum valid BSON...

FreeRDP: FreeRDP: Denial of Service via integer underflow in RAIL channel handling

A flaw was found in FreeRDP. A remote attacker, by sending a specially crafted Remote Desktop Protocol RDP packet, could trigger a heap buffer overflow in the server-side RAIL channel handler. This vulnerability, caused by an integer underflow, allows the attacker to corrupt memory and crash the...

CVE-2026-90372 wifi: mt76: mt7915: avoid nss underflow in mt7915_mcu_get_sta_nss

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7915: avoid nss underflow in mt7915mcugetstanss If a peer's VHT/HE MCS map has no supported spatial stream all fields 0x3, the loop exits with nss == 0 and the function returned u8-1 255, which was then written into...

kernel: IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN

A flaw was found in the Linux kernel's Internet Small Computer System Interface iSCSI Extensions for Remote Direct Memory Access RDMA iSER module. A remote attacker can send a specially crafted login request with a payload shorter than expected, leading to an integer underflow. This underflow...

kernel: RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv

A flaw was found in the Linux kernel's RDMA/rxe component. The rxercv function does not adequately validate the BTH pad and ICRC fields of incoming packets before calculating the payload size. A remote attacker could exploit this by sending a specially crafted short packet or a packet with a forg...

Important: Red Hat Security Advisory: gstreamer1-plugins-good security update

An update for gstreamer1-plugins-good is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severit...