Debian dsa-6538 : redis - security update

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6538 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6538-1 [email protected] https://www.debian.org/securit...

RockyLinux 8 : gawk (RLSA-2026:73511)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:73511 advisory. gawk: gawk: Memory corruption via integer overflow CVE-2026-40468 gawk: gawk: Denial of Service due to Use After Free vulnerability in io.c CVE-2026-404...

CVE-2018-12018

CVE-2018-12018 Mitre https://vulners.com/cve/CVE-2018-12018 Go以太坊（即geth）1.8.11之前版本中LES协议实现的GetBlockHeadersMsg处理器，由于数组索引的整数有符号性错误，可能导致访问违规，攻击者可通过发送包含-1 query.Skip值的数据包发起拒绝服务攻击。受影响的远程节点会因此立即崩溃，即EPoD（以太坊死亡数据包）问题。 主网 python3 exploit.py --mainnet --enode 'enode' 测试网 python3 exploit.py --enode 'enode'...

CVE-2026-93546

A flaw was found in httpd. An integer overflow in the moddavfs module occurs when processing Web Distributed Authoring and Versioning WebDAV PROPPATCH requests that declare an excessive number of XML namespaces. An authenticated remote attacker with write access can exploit this flaw to crash...

PCP: PCP: Denial of Service due to signed integer overflow

A signed integer overflow in the PCP pmGetPDU function can be exploited via crafted network packets during PDU processing or SASL negotiation. This permanently blinds the affected daemon, resulting in a total denial of service DoS for subsequent packet reads...

PCP: PCP: Denial of Service due to signed integer overflow

A signed integer overflow in the PCP pmGetPDU function can be exploited via crafted network packets during PDU processing or SASL negotiation. This permanently blinds the affected daemon, resulting in a total denial of service DoS for subsequent packet reads...

GO-2026-6498 RabbitMQ amqp091-go: Silent Data Truncation and State Corruption via Shortstr Integer Overflow in github.com/rabbitmq/amqp091-go

RabbitMQ amqp091-go: Silent Data Truncation and State Corruption via Shortstr Integer Overflow in github.com/rabbitmq/amqp091-go...

CVE-2026-62735

CVE-2026-62735 Información Esta vulnerabilidad fue descubierta originalmente por Siyeon Wi. Reproduje la vulnerabilidad de forma independiente con fines educativos y de estudio de caso. La vulnerabilidad también fue demostrada en Pwn2Own Berlin 2026. Referencias: Estado de TrendAI Zero Day...

CVE-2025-46817-PoC

CVE-2025-46817 Redis Integer Overflow Exploit A lightweight C implementation of the CVE-2025-46817 exploit for Redis integer overflow vulnerability. 🚀 Features Lightweight : Single C file, no external dependencies beyond hiredis Fast : Native compilation for maximum performance Colorful Output :...

jfrog-CVE-2023-43786-libX11_DoS

Prueba de concepto de CVE-2023-43786 Resumen Esta es una prueba de concepto de denegación de servicio DoS de la vulnerabilidad de libX11 CVE-2023-43786. Provocará el desbordamiento de enteros y causará un bucle infinito. Las versiones vulnerables son: libX11 1.8.6 y anteriores, y libXpm 3.5.16...

CVE-2025-46817

CVE-2025-46817 – Desbordamiento de enteros en unpack de Redis Lua Posible RCE PoC de desbordamiento de enteros en unpack de Redis Lua que provoca un crecimiento descontrolado de la pila y un bloqueo en la versión 8.2.1. Resumen Redis 8.2.1 incluye Lua 5.1 con una implementación de unpack que...

CVE-2021-40346

CVE-2021-40346 El desbordamiento de enteros en la representación interna de la cabecera de solicitud permite el contrabando de solicitudes HTTP HTTP request smuggling. Este repositorio presenta un PoC construido con docker-compose utilizando dos imágenes de Docker: una con una versión vulnerable ...

CVE-2026-93546

Integer overflow in moddavfs in Apache HTTP Server through 2.4.68 allows an authenticated WebDAV client with write access to crash worker processes and persistently corrupt a directory's property database via PROPPATCH requests declaring many XML namespaces...

CVE-2025-52099

CVE-2025-52099 un desbordamiento de enteros en SQLite 3.50.0 A continuación se proporciona una prueba de concepto PoC para desencadenar un desbordamiento de enteros en la función setupLookaside de SQLite 3.50.0. Este desbordamiento ocurre debido a la multiplicación sin verificar de sz nBig, que...

CVE-2026-63209

A flaw was found in the klauspost/compress package. A remote attacker can exploit this vulnerability by supplying a specially crafted compression dictionary with an excessively large repeat value, triggering an integer overflow. When the dictionary is subsequently processed, this overflow leads t...

hpack: Unbounded variable integer decoding can cause run-away computation on malformed input

ImpactUsers of the python-hyper/hpack library, most commonly used as downstream dependency of the python-hyper/h2 library an HTTP/2 client and server implementation. Unbounded variable integer decoding can cause run-away computation on malformed input leading to On^2 runtime, effectively blocking...

CVE-2026-85228

A flaw was found in Deep Java Library. Due to an integer overflow during tensor buffer validation, a remote, unauthenticated attacker can send a crafted tensor payload to trigger out-of-bounds memory access. Successful exploitation can allow an attacker to obtain sensitive data from adjacent...

CVE-2025-54957

POC del Decodificador Unificado Dolby CVE-2025-54957 Cuando un archivo es procesado por el Decodificador Unificado DDPlus de Dolby, es posible una escritura fuera de límites cuando se procesan los datos de evolución. El decodificador escribe la información de evolución en un búfer contiguo grande...

openssl: OpenSSL: Heap buffer over-read in ASN.1 decoding can lead to denial of service or information disclosure.

A flaw was found in OpenSSL. An integer truncation vulnerability in the ASN.1 decoder can occur when processing a crafted DER-encoded ASN.1 structure with a primitive element exceeding 2 gigabytes. A remote attacker could exploit this to cause a heap buffer over-read. This may lead to an...

CVE-2026-2222-MQTT-Broker-CONNECT-Packet-Heap-Overflow

CVE-2026-2222 – MQTT Broker CONNECT 数据包堆溢出 程序代码（C + Python） // mqttbrokersim.c - Simulated vulnerable MQTT broker include include include struct mqttconnect char protocolname8; uint8t protocollevel; uint8t flags; uint16t keepalive; // remaining length field misinterpreted ; void...