AFD

AFD CVE-2022-24494 La vulnerabilità è una lettura arbitraria della memoria. La causa principale è la mancanza di validazione di un indirizzo di memoria fornito dallo spazio utente che viene utilizzato in un'operazione memcpy per copiare dati da questo indirizzo di memoria nella memoria del pool. ...

CVE-2025-52413

CVE-2025-52413 — Particle Device OS BLE Pufferüberlauf Entdecker : Golden Ticket Labs Anbieter : Particle Datum der Zuweisung : 12. August 2025 MITRE Beschreibung Ein Pufferüberlauf in der Komponente blecontrolrequestchannel.cpp von Particle Device OS v5.6.0 ermöglicht das Überschreiben von...

CVE-2026-80615

In the Linux kernel, the following vulnerability has been resolved: net: dstmetadata: fix false-positive memcpy overflow in tundstunclone kmallocflex in metadatadstalloc sets countedby for the structure to the optionslen, which is then initialized to zero. Later, we're initializing the structure ...

CVE-2026-80615

CVE-2026-80615 is a false-positive memcpy overflow in the Linux kernel's net: dst_metadata subsystem, specifically in tun_dst_unclone. The issue occurs because kmalloc_flex() in metadata_dst_alloc() sets __counted_by to options_len (initialized to zero), causing the compiler to flag a potential b...

EUVD-2026-67491

In the Linux kernel, the following vulnerability has been resolved: net: dstmetadata: fix false-positive memcpy overflow in tundstunclone kmallocflex in metadatadstalloc sets countedby for the structure to the optionslen, which is then initialized to zero. Later, we're initializing the structure ...

CVE-2026-23002-5G-NAS-Message-Buffer-Overflow-in-gNodeB

CVE-2026-23002 – Overflow del buffer del messaggio NAS 5G nel gNodeB Codice del programma simulazione in C root@kitploit: // gnbnassim.c - Simulated 5G gNodeB parsing NAS Registration Request include include include define MAXIESIZE 128 void processregistrationrequestuint8t nasmsg, uint16t length...

cve-2025-2082-POV

CVE-2025-2082 – PoV di sovrascrittura del puntatore a funzione stile VCSEC Questo repository dimostra una Prova di Vulnerabilità PoV che simula un difetto critico di corruzione della memoria ispirato a CVE-2025-2082, scoperto nel componente VCSEC Vehicle Controller Security di Tesla. La...

CVE-2025-30216-PoC

PoC für CVE-2025-30216: CryptoLib Heap-Overflow-Sicherheitslücke Überblick CryptoLib bietet eine reine Softwarelösung unter Verwendung des CCSDS Space Data Link Security Protocol - Extended Procedures SDLS-EP zur Sicherung der Kommunikation zwischen einem Raumfahrzeug, das das core Flight System...

CVE-2025-62454

यह शोषण नहीं है, केवल POC है root@kitploit: BUGCHECKCODE: 50 BUGCHECKP1: ffff808b75973000 BUGCHECKP2: 2 BUGCHECKP3: fffff803df12ddda BUGCHECKP4: 0 READADDRESS: ffff808b75973000 Special pool MMINTERNALCODE: 0 IMAGENAME: cldflt.sys MODULENAME: cldflt FAULTINGMODULE: fffff803df110000 cldflt...

CVE-2015-8299

knAx20150101 Titolo: Vulnerabilità di esecuzione remota di codice nel software di gestione KNX ETS Categoria/Riassunto: Vulnerabilità di buffer overflow Prodotto: ETS Engineering Tool Software Versioni affette: ETS 4.1.5 Build 3246 nessuna altra versione testata Versione corretta in: sconosciuto...

CVE-2026-12485

🚨 CVE-2026-12485 - Kritische, nicht authentifizierte Remote-Codeausführung RCE GeoVision GV-I/O Box 4E – Firmware v2.09 Offenlegungsdatum: 23. Juni 2026 CWE: CWE-121 – Stapelbasierter Pufferüberlauf Angriffsvektor: Netzwerk nicht authentifiziert Eine nicht authentifizierte Schwachstelle in Form...

CVE-2020-0023

CVE-2020-0022 Sembra che Android 9-6 abbiano un sottosistema Bluetooth simile, mentre Android 5 e 4 sono diversi. Android 9.0 Esperimenti BlueFrag Patch: https://android.googlesource.com/platform/system/bt/+/3cb7149d8fed2d7d77ceaa95bf845224c4db3baf Di seguito ho raggiunto la condizione patchata...

CVE-2018-1932X

CVE-2018-1932X Rust Exploit POC per GIGABYTE APP Center v1.05.21 e precedenti Solo perché il tuo target non è memory safe non significa che il tuo exploit debba esserlo! Vulnerabilità utilizzate: CVE-2018-19320 - funzionalità ring0 simile a memcpy CVE-2018-19323 - lettura e scrittura dei Machine...

CVE-2026-22013-Hardware-Wallet-USB-Descriptor-Buffer-Overflow

CVE-2026-22013 – Pufferüberlauf im USB-Deskriptor einer Hardware-Wallet Programmcode C-Firmware-Simulation root@kitploit: // hwwalletusb.c - USB descriptor parsing with fixed buffer include void handleusbsetupchar data, int len char descriptor32; if len 0 && data0 == 0x06 // GETDESCRIPTOR // Copy...

CVE-2018-19320

CVE-2018-19320 Explorando funcionalidade semelhante a memcpy do ring0 para desabilitar o Driver Signing Enforcement DSE conforme documentado aqui: http://deniable.org/windows/windows-callbacks Referências https://cve.mitre.org/cgi-bin/cvename.cgi?name=2018-19320...

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: i2c: mlxbf: prevents stack overflow in mlxbfi2csmbusstartTransaction The memcpy function is called in a loop, without checking the upper bound of 'operation-length', and 'dataidx' is also incremented...

kernel: drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Validate payload length and linkindex in dcprocessdmubauxtransferasync Why&How dcprocessdmubauxtransferasync copies payload-length bytes into a 16-byte stack buffer dpaux.data16 guarded only by an ASSERT, which i...

CVE-2026-62292

libheif is a HEIF and AVIF file format decoder and encoder. From 1.19.0 until 1.23.1, a crafted uncompressed HEIF image using generic zlib unci full-item compression can crash an application that decodes an advertised tile with heifimagehandledecodeimagetile. In...

CVE-2026-62292

In libheif 1.19.0–1.23.1, unc_decoder::fetch_tile_data() computes a large tile offset that, combined with range_start_offset + range_size in get_compressed_image_data_uncompressed(), wraps to zero and bypasses the bounds check. This passes an invalid source pointer and 1 TB length to memcpy, caus...

CVE-2026-62292 libheif: Out-of-bounds read in uncompressed unci tile range slicing

libheif is a HEIF and AVIF file format decoder and encoder. From 1.19.0 until 1.23.1, a crafted uncompressed HEIF image using generic zlib unci full-item compression can crash an application that decodes an advertised tile with heifimagehandledecodeimagetile. In...