CVE-2015-8299

knAx20150101 Titolo: Vulnerabilità di esecuzione remota di codice nel software di gestione KNX ETS Categoria/Riassunto: Vulnerabilità di buffer overflow Prodotto: ETS Engineering Tool Software Versioni affette: ETS 4.1.5 Build 3246 nessuna altra versione testata Versione corretta in: sconosciuto...

CVE-2025-30216-PoC

PoC für CVE-2025-30216: CryptoLib Heap-Overflow-Sicherheitslücke Überblick CryptoLib bietet eine reine Softwarelösung unter Verwendung des CCSDS Space Data Link Security Protocol - Extended Procedures SDLS-EP zur Sicherung der Kommunikation zwischen einem Raumfahrzeug, das das core Flight System...

cve-2025-2082-POV

CVE-2025-2082 – PoV di sovrascrittura del puntatore a funzione stile VCSEC Questo repository dimostra una Prova di Vulnerabilità PoV che simula un difetto critico di corruzione della memoria ispirato a CVE-2025-2082, scoperto nel componente VCSEC Vehicle Controller Security di Tesla. La...

CVE-2025-52413

CVE-2025-52413 — Particle Device OS BLE Pufferüberlauf Entdecker : Golden Ticket Labs Anbieter : Particle Datum der Zuweisung : 12. August 2025 MITRE Beschreibung Ein Pufferüberlauf in der Komponente blecontrolrequestchannel.cpp von Particle Device OS v5.6.0 ermöglicht das Überschreiben von...

AFD

AFD CVE-2022-24494 Die Schwachstelle ist ein beliebiger Speicherlesevorgang. Die Ursache ist eine fehlende Validierung einer vom Benutzermodus bereitgestellten Speicheradresse, die in einer memcpy-Operation verwendet wird, um Daten von dieser Speicheradresse in den Pool-Speicher zu kopieren. Die...

CVE-2026-12485

🚨 CVE-2026-12485 - Kritische, nicht authentifizierte Remote-Codeausführung RCE GeoVision GV-I/O Box 4E – Firmware v2.09 Offenlegungsdatum: 23. Juni 2026 CWE: CWE-121 – Stapelbasierter Pufferüberlauf Angriffsvektor: Netzwerk nicht authentifiziert Eine nicht authentifizierte Schwachstelle in Form...

CVE-2020-0023

CVE-2020-0022 Sembra che Android 9-6 abbiano un sottosistema Bluetooth simile, mentre Android 5 e 4 sono diversi. Android 9.0 Esperimenti BlueFrag Patch: https://android.googlesource.com/platform/system/bt/+/3cb7149d8fed2d7d77ceaa95bf845224c4db3baf Di seguito ho raggiunto la condizione patchata...

CVE-2025-62454

Isto não é exploração, apenas POC root@kitploit: BUGCHECKCODE: 50 BUGCHECKP1: ffff808b75973000 BUGCHECKP2: 2 BUGCHECKP3: fffff803df12ddda BUGCHECKP4: 0 READADDRESS: ffff808b75973000 Special pool MMINTERNALCODE: 0 IMAGENAME: cldflt.sys MODULENAME: cldflt FAULTINGMODULE: fffff803df110000 cldflt...

CVE-2018-1932X

CVE-2018-1932X Rust Exploit POC per GIGABYTE APP Center v1.05.21 e precedenti Solo perché il tuo target non è memory safe non significa che il tuo exploit debba esserlo! Vulnerabilità utilizzate: CVE-2018-19320 - funzionalità ring0 simile a memcpy CVE-2018-19323 - lettura e scrittura dei Machine...

CVE-2026-22013-Hardware-Wallet-USB-Descriptor-Buffer-Overflow

CVE-2026-22013 – Pufferüberlauf im USB-Deskriptor einer Hardware-Wallet Programmcode C-Firmware-Simulation root@kitploit: // hwwalletusb.c - USB descriptor parsing with fixed buffer include void handleusbsetupchar data, int len char descriptor32; if len 0 && data0 == 0x06 // GETDESCRIPTOR // Copy...

CVE-2026-23002-5G-NAS-Message-Buffer-Overflow-in-gNodeB

CVE-2026-23002 – 5G-NAS-Nachrichten-Pufferüberlauf in gNodeB Programmcode C-Simulation root@kitploit: // gnbnassim.c - Simulated 5G gNodeB parsing NAS Registration Request include include include define MAXIESIZE 128 void processregistrationrequestuint8t nasmsg, uint16t length uint8t...

CVE-2018-19320

CVE-2018-19320 Explorando funcionalidade semelhante a memcpy do ring0 para desabilitar o Driver Signing Enforcement DSE conforme documentado aqui: http://deniable.org/windows/windows-callbacks Referências https://cve.mitre.org/cgi-bin/cvename.cgi?name=2018-19320...

kernel: drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Validate payload length and linkindex in dcprocessdmubauxtransferasync Why&How dcprocessdmubauxtransferasync copies payload-length bytes into a 16-byte stack buffer dpaux.data16 guarded only by an ASSERT, which i...

CVE-2026-62292

libheif is a HEIF and AVIF file format decoder and encoder. From 1.19.0 until 1.23.1, a crafted uncompressed HEIF image using generic zlib unci full-item compression can crash an application that decodes an advertised tile with heifimagehandledecodeimagetile. In...

CVE-2026-62292

In libheif 1.19.0–1.23.1, unc_decoder::fetch_tile_data() computes a large tile offset that, combined with range_start_offset + range_size in get_compressed_image_data_uncompressed(), wraps to zero and bypasses the bounds check. This passes an invalid source pointer and 1 TB length to memcpy, caus...

CVE-2026-62292 libheif: Out-of-bounds read in uncompressed unci tile range slicing

libheif is a HEIF and AVIF file format decoder and encoder. From 1.19.0 until 1.23.1, a crafted uncompressed HEIF image using generic zlib unci full-item compression can crash an application that decodes an advertised tile with heifimagehandledecodeimagetile. In...

CVE-2026-62292

libheif is a HEIF and AVIF file format decoder and encoder. From 1.19.0 until 1.23.1, a crafted uncompressed HEIF image using generic zlib unci full-item compression can crash an application that decodes an advertised tile with heifimagehandledecodeimagetile. In...

Linux Distros Unpatched Vulnerability : CVE-2026-72261

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ASoC: SOF: ipc3-control: Validate size in sndsofupdatecontrol In sndsofupdatecontrol, firmware- provided cdata-numelems is checked against localcdata-data-size...

OSV-2026-1157 Memcpy-param-overlap in zxc_decompress_chunk_wrapper_default

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=546426939 Crash type: Memcpy-param-overlap Crash state: zxcdecompresschunkwrapperdefault zxcdecompressframe fuzzdecompress.c...

SUSE CVE-2026-74476

In the Linux kernel, the following vulnerability has been resolved: veth: convert fraglist skbs before running XDP A fraglist skb can reach veth with datalen set but nrfrags zero. vethconvertskbtoxdpbuff only converts skbs that are shared, locked, have frags, or do not have enough headroom. It...