heartbleed-vulnerability-exploitation

heartbleed-vulnerability-exploitation Description hands on investigation of the Heartbleed vulnerability CVE-2014-0160. Summary this lab documents a hands-on investigation of the Heartbleed vulnerability, a critical flaw in OpenSSL's implementation of the TLS heartbeat extension. the goal was to...

CVE-2026-98247

A flaw was found in the Linux kernel's Bluetooth subsystem. When processing responses for supported codecs, the parser fails to verify that adequate buffer space remains before reading the vendor codec count. A malicious or malfunctioning Bluetooth controller can supply a truncated response packe...

CVE-2026-103636

The Apache DataSketches C++ library (repo: datasketches-cpp ) contains an out-of-bounds read vulnerability in the VarOpt union deserialization function. The var_opt_union::deserialize() function fails to properly validate the preamble of a non-empty union, potentially reading up to 24 bytes past ...

CVE-2026-107836 RIOT: nanoCoAP Block2 client slice handling underflows on inconsistent server-controlled block size

RIOT is an open-source microcontroller operating system designed for Internet of Things devices and other embedded systems. In 2026.07 and earlier, the nanoCoAP client function nanocoapsockgetslice in sys/net/applicationlayer/nanocoap/sock.c accepts a Block2 response when blockcb sees the expecte...

CVE-2026-107836 RIOT: nanoCoAP Block2 client slice handling underflows on inconsistent server-controlled block size

RIOT is an open-source microcontroller operating system designed for Internet of Things devices and other embedded systems. In 2026.07 and earlier, the nanoCoAP client function nanocoapsockgetslice in sys/net/applicationlayer/nanocoap/sock.c accepts a Block2 response when blockcb sees the expecte...

CVE-2026-107836

The RIOT microcontroller operating system (version 2026.07 and earlier ) contains a vulnerability in the nanoCoAP client function nanocoap_sock_get_slice() located in sys/net/application_layer/nanocoap/sock.c. The root cause is a failure to verify that server-controlled szx and derived offsets ma...

EUVD-2026-95931

RIOT is an open-source microcontroller operating system designed for Internet of Things devices and other embedded systems. In 2026.07 and earlier, the nanoCoAP client function nanocoapsockgetslice in sys/net/applicationlayer/nanocoap/sock.c accepts a Block2 response when blockcb sees the expecte...

CVE-2026-107634

A flaw was found in dislocker. An attacker can exploit this issue by providing a specially crafted BitLocker volume image containing inflated metadata sizes. When the application opens or mounts the image, it fails to properly validate these boundaries, triggering an out-of-bounds memory read. Th...

CVE-2026-98188

A flaw was found in the Linux kernel's p54 wireless driver. An attacker capable of connecting a malicious wireless device could cause a Denial of Service DoS by triggering a system crash. This issue occurs because the driver fails to validate data length parameters when reading calibration curve...

CVE-2026-76747

Buffer overflow vulnerabilities exist in the affected interface of AOS-S. Successful exploitation could allow an unauthenticated remote attacker to expose sensitive memory contents and cause a denial of service on the device...

EUVD-2026-93874

Buffer overflow vulnerabilities exist in the affected interface of AOS-S. Successful exploitation could allow an unauthenticated remote attacker to expose sensitive memory contents and cause a denial of service on the device...

EUVD-2026-93980

An unauthenticated buffer overflow vulnerability exists in AOS-S. Successful exploitation could allow an unauthenticated adjacent attacker to expose sensitive memory contents and cause a denial of service on the affected device...

PT-2026-107125

Unpatched vulnerabilities don't stay hidden on our atlas. CVE CRITICAL VULNERABILITY DETECTED CVE ID → CVE-2026-76747 Vendor → Unknown Severity → Critical — CVSS 9.1 Product → Unknown Date → 2026-10-06 A critical vulnerability Classic Buffer Overflow has been disclosed affecting Unknown. Patch...

CVE-2026-76746: Buffer Copy without Checking Size of Input

An unauthenticated buffer overflow vulnerability exists in AOS-S. Successful exploitation could allow an unauthenticated adjacent attacker to expose sensitive memory contents and cause a denial of service on the affected device...

PT-2026-107124

Unpatched vulnerabilities don't stay hidden on our atlas. CVE CRITICAL VULNERABILITY DETECTED CVE ID → CVE-2026-76746 Vendor → Unknown Severity → Critical — CVSS 9.3 Product → Unknown Date → 2026-10-06 A critical vulnerability Classic Buffer Overflow has been disclosed affecting Unknown. Patch...

NPM: vm2: NodeVM zlib Buffers expose pooled host memory across the VM boundary

NPM: vm2: NodeVM zlib Buffers expose pooled host memory across the VM boundary vulnerability discovered by ? in WordPress Npm vm2 versions = 3.12.1...

Astra Linux – Vulnerability in Chromium

A heap buffer overflow in Skia in Google Chrome prior to version 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive information from process memory through a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Vim

Vim is an open-source command-line text editor. From version 9.2.0320 to 9.2.0679, a crafted undo or swap file could store a virtual-text property whose offset and length points outside the line’s property data. When Vim restores or displays such a line, it converts the offset into a pointer and...

Astra Linux – Vulnerability in Samba

A flaw was discovered in Samba. Some SMB1 write requests were not properly range-checked to ensure that the client had sent enough data to complete the write operation. As a result, the contents of the server’s memory were written to the file or printer, rather than the data provided by the clien...

Rocky Linux 10.1 [CIQ] Security Update: nodejs24 / nodejs24-debuginfo / nodejs24-debugsource / etc Multiple Vulnerabilities (crlsa-2026_1842)

The Rocky Linux 10.1 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20261842 advisory. nodejs: Nodejs filesystem permissions bypass CVE-2025-55132 nodejs: Nodejs denial of service CVE-2026-21637 nodejs: Nodejs denial of service...