CVE-2026-64565

A flaw was found in the Linux kernel's ims-pcu component. A malicious USB device can send an oversized data packet, which is not properly handled. This can lead to a heap buffer overflow, allowing an attacker to manipulate internal pointers. Successful exploitation could result in a control flow...

CVE-2026-14676

A flaw was found in PostgreSQL pgstatstatements. A local attacker, specifically a query author, could exploit a heap buffer overflow vulnerability by crafting special queries containing array constants. This could allow the attacker to execute arbitrary code as the operating system user running t...

CVE-2026-52492

A flaw was found in libtiff. An integer overflow vulnerability exists in the cvtRaster function of the rgb2ycbcr utility. When processing a specially crafted TIFF image during YCbCr conversion, an attacker could trigger an undersized heap allocation, leading to a heap-based buffer overflow. This...

CVE-2023-33669

CVE-2023-33669 Exploit Exploit für eine Stapelüberlauf-Schwachstelle im Tenda AC8 Router, der gezielt auf die Firmware-Version USAC8V4.0siV16.03.34.06 abzielt. Offizielle Produktseite. Emulation Du kannst die Datei 'prepare.sh' in das Root-Verzeichnis der Firmware legen und sie ausführen. Außerde...

CVE-2020-0796

CVE-2020-0796 Vulnerabilità di integer overflow Inserendo un valore maggiore di quello memorizzabile nel campo OriginalCompressedSegmentSize, la variabile non è in grado di contenerlo e lo interpreta involontariamente come un numero molto piccolo o come un valore negativo. Ciò può causare un...

CVE-2026-63072

OpenSSL CMS decryption is vulnerable to a deterministic 8-byte out-of-bounds heap write (CWE-787) in the key-unwrap path of CMS_decrypt() . The root cause is a mismatch: the output buffer is sized by querying the unwrapped key size, but the AES-WRAP-PAD primitive can write and cleanse more bytes ...

CVE-2026-63072 Heap Buffer Overflow in CMS Key Unwrapping

Issue summary: OpenSSL CMS decryption sizes the key-unwrap output buffer based on querying the unwrapped key size, but the AES-WRAP-PAD unwrap primitive can write and cleanse more bytes than that query reports, causing an 8-byte out-of-bounds heap write. Impact summary: An attacker who supplies a...

CVE-2026-63072 Heap Buffer Overflow in CMS Key Unwrapping

Issue summary: OpenSSL CMS decryption sizes the key-unwrap output buffer based on querying the unwrapped key size, but the AES-WRAP-PAD unwrap primitive can write and cleanse more bytes than that query reports, causing an 8-byte out-of-bounds heap write. Impact summary: An attacker who supplies a...

CVE-2026-63072 Heap Buffer Overflow in CMS Key Unwrapping

Issue summary: OpenSSL CMS decryption sizes the key-unwrap output buffer based on querying the unwrapped key size, but the AES-WRAP-PAD unwrap primitive can write and cleanse more bytes than that query reports, causing an 8-byte out-of-bounds heap write. Impact summary: An attacker who supplies a...

ROOT-OS-DEBIAN-12-CVE-2026-58055 CVE-2026-58055 in nghttp2 - Patched by Root

Root has patched CVE-2026-58055 in the nghttp2 package for Root:Debian:12. Multiple fixed versions available...

RLSA-2026:59133 Important: gstreamer1-plugins-good security update

GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-good packages contain a collection of well-supported plug-ins of good quality and under the LGPL license. Security Fixes: gstreamer: GStreamer: Remote Code Execution via MRF fil...

gstreamer1-plugins-good security update

An update is available for gstreamer1-plugins-good. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list GStreamer is a streaming media framework based on graphs of...

gstreamer1-plugins-base security update

An update is available for gstreamer1-plugins-base. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list GStreamer is a streaming media framework based on graphs of...

RLSA-2026:59152 Important: gstreamer1-plugins-good security update

GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-good packages contain a collection of well-supported plug-ins of good quality and under the LGPL license. Security Fixes: gstreamer: GStreamer: Remote Code Execution via MRF fil...

gstreamer1-plugins-good security update

An update is available for gstreamer1-plugins-good. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list GStreamer is a streaming media framework based on graphs of...

patch-CVE-2026-08742

Patch: CVE-2026-08742 Dettagli della Vulnerabilità CVE : CVE-2026-08742 Prodotto : Citrix ADC Descrizione : Buffer overflow Gravità : Critica Stato della Patch: APPLICATA...

patch-CVE-2026-12087

Patch: CVE-2026-12087 Dettagli della vulnerabilità CVE : CVE-2026-12087 Prodotto : Fortinet FortiOS Descrizione : Heap overflow in SSL-VPN Gravità : Critica Stato della patch: APPLICATA...

CiscoIOSSNMPToolkit

CiscoIOSSNMPToolkit Toolkit di exploit per overflow SNMP di Cisco IOS CVE-2017-6736...

SNMPocalypse-Cisco-Bug-Lets-Hackers-Crash-or-Command-Devices

SNMPocalypse-Cisco-Fehler-lässt-Hacker-Geräte-zum-Absturz-bringen-oder-steuern CVE-2023-20352 ist ein kritischer Stack-Überlauf-Fehler in der SNMP-Engine von Cisco IOS/IOS XE. Mit nur präparierten SNMP-Paketen können entfernte Angreifer Systeme zum Absturz bringen oder die Root-Kontrolle...

DNS-Mayhem-CVE-2026-41096-Deep-Dive

DNS-Mayhem-CVE-2026-41096-Analyse-Approfondie Analyse technique approfondie de CVE‑2026‑41096, un débordement de tas critique dans DNSAPI.dll de Windows permettant l'exécution de code à distance via des réponses DNS malveillantes. Inclut des vecteurs d'attaque, des informations sur le correctif e...