Important: Red Hat Security Advisory: gstreamer1-plugins-good security update

An update for gstreamer1-plugins-good is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Important: Red Hat Security Advisory: gstreamer1-plugins-good security update

An update for gstreamer1-plugins-good is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

gstreamer: GStreamer: Remote code execution via heap-based buffer overflow in PNG file parsing

A flaw was found in GStreamer. This vulnerability, a heap-based buffer overflow during PNG file parsing, allows a remote attacker to execute arbitrary code. Successful exploitation requires user interaction, such as opening a malicious PNG file or visiting a specially crafted web page. The issue...

gstreamer: GStreamer: Remote Code Execution via MRF file parsing heap-based buffer overflow

A flaw was found in GStreamer. A remote attacker could exploit a heap-based buffer overflow vulnerability when parsing specially crafted MRF Multimedia Research Forum files. This vulnerability arises from insufficient validation of user-supplied data length before copying it to a heap-based buffe...

CVE-2026-56135

A flaw was found in NTFS-3G. This vulnerability involves a heap-based buffer overflow, which occurs when the software attempts to write more data to a memory block than it can hold. An attacker can exploit this by creating a specially crafted NTFS image and then creating a file within a malicious...

CVE-2026-75368

A stack overflow in the loadRawData function of SpaceDot AcubeSAT OBC software commit eaf90ec allows attackers to cause a Denial of Service DoS via supplying a crafted ECSS TC message...

cve-2021-43226PoC

Riproduzione di CVE-2021-43226 Ambiente Sistema operativo: Win10 20H2 su Hyper-V, build 19042.508. Trovato un sito https://os.click/en, le immagini Windows sono abbastanza complete e finora nessun backdoor rilevato. Poiché il PoC trovato è stato compilato con Visual Studio 2013, anch’io ho...

CVE-2023-21716-POC

Storia Nel febbraio 2023, Microsoft ha corretto una vulnerabilità critica in Microsoft Word, identificata come CVE-2023-21716 con un punteggio CVSS di 9.8, che poteva consentire agli aggressori di eseguire codice remoto senza autenticazione. Questa vulnerabilità interessava anche il riquadro di...

porfolio-Baron-Samedit

porfolio-Baron-Samedit Dies ist eine Studie über CVE-2021-3156: Heap-basierter Pufferüberlauf in Sudo Baron Samedit...

CVE-2021-3156-Sudo-Buffer-Overflow-Linux

CVE-2021-3156 – Overflow del Buffer di Sudo Linux Exploit di Escalation dei Privilegi Baron Samedit 📌 Panoramica Questo progetto dimostra lo sfruttamento di CVE-2021-3156 Baron Samedit , una vulnerabilità critica di overflow del buffer basato su heap nell'utilità Linux sudo. La vulnerabilità...

CVE-2025-50361

Global Buffer Overflow in SmallBASIC SmallBASIC è un interprete del linguaggio BASIC veloce e facile da apprendere, ideale per calcoli quotidiani, script e prototipi. SmallBASIC include funzioni trigonometriche, di matrici e algebra, un IDE integrato, una potente libreria per stringhe, comandi di...

CVE-2025-50360

Overflow del Buffer nell'Heap in Pepper Language Pepper Language è un linguaggio di programmazione interpretato veloce, progettato per semplicità e verbosezza. È tipizzato dinamicamente e supporta la garbage collection. Versione affetta: Versione 0.1.1 e precedenti, Commit...

CVE-2026-71939

Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the aclgeneralsetup Add ACE function. The vulnerability is caused by copying the name field into a fixed-size buffer without length validation. A remote attacker can trigger this vulnerability via crafted input, causin...

CVE-2026-71942

Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the mailmailalert function. The vulnerability is caused by concatenating multiple smtpReceiver email addresses into a fixed-size buffer without checking the remaining buffer size. A remote attacker can trigger this...

CVE-2026-71940

Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the aclgeneralsetup Edit ACE function. The vulnerability is caused by copying the name field into a fixed-size buffer without length validation. A remote attacker can trigger this vulnerability via crafted input, causi...

CVE-2026-71938

Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the switchlangvrp function. The vulnerability is caused by unsafe copying of the portList field into an undersized buffer. A remote attacker can trigger this vulnerability via crafted input, causing a denial of service...

CVE-2026-71941

Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the diaglogmail function. The vulnerability is caused by concatenating multiple smtpReceiver email addresses into a fixed-size buffer without checking the remaining buffer size. A remote attacker can trigger this...

CVE-2026-71936

Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the sysreboot function. The vulnerability is caused by unsafe concatenation of split valueN data into a fixed-size buffer. A remote attacker can trigger this vulnerability via crafted input, causing a denial of service...

CVE-2026-71935

Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the webBackupAction function. The vulnerability is caused by repeated string concatenation of the pathN, valueN, key, and option fields into fixed-size stack buffers without total length checks. A remote attacker can...

CVE-2026-71934

Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the pingtrace function. The vulnerability is caused by missing length checks when the host, count, and interval fields are concatenated into a fixed-size buffer. A remote attacker can trigger this vulnerability via...