398775 matches found
CVE-2021-47996 Nokogiri before 1.11.4 Multiple Vulnerabilities via libxml2
Nokogiri before 1.11.4 CRuby implementation only, when the packaged/vendored libxml2 is used bundles libxml2 2.9.10, which is affected by multiple vulnerabilities addressed in libxml2 2.9.12, including a memory leak in xmlSchemaValidateStream CVE-2019-20388, a global buffer over-read in...
CVE-2022-50998
Nokogiri (CRuby implementation using packaged libraries) versions before 1.13.9 bundle libxml2 v2.9.14 , which is susceptible to two underlying flaws: CVE-2022-40304 (a double-free from an entity reference cycle when entity content is allocated from a dict) and CVE-2022-40303 (integer overflows d...
CVE-2026-59183
A flaw was found in OpenEXR. An integer overflow vulnerability exists when decoding a specially crafted deep tiled EXR image file. This overflow can lead to an invalid memory pointer, causing applications that process these files to crash. This issue results in a denial of service. Mitigation...
CVE-2026-79902
A flaw was found in the Seattle FilmWorks plugin in GIMP. When processing a specially crafted SFW image file, the plugin allocates a Variable-Length Array VLA on the stack without integer overflow checks, causing an unbounded stack allocation. This issue leads to an application crash, resulting i...
CVE-2026-64565
A flaw was found in the Linux kernel's ims-pcu component. A malicious USB device can send an oversized data packet, which is not properly handled. This can lead to a heap buffer overflow, allowing an attacker to manipulate internal pointers. Successful exploitation could result in a control flow...
CVE-2026-14676
A flaw was found in PostgreSQL pgstatstatements. A local attacker, specifically a query author, could exploit a heap buffer overflow vulnerability by crafting special queries containing array constants. This could allow the attacker to execute arbitrary code as the operating system user running t...
CVE-2022-3602-poc
CVE-2022-3602 DOS poc Buffer Overflow DOS in OpenSSL 3.0 3.0.7 Utilizzo: root@kitploit: $ gcc -o CVE-2022-3602 CVE-2022-3602.c -lpthread $ ./CVE-2022-3602 127.0.0.1 443...
bigint-buffer-safe
bigint-buffer-safe Sostituto drop-in sicuro, in puro JS, per bigint-buffer. Risolve CVE-2025-3194 CVSS 7.5, buffer overflow / DoS. Zero dipendenze. Nessun binding nativo. Funziona in Node.js e nei browser. Perché esiste? Il pacchetto originale bigint-buffer presenta una vulnerabilità di buffer...
CVE-2026-52492
A flaw was found in libtiff. An integer overflow vulnerability exists in the cvtRaster function of the rgb2ycbcr utility. When processing a specially crafted TIFF image during YCbCr conversion, an attacker could trigger an undersized heap allocation, leading to a heap-based buffer overflow. This...
CVE-2023-3519
Repository di Exploit Stack-Overflow su Citrix CVE-2023-3519 Dimostrazione Video PoC: https://github.com/Mohammaddvd/CVE-2023-3519/assets/108727157/97fde2d9-2110-40bb-ae08-19163927115c Disclaimer Questo codice è inteso esclusivamente per scopi educativi e per un uso etico nella comprensione delle...
CVE-2023-33669
CVE-2023-33669 Exploit Exploit für eine Stapelüberlauf-Schwachstelle im Tenda AC8 Router, der gezielt auf die Firmware-Version USAC8V4.0siV16.03.34.06 abzielt. Offizielle Produktseite. Emulation Du kannst die Datei 'prepare.sh' in das Root-Verzeichnis der Firmware legen und sie ausführen. Außerde...
CVE-2006-3747
File riguardanti la mia pubblicazione su bugtraq e il primo exploit funzionante per CVE-2006-3747 Apache modrewrite LDAP off-by-one buffer overflow. http://www.securityfocus.com/archive/1/443870 Data di rilascio pubblico del POC/Exploit: 2006-08-20 Autore: Jacobo Avariento Gimeno ID CVE:...
CVE-2020-0796
CVE-2020-0796 Vulnerabilità di integer overflow Inserendo un valore maggiore di quello memorizzabile nel campo OriginalCompressedSegmentSize, la variabile non è in grado di contenerlo e lo interpreta involontariamente come un numero molto piccolo o come un valore negativo. Ciò può causare un...
CVE-2026-63072
OpenSSL CMS decryption is vulnerable to a deterministic 8-byte out-of-bounds heap write (CWE-787) in the key-unwrap path of CMS_decrypt() . The root cause is a mismatch: the output buffer is sized by querying the unwrapped key size, but the AES-WRAP-PAD primitive can write and cleanse more bytes ...
CVE-2026-63072 Heap Buffer Overflow in CMS Key Unwrapping
Issue summary: OpenSSL CMS decryption sizes the key-unwrap output buffer based on querying the unwrapped key size, but the AES-WRAP-PAD unwrap primitive can write and cleanse more bytes than that query reports, causing an 8-byte out-of-bounds heap write. Impact summary: An attacker who supplies a...
CVE-2026-63072 Heap Buffer Overflow in CMS Key Unwrapping
Issue summary: OpenSSL CMS decryption sizes the key-unwrap output buffer based on querying the unwrapped key size, but the AES-WRAP-PAD unwrap primitive can write and cleanse more bytes than that query reports, causing an 8-byte out-of-bounds heap write. Impact summary: An attacker who supplies a...
CVE-2024-2961
CVE-2024-2961 CVE-2024–2961 Script di mitigazione del problema di sicurezza Descrizione Questa repository contiene uno script Bash per verificare e mitigare la vulnerabilità di buffer overflow identificata in GNU libc glibc versione 2.39 e precedenti, nota come CVE-2024-2961. Tale vulnerabilità...
CVE-2008-5416
CVE-2008-5416 Microsoft SQL Server spreplwritetovarbin - Corruzione della memoria tramite SQL Injection Un overflow del buffer basato su heap può verificarsi quando si chiama la stored procedure estesa non documentata "spreplwritetovarbin". Questa vulnerabilità riguarda tutte le versioni di...
CVE-2022-28113
Fantec MWiD25-DS Analisi per CVE-2022-28113 di @code-byter ========================== Questa è un'analisi dello sfruttamento del Fantec MWiD25-DS Travel Router versione firmware: 2.000.030. Questa vulnerabilità consente a qualsiasi utente non autorizzato di eseguire comandi arbitrari come utente...
