cve-2010-4221-lab

CVE-2010-4221 — تجاوز سعة المكدس TELNET IAC في ProFTPD: من التصحيح إلى تنفيذ التعليمات البرمجية مختبر قابل للتكرار بالكامل واستغلال مكتوب يدويًا عبر المقابس الخام لـ CVE-2010-4221 — تجاوز سعة المخزن المؤقت للمكدس قبل المصادقة في دالة prnetiotelnetgets الخاصة بـ ProFTPD — مبني كتمرين تعليمي في أبح...

CVE-2017-13253

CVE-2017-13253 PoC code for CVE-2017-13253. The full write-up is available here. Note that the numbers are a little bit different from the blog post, as I've found that there's a higher chance for a crash with a heap of 0x2000 of course if you run it enough times it should crash anyway. For...

CVE-2026-11499

🚨 CVE-2026-11499 Stack-Based Buffer Overflow in Tenda HG7 / HG9 / HG10 Routers 📖 Overview CVE-2026-11499 is a reported stack-based buffer overflow vulnerability affecting several Tenda router models , including: HG7 HG9 HG10 Successful exploitation may allow an attacker to trigger a crash, denial...

CVE-2026-38427

CVE-2026-38427: Integer Wraparound → Heap Buffer Overflow in Tasmota fetchjpg CVE: CVE-2026-38427 Severity: Critical CVSS 9.8 Product: Arendst Tasmota Affected Version: = 15.3.0.3 File: tasmota/tasmotaxdrvdriver/xdrv10scripter.ino Function: fetchjpg — case 2 MJPEG frame fetch Author: Saidakbarxon...

libvirt security, bug fix, and enhancement update

An update is available for libvirt. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The libvirt library contains a C API for managing and interacting with the...

freerdp security update

An update is available for freerdp. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list FreeRDP is a free implementation of the Remote Desktop Protocol RDP, release...

RLSA-2026:75583 Important: libvirt security, bug fix, and enhancement update

The libvirt library contains a C API for managing and interacting with the virtualization capabilities of Linux and other operating systems. In addition, libvirt provides tools for remote management of virtualized systems. Security Fixes: libvirt: swtpm privilege escalation via symlink following...

RLSA-2026:75570 Important: freerdp security update

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox. Security Fixes: FreeRDP: freerdp-proxy: FreeRDP: Information disclosure via uninitialize...

CVE-2026-82592

D-Link Router DIR-825M - تجاوز سعة المخزن المؤقت في /boafrm/formDiskFormat تفاصيل الثغرة معلومات تفصيلية الحقل| القيمة ---|--- البائع| D-Link المنتج| D-Link DIR-825M وطرازات أخرى تشارك نفس قاعدة كود البرنامج الثابت الإصدار المتأثر| البرنامج الثابت v1.1.8 نوع الثغرة| تجاوز سعة المخزن المؤقت على...

CVE-2026-38698-and-CVE-2026-38699

Research on Wyze Cam Pan v3 Slides Reference CVE-2026-38698 Attack Name Heap Overflow on tutkpacketalloc function in tutkavserver Additional Details Afftected product TUTK SDK v.3.1.10.0 through v.4.3.8.1 Affected Component tutkpacketAlloc function Attack Vector An authenticated attacker must sen...

BIT-APACHE-2026-93546 Apache HTTP Server: mod_dav_fs namespace overflow

Integer overflow in moddavfs in Apache HTTP Server through 2.4.68 allows an authenticated WebDAV client with write access to crash worker processes and persistently corrupt a directory's property database via PROPPATCH requests declaring many XML namespaces...

BIT-APACHE-2026-63292 Apache HTTP Server: mod_vhost_alias stack overflow

Stack-based buffer overflow in modvhostalias in Apache Software Foundation Apache HTTP Server through 2.4.68 on all platforms allows a remote client to cause a denial of service or potentially execute arbitrary code via an HTTP request with a Host header exceeding 8192 bytes when...

CVE-2025-43300

CVE-2025-43300 CVE-2025-43300: iOS/macOS DNG इमेज प्रोसेसिंग मेमोरी करप्शन सारांश Apple के इमेज प्रोसेसिंग RawCamera.bundle में एक कमजोरी iOS 18.6.1 और macOS को प्रभावित करती है। यह समस्या तब होती है जब DNG फ़ाइलों में TIFF मेटाडेटा और JPEG लॉसलेस पैरामीटर बेमेल होते हैं, जिससे मेमोरी करप्शन होता...

patch-CVE-2026-08742

التصحيح: CVE-2026-08742 تفاصيل الثغرة الأمنية CVE : CVE-2026-08742 المنتج : Citrix ADC الوصف : تجاوز سعة المخزن المؤقت الخطورة : حرجة حالة التصحيح: تم النشر الحقل| القيمة ---|--- تاريخ التصحيح| 2026-03-20 الحالة| تم النشر نُشر إلى| الإنتاج تم التحقق بواسطة| فريق SecOps المراجع NVD CISA KEV...

watchTowr-vs-Citrix-Netscaler-CVE-2026-88772

watchTowr-vs-Citrix-Netscaler-CVE-2026-88772 مولّد أدلة الكشف لثغرة Citrix NetScaler CVE-2026-88772 راجع منشور المدونة الخاص بنا للحصول على التفاصيل التقنية. الكشف أثناء العمل / | | |\ \ \ / / \ \ / | | | | / \ / / \ \ \ / / | | \ | Y | | \ / | | / // || \ ||| | \ / // || / / /...

cve-2022-42475-poc

CVE-2022-42475 PoC تنفيذ تعليمات برمجية عن بُعد قبل المصادقة في Fortinet SSL VPN الوصف CVE-2022-42475 هي ثغرة أمنية من نوع تجاوز سعة المخزن المؤقت المستند إلى الكومة heap-based buffer overflow في خدمة SSL VPN الخاصة بـ FortiOS، وتسمح للمهاجمين غير المصادَق عليهم بتنفيذ تعليمات برمجية عشوائية عن...

AZL-105969 CVE-2026-75818 affecting package aspell 0.60.8.1-1

GNU Aspell prezip-bin contains a heap-based buffer overflow vulnerability in the decompressor in prog/prezip.c. The decompressor does not properly check buffer space, so a crafted compressed file can cause out-of-bounds read and write operations on the heap. An attacker who convinces a user to...

DEBIAN-CVE-2026-75818

GNU Aspell prezip-bin contains a heap-based buffer overflow vulnerability in the decompressor in prog/prezip.c. The decompressor does not properly check buffer space, so a crafted compressed file can cause out-of-bounds read and write operations on the heap. An attacker who convinces a user to...

CVE-2026-75818

GNU Aspell prezip-bin contains a heap-based buffer overflow vulnerability in the decompressor in prog/prezip.c. The decompressor does not properly check buffer space, so a crafted compressed file can cause out-of-bounds read and write operations on the heap. An attacker who convinces a user to...

CVE-2026-75818 Heap Buffer Overflow in GNU Aspell's prezip utility

GNU Aspell prezip-bin contains a heap-based buffer overflow vulnerability in the decompressor in prog/prezip.c. The decompressor does not properly check buffer space, so a crafted compressed file can cause out-of-bounds read and write operations on the heap. An attacker who convinces a user to...