CVE-2026-75818 Heap Buffer Overflow in GNU Aspell's prezip utility

GNU Aspell prezip-bin contains a heap-based buffer overflow vulnerability in the decompressor in prog/prezip.c. The decompressor does not properly check buffer space, so a crafted compressed file can cause out-of-bounds read and write operations on the heap. An attacker who convinces a user to...

CVE-2026-75818

The GNU Aspell prezip-bin utility contains a heap-based buffer overflow vulnerability within the decompressor located in prog/prezip.c. The root cause is an insufficient check of buffer space, allowing a crafted compressed file to trigger out-of-bounds read and write operations on the heap. An at...

EUVD-2026-93364

GNU Aspell prezip-bin contains a heap-based buffer overflow vulnerability in the decompressor in prog/prezip.c. The decompressor does not properly check buffer space, so a crafted compressed file can cause out-of-bounds read and write operations on the heap. An attacker who convinces a user to...

CVE-2026-75818 Heap Buffer Overflow in GNU Aspell's prezip utility

GNU Aspell prezip-bin contains a heap-based buffer overflow vulnerability in the decompressor in prog/prezip.c. The decompressor does not properly check buffer space, so a crafted compressed file can cause out-of-bounds read and write operations on the heap. An attacker who convinces a user to...

CVE-2026-75818

GNU Aspell prezip-bin contains a heap-based buffer overflow vulnerability in the decompressor in prog/prezip.c. The decompressor does not properly check buffer space, so a crafted compressed file can cause out-of-bounds read and write operations on the heap. An attacker who convinces a user to...

CVE-2026-75818 Heap Buffer Overflow in GNU Aspell's prezip utility

GNU Aspell prezip-bin contains a heap-based buffer overflow vulnerability in the decompressor in prog/prezip.c. The decompressor does not properly check buffer space, so a crafted compressed file can cause out-of-bounds read and write operations on the heap. An attacker who convinces a user to...

SUSE-SU-2026:24108-1 Security update for the Linux Kernel (Live Patch 9 for SUSE Linux Enterprise 16)

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.30.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46116: xfrm: defensively unhash xfrmstate lists in xfrmstatedelete bsc1267370. - CVE-2026-63802: blk-cgroup: fix UAF in blkcgrstatflush bsc127228...

Blackash-CVE-2025-48593

🚨 CVE-2025-48593 Exécution de code à distance zero-click dans le système Android 🚨 "Un seul paquet malveillant peut prendre le contrôle de votre appareil." — Équipe de sécurité Android, Nov 2025 🎯 Aperçu de la vulnérabilité Attribut| Détails ---|--- Identifiant CVE| CVE-2025-48593 Gravité| 🔴...

Security update for the Linux Kernel (Live Patch 6 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.22 fixes various security issues: The following security issues were fixed: CVE-2026-46116: xfrm: defensively unhash xfrmstate lists in xfrmstatedelete bsc1267370. CVE-2026-63802: blk-cgroup: fix UAF in blkcgrstatflush bsc1272283...

cve-2023-6931-pipa

CVE-2023-6931 — Xiaomi Pad 6 pipa: повышение привилегий и отключение SELinux Финальная версия эксплойта, использованная на устройстве, выделена в этот каталог. Цель Устройство Xiaomi Pad 6 / pipa / SM8250 Система HyperOS OS2.0.20.0.UMZCNXM Ядро 4.19.157-perf-g240e1d0a5f52 Точка входа adb shell...

cve-2025-29384

CVE-2025-29384 概念実証エクスプロイト 概要 このリポジトリには、Tenda AC9 ルーター（ファームウェアバージョン V15.03.05.14multi ）で発見された深刻なスタックベースのバッファオーバーフロー 脆弱性 CVE-2025-29384 に対する高度な概念実証（PoC）エクスプロイトが含まれています。この脆弱性により、認証されていないリモート攻撃者 がルーターのWebサーバーをクラッシュさせ（サービス妨害、DoS ）、任意のコードを実行できる可能性があります（リモートコード実行、RCE ）。 このプロジェクトの目的は、エクスプロイト開発スキルを実証...

CVE20265172poc

CVE20265172poc CVE-2026-5172 : débordement de tampon dans extractaddresses sur un enregistrement de ressource conçu PoC Topologie : lisez ici https://medium.com/@yanyuyingshu/reproduction-journal-dnsmasq-ecs-validation-and-buffer-overflow-flaws-e0fe0f66f60c Étapes 1. vi /etc/dnsmasq.conf​...

CVE-2026-38426

CVE-2026-38426: Débordement de tampon de pile strcpy dans Tasmota fetchjpg boundary40 CVE: CVE-2026-38426 Sévérité : Critique CVSS 9.8 Produit : Arendst Tasmota Version affectée : = 15.3.0.3 Fichier : tasmota/tasmotaxdrvdriver/xdrv10scripter.ino Fonction : fetchjpg — cas 0 connexion initiale Aute...

EUVD-2026-93359

In the WibuKey driver for Windows below Version 6.72, insufficient validation of user input when calculating the size of a kernel buffer could cause small amounts of data to be written outside the intended kernel buffer. This can lead to a system crash. Under unfavorable circumstances, adjacent...

CVE-2026-42945-Reverse-Shell-POC

CVE-2026-42945 NGINX Rift RCE PoC с обратной оболочкой Концептуальный эксплоит PoC удаленного выполнения кода для CVE-2026-42945 , переполнение буфера в куче в модуле ngxhttprewritemodule NGINX. Этот форк дополняет публичный PoC-триггер встроенным слушателем обратной оболочки и настраиваемыми...

CVE-2026-9256-Poc

nginx ngxhttprewritemodule Débordement de tas Heap Buffer Overflow Description nginx Plus et nginx Open Source contiennent une vulnérabilité de débordement de tas dans le module ngxhttprewritemodule. Lorsqu'une directive rewrite utilise une expression régulière avec plusieurs groupes de capture...

thm-cybersec-portfolio

Notes TryHackMe — Portfolio Cybersécurité Notes personnelles et résumés des salles TryHackMe complétées. Conçu comme référence d'étude et portfolio pour les postes en sécurité informatique. Salles complétées | Salle| Sujet ---|---|--- 01| Élévation de privilèges Linux| Techniques d'élévation de...

CVE-2026-41096

CVE-2026-41096 - Preuve de concept de crash Débordement de tas dans DnsRawTruncateMessageForUdp dnsapi.dll. Une réponse DNS malveillante avec QDCOUNT=0 et un enregistrement OPT volumineux provoque un débordement de tas de 604 octets lorsque la logique de troncature calcule mal le pointeur de...

Security Bulletin: Vulnerabilities exists in IBM Cloud Pak for Data System (Yosemite 1.0)

Summary Vulnerabilities identified in IBM Cloud Pak for Data System Yosemite 1.0 - NRS have been addressed in version 3.0.5.4 Vulnerability Details CVEID:CVE-2026-62574 DESCRIPTION: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Ja...

AZL-106473 CVE-2026-98365 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix integer overflow in mrcheckrange leading to OOB access mrcheckrange validates that iova, iova+length falls within the registered MR range using wraparound-prone arithmetic: if iova ibmr.iova || iova + length...