475663 matches found
misfortune-cookie
CVE-2014-9222 "Misfortune Cookie" PoC suite Stack overflow in AllegroSoft RomPager's HTTP cookie handling all versions 4.34. A single unauthenticated request with a crafted Cookie: header corrupts memory. Effects: admin auth bypass, DoS/reboot, and with firmware-specific offsets remote code...
CVE-2026-54992-PoC
CVE-2026-54992 PoC Prueba de concepto para el desbordamiento de enteros de lectura remota de Microsoft Message Queuing registrado como CVE-2026-54992. El PoC utiliza dos máquinas virtuales de Windows. Un usuario normal en el objetivo vulnerable solicita al servicio MSMQ local que lea de una cola...
CVE-2026-42945
🛡️ CVE-2026-42945 - NGINX Rift Critical Heap-Based Buffer Overflow in NGINX 📌 Overview CVE-2026-42945 also known as NGINX Rift is a critical security vulnerability in the ngxhttprewritemodule of NGINX. Type : Heap-based Buffer Overflow CWE-122 Discovered : May 2026 Existed For : 18 years...
ffmpeg-vul-core
FFmpeg h.264 Slice Counter OOB Vulnerability Core A minimal r...
PX4-Military-UAV-Autopilot-1.12.3-Stack-Buffer-Overflow-Exploit-CVE-2025-5640-
Exploit de desbordamiento de búfer en pila para el autopiloto de UAV militar PX4 =1.12.3 CVE-2025-5640 Autor: Mohammed Idrees Banyamer @banyamersecurity GitHub: https://github.com/mbanyamer Fecha: 2025-06-21 Probado en: Ubuntu 20.04 LTS + PX4 SITL jMAVSim CVE: CVE-2025-5640 Tipo: Denegación de...
CVE-2026-73321
CVE-2026-73321: PHP worker stack overflow through nested BBCode XenForo before 2.3.13 can exhaust a PHP worker through deeply nested BBCode. Result The public editor/to-html route sends guest-supplied BBCode through XenForo's recursive parser and renderer. It does not apply a raw-length or nestin...
CVE-2021-27965
CVE-2021-27965 PoC simple para explotar CVE-2021-27965 para LPE mediante la ejecución de cmd del sistema. https://vulners.com/cve/CVE-2021-27965 Se descubrió un problema en el controlador firmado de Windows de MICSYS MsIo64.sys que puede provocar el compromiso de todo el sistema local. La rutina ...
CVE-2026-41089
🚨 CVE-2026-41089 - Critical Windows Netlogon Remote Code Execution RCE ⚠️ A critical Windows Netlogon vulnerability allowing unauthenticated remote code execution on domain controllers. 📖 Overview CVE-2026-41089 is a critical vulnerability affecting the Windows Netlogon service. The flaw originate...
DEBIAN-CVE-2026-104042
A flaw was found in sssd. A local attacker can cause a Denial of Service DoS by sending a crafted Pluggable Authentication Module PAM request containing a zero-length authentication token to the responder socket. Due to missing input validation, the service attempts to read beyond buffer boundari...
CVE-2026-104042
A flaw was found in sssd. A local attacker can cause a Denial of Service DoS by sending a crafted Pluggable Authentication Module PAM request containing a zero-length authentication token to the responder socket. Due to missing input validation, the service attempts to read beyond buffer boundari...
CVE-2026-104042
A flaw was found in sssd. A local attacker can cause a Denial of Service DoS by sending a crafted Pluggable Authentication Module PAM request containing a zero-length authentication token to the responder socket. Due to missing input validation, the service attempts to read beyond buffer boundari...
CVE-2021-21974
CVE-2021-21974 VMware ESXi OpenSLP Desbordamiento de montón PoC de ejecución remota de código Autor: Aiyakami Resumen CVE-2021-21974 es una vulnerabilidad de desbordamiento de montón en el servicio OpenSLP de VMware ESXi. Un atacante no autenticado puede enviar paquetes especialmente diseñados al...
CVE-2026-104042
A flaw was found in sssd. A local attacker can cause a Denial of Service DoS by sending a crafted Pluggable Authentication Module PAM request containing a zero-length authentication token to the responder socket. Due to missing input validation, the service attempts to read beyond buffer boundari...
nginxrift-CVE-2026-42945
NGINX Rift RCE Exploit CVE-2026-42945 from @DepthFirstDisclosures A professional Proof-of-Concept PoC tool for researching and identifying the NGINX Rift vulnerability, a critical heap-based buffer overflow in the ngxhttprewritemodule. Vulnerability Overview CVE ID: CVE-2026-42945 Alias: NGINX Ri...
CLEANSTART-2026-AG86727 When writing data larger than 4GB in a single Write call on an SSH channel, an integer overflow in the internal payload size calculation caused the write loop to spin indefinitely, sending empty pa...
CVE-2026-39834 affects multiple packages. When writing data larger than 4GB in a single Write call on an SSH channel, an integer overflow in the internal payload size calculation caused the write loop to spin indefinitely, sending empty packets without making progress. See references for individu...
CLEANSTART-2026-WK54237 malicious SSH peer could send unsolicited global request responses to fill an internal buffer, blocking the connection's read loop
CVE-2026-39830 affects multiple packages. A malicious SSH peer could send unsolicited global request responses to fill an internal buffer, blocking the connection's read loop. See references for individual vulnerability details...
CLEANSTART-2026-UP81071 Integer Overflow or Wraparound vulnerability in Apache Thrift TFramedTransport Go language implementation This issue affects Apache Thrift: before 0
Security vulnerability affects the temporal-server package. Integer Overflow or Wraparound vulnerability in Apache Thrift TFramedTransport Go language implementation This issue affects Apache Thrift: before 0...
CLEANSTART-2026-QS35295 Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer
Security vulnerability affects the temporal-server package. Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer...
EUVD-2026-92811
In AMD Versal™ Adaptive SoC devices, insufficient boundary checks in USB boot mode—when enabled through board modifications—could allow crafted images to trigger a buffer overflow and overwrite an active function pointer, which may result in arbitrary code execution during boot process. This...
EUVD-2026-92813
Insufficient boundary validation in the USB boot mode implementation of AMD Zynq™ UltraScale+ MPSoC and RFSoC devices could allow unbounded Device Firmware Upgrade DFU download requests to overflow the DDR receive buffer into FSBL memory, potentially resulting in unauthorized code execution durin...