475692 matches found
CVE-2026-42945
🛡️ CVE-2026-42945 - NGINX Rift Critical Heap-Based Buffer Overflow in NGINX 📌 Overview CVE-2026-42945 also known as NGINX Rift is a critical security vulnerability in the ngxhttprewritemodule of NGINX. Type : Heap-based Buffer Overflow CWE-122 Discovered : May 2026 Existed For : 18 years...
ffmpeg-vul-core
FFmpeg h.264 Slice Counter OOB Vulnerability Core A minimal r...
PX4-Military-UAV-Autopilot-1.12.3-Stack-Buffer-Overflow-Exploit-CVE-2025-5640-
PX4 Military UAV Autopilot =1.12.3 Stack Buffer Overflow Exploit CVE-2025-5640 Author: Mohammed Idrees Banyamer @banyamersecurity GitHub: https://github.com/mbanyamer Date: 2025-06-21 Tested on: Ubuntu 20.04 LTS + PX4 SITL jMAVSim CVE: CVE-2025-5640 Type: Denial of Service DoS via Stack Buffer...
CVE-2026-73321
CVE-2026-73321: PHP worker stack overflow through nested BBCode XenForo before 2.3.13 can exhaust a PHP worker through deeply nested BBCode. Result The public editor/to-html route sends guest-supplied BBCode through XenForo's recursive parser and renderer. It does not apply a raw-length or nestin...
CVE-2021-27965
CVE-2021-27965 Simple PoC for exploiting CVE-2021-27965 for LPE by spawning system cmd. https://vulners.com/cve/CVE-2021-27965 An issue was discovered in signed MICSYS windows driver MsIo64.sys which may lead to compromisation of whole local system. Driver's ioctl dispatch routine suffers from...
CVE-2026-41089
🚨 CVE-2026-41089 - Critical Windows Netlogon Remote Code Execution RCE ⚠️ A critical Windows Netlogon vulnerability allowing unauthenticated remote code execution on domain controllers. 📖 Overview CVE-2026-41089 is a critical vulnerability affecting the Windows Netlogon service. The flaw originate...
DEBIAN-CVE-2026-104042
A flaw was found in sssd. A local attacker can cause a Denial of Service DoS by sending a crafted Pluggable Authentication Module PAM request containing a zero-length authentication token to the responder socket. Due to missing input validation, the service attempts to read beyond buffer boundari...
CVE-2026-104042
A flaw was found in sssd. A local attacker can cause a Denial of Service DoS by sending a crafted Pluggable Authentication Module PAM request containing a zero-length authentication token to the responder socket. Due to missing input validation, the service attempts to read beyond buffer boundari...
CVE-2026-104042
A flaw was found in sssd. A local attacker can cause a Denial of Service DoS by sending a crafted Pluggable Authentication Module PAM request containing a zero-length authentication token to the responder socket. Due to missing input validation, the service attempts to read beyond buffer boundari...
CVE-2021-21974
CVE-2021-21974 VMware ESXi OpenSLP Heap Overflow Remote Code Execution PoC Author: Aiyakami Overview CVE-2021-21974 is a heap overflow vulnerability in the OpenSLP service in VMware ESXi. An unauthenticated attacker can send specially crafted packets over the network to the target ESXi host's SLP...
CVE-2026-104042
A flaw was found in sssd. A local attacker can cause a Denial of Service DoS by sending a crafted Pluggable Authentication Module PAM request containing a zero-length authentication token to the responder socket. Due to missing input validation, the service attempts to read beyond buffer boundari...
nginxrift-CVE-2026-42945
NGINX Rift RCE Exploit CVE-2026-42945 from @DepthFirstDisclosures A professional Proof-of-Concept PoC tool for researching and identifying the NGINX Rift vulnerability, a critical heap-based buffer overflow in the ngxhttprewritemodule. Vulnerability Overview CVE ID: CVE-2026-42945 Alias: NGINX Ri...
CLEANSTART-2026-WK54237 malicious SSH peer could send unsolicited global request responses to fill an internal buffer, blocking the connection's read loop
CVE-2026-39830 affects multiple packages. A malicious SSH peer could send unsolicited global request responses to fill an internal buffer, blocking the connection's read loop. See references for individual vulnerability details...
CLEANSTART-2026-AG86727 When writing data larger than 4GB in a single Write call on an SSH channel, an integer overflow in the internal payload size calculation caused the write loop to spin indefinitely, sending empty pa...
CVE-2026-39834 affects multiple packages. When writing data larger than 4GB in a single Write call on an SSH channel, an integer overflow in the internal payload size calculation caused the write loop to spin indefinitely, sending empty packets without making progress. See references for individu...
CLEANSTART-2026-UP81071 Integer Overflow or Wraparound vulnerability in Apache Thrift TFramedTransport Go language implementation This issue affects Apache Thrift: before 0
Security vulnerability affects the temporal-server package. Integer Overflow or Wraparound vulnerability in Apache Thrift TFramedTransport Go language implementation This issue affects Apache Thrift: before 0...
CLEANSTART-2026-QS35295 Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer
Security vulnerability affects the temporal-server package. Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer...
EUVD-2026-92811
In AMD Versal™ Adaptive SoC devices, insufficient boundary checks in USB boot mode—when enabled through board modifications—could allow crafted images to trigger a buffer overflow and overwrite an active function pointer, which may result in arbitrary code execution during boot process. This...
EUVD-2026-92813
Insufficient boundary validation in the USB boot mode implementation of AMD Zynq™ UltraScale+ MPSoC and RFSoC devices could allow unbounded Device Firmware Upgrade DFU download requests to overflow the DDR receive buffer into FSBL memory, potentially resulting in unauthorized code execution durin...
