CVE-2021-21974

CVE-2021-21974 VMware ESXi OpenSLP Heap Overflow Remote Code Execution PoC Author: Aiyakami Overview CVE-2021-21974 is a heap overflow vulnerability in the OpenSLP service in VMware ESXi. An unauthenticated attacker can send specially crafted packets over the network to the target ESXi host's SLP...

CVE-2018-4407

CVE-2018-4407 CVE-2018-4407 is a buffer overflow vulnerability in the XNU kernel's ICMP error code. It causes IOS devices to crash both laptops and mobiles upon receival of one yes 1! single bad packet. The bug was originally disclosured by Kevin Backhouse on his lgtm blogpost on October 30th 201...

CVE-2026-35001 OpenS100 S-102 Parser Integer Overflow Heap Buffer Overflow

OpenS100 through commit 2b1dafc contains an integer overflow vulnerability in the S-102 Bathymetric Surface parser. An attacker can supply a crafted S-102 HDF5 file with malicious grid dimension metadata that causes memory corruption when a user opens it. In the S102VGBathymetryCoverage::Read...

CVE-2026-35001

The OpenS100 software (through commit daa35b ) is vulnerable to an integer overflow within the S-102 Bathymetric Surface parser . The root cause is the unvalidated multiplication of numPointsLatitudinal and numPointsLongitudinal values in the S102_VG_BathymetryCoverage::Read() function. By provid...

CVE-2026-35001

OpenS100 through commit daa35b contains an integer overflow vulnerability in the S-102 Bathymetric Surface parser that allows remote attackers to cause a heap-based buffer overflow by opening a crafted S-102 HDF5 file with malicious grid dimension metadata. Attackers can exploit the unvalidated...

EUVD-2026-98233

OpenS100 through commit daa35b contains an integer overflow vulnerability in the S-102 Bathymetric Surface parser that allows remote attackers to cause a heap-based buffer overflow by opening a crafted S-102 HDF5 file with malicious grid dimension metadata. Attackers can exploit the unvalidated...

CVE-2026-35001 OpenS100 S-102 Parser Integer Overflow Heap Buffer Overflow

OpenS100 through commit 2b1dafc contains an integer overflow vulnerability in the S-102 Bathymetric Surface parser. An attacker can supply a crafted S-102 HDF5 file with malicious grid dimension metadata that causes memory corruption when a user opens it. In the S102VGBathymetryCoverage::Read...

CVE-2026-108954 k2-fsa sherpa-onnx Offline Transducer Greedy Search Decoder offline-transducer-greedy-search-decoder.cc Decode buffer overflow

A vulnerability was found in k2-fsa sherpa-onnx up to 1.13.8. This issue affects the function OfflineTransducerGreedySearchDecoder::Decode of the file sherpa-onnx/csrc/offline-transducer-greedy-search-decoder.cc of the component Offline Transducer Greedy Search Decoder. The manipulation of the...

CVE-2026-108954

The k2-fsa sherpa-onnx software (up to version 1.13.8 ) contains a buffer overflow vulnerability in the Offline Transducer Greedy Search Decoder component. Specifically, the OfflineTransducerGreedySearchDecoder::Decode function in sherpa-onnx/csrc/offline-transducer-greedy-search-decoder.cc fails...

EUVD-2026-98232

A vulnerability was found in k2-fsa sherpa-onnx up to 1.13.8. This issue affects the function OfflineTransducerGreedySearchDecoder::Decode of the file sherpa-onnx/csrc/offline-transducer-greedy-search-decoder.cc of the component Offline Transducer Greedy Search Decoder. The manipulation of the...

CVE-2026-108954 k2-fsa sherpa-onnx Offline Transducer Greedy Search Decoder offline-transducer-greedy-search-decoder.cc Decode buffer overflow

A vulnerability was found in k2-fsa sherpa-onnx up to 1.13.8. This issue affects the function OfflineTransducerGreedySearchDecoder::Decode of the file sherpa-onnx/csrc/offline-transducer-greedy-search-decoder.cc of the component Offline Transducer Greedy Search Decoder. The manipulation of the...

CVE-2025-32756-POC

CVE-2025-32756: Fortinet RCE PoC A proof-of-concept for the critical stack-based buffer overflow vulnerability CVE-2025-32756 affecting Fortinet products. Vulnerability CVSS : 9.8 Critical Type : Stack-based buffer overflow in AuthHash cookie processing Impact : Unauthenticated remote code...

MGASA-2026-0500 Updated perl-Imager package fixes security vulnerabilities

Buffer read underflows on 32-bit sizet systems decoding EXIF data. CVE-2026-73638 Palette off-by-one discloses uninitialized heap memory. CVE-2026-93018 TGA reader: signed colourmaplength causes process-killing allocator abort. CVE-2026-93019 Unvalidated rawdatachannels can cause incorrect memory...

Updated perl-Imager package fixes security vulnerabilities

Buffer read underflows on 32-bit sizet systems decoding EXIF data. CVE-2026-73638 Palette off-by-one discloses uninitialized heap memory. CVE-2026-93018 TGA reader: signed colourmaplength causes process-killing allocator abort. CVE-2026-93019 Unvalidated rawdatachannels can cause incorrect memory...

CVE-2026-97229 Integer Overflow or Wraparound in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an unauthenticated user to execute arbitrary code on the GitLab server via a specially crafted regular...

cve-2017-7269

Buffer overflow in the ScStoragePathFromUrl function in the WebDAV service in Internet Information Services IIS 6.0 in Microsoft Windows Server 2003 R2 allows remote attackers to execute arbitrary code via a long header beginning with "If: http://" in a PROPFIND request, as exploited in the wild ...

nginxrift-CVE-2026-42945

NGINX Rift RCE Exploit CVE-2026-42945 from @DepthFirstDisclosures A professional Proof-of-Concept PoC tool for researching and identifying the NGINX Rift vulnerability, a critical heap-based buffer overflow in the ngxhttprewritemodule. Vulnerability Overview CVE ID: CVE-2026-42945 Alias: NGINX Ri...

CVE-2024-46451

CVE-2024-46451 TOTOLINK AC1200 T8 Exploit - Buffer Overflow Vulnerability This repository contains a Python script that exploits a buffer overflow vulnerability in the TOTOLINK AC1200 T8 version v4.1.5cu.861B20230220 in the setWiFiAclRules function via the desc parameter. Vulnerability Details...

Pwn ARM NFC

Challenge ARM buffer overflow via NFC tag This project is an open-source and funny to make low-level challenge. Feel free to improve it or use it in your own projects. Each file is distributed "as is" in the hope that it will be useful, but without any warranty expressed or implied. File tree...

kernel: drm/vmwgfx: use check_add_overflow for shader size+offset bound

A flaw was found in the drm/vmwgfx component of the Linux kernel. An integer overflow vulnerability exists in the vmwshaderdefine function due to improper validation of user-supplied shader window size and offset. When the offset value is close to its maximum, an unsigned addition can wrap around...