USN-8885-1 fluidsynth vulnerabilities

It was discovered that FluidSynth did not properly validate the channel argument of the pitchbendrange command. A remote attacker could possibly use this issue to cause FluidSynth to crash, resulting in a denial of service, or execute arbitrary code. CVE-2026-58264 It was discovered that FluidSyn...

CVE-2025-5548-FreeFloat-FTP-Lab

Lab scripts This folder gathers the reproducible artifacts associated with the CVE-2025-5548 / FreeFloat FTP Server 1.0 lab. The teaching sequence and naming follow the reference teaching material from TheMalwareGuardian, while these versions have been rebuilt for this repository from the...

CVE-2025-47981

🔵 CVE-2025-47981 — Script de Avaliação de Vulnerabilidade SPNEGO NEGOEX do Windows Tipo: Avaliação de Vulnerabilidade — Verificação de Detecção / Conformidade CVE: CVE-2025-47981 CVSS: 9.8 Crítico AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CWE: CWE-122 — Estouro de Buffer Baseado em Heap Alias: "Pesadel...

FreeRDP: FreeRDP: Heap buffer overflow via oversized LB_LOAD_BALANCE_INFO routing token can lead to heap corruption.

A flaw was found in FreeRDP. A malicious RDP Remote Desktop Protocol server or a man-in-the-middle attacker could exploit a heap buffer overflow vulnerability during connection negotiation, prior to authentication. By sending a specially crafted Server Redirection PDU Protocol Data Unit with an...

FreeRDP: FreeRDP: Remote code execution via heap buffer overflow in Server Redirection PDU

A flaw was found in FreeRDP. A malicious Remote Desktop Protocol RDP server can exploit a heap-based buffer overflow vulnerability in the negosendnegotiationrequest function. By sending a specially crafted Server Redirection PDU message with an attacker-controlled LoadBalanceInfo field, the serve...

Important: Red Hat Security Advisory: freerdp security update

An update for freerdp is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

AZL-106658 CVE-2026-105839 affecting package libmikmod 3.3.11.1-14

libmikmod before 3.3.14 contains an integer overflow in the Oktalyzer loader OKTdoPBOD that allows attackers to cause heap buffer overflow via crafted track counts. Attackers can supply an OKT module whose SLEN chunk wraps the 16-bit numtrk value, causing PBOD writes past allocated track pointers...

AZL-106670 CVE-2026-105842 affecting package lrzsz 0.12.20-50

lrzsz before 0.13.0 contains a heap-based buffer overflow vulnerability in procheader of the lrz receive utility when copying overlong sender-supplied filenames into Pathname. Malicious ZMODEM senders can supply filenames up to 8192 bytes, overflowing the buffer via sprintf in pipe mode or strcpy...

DEBIAN-CVE-2026-105842

lrzsz before 0.13.0 contains a heap-based buffer overflow vulnerability in procheader of the lrz receive utility when copying overlong sender-supplied filenames into Pathname. Malicious ZMODEM senders can supply filenames up to 8192 bytes, overflowing the buffer via sprintf in pipe mode or strcpy...

DEBIAN-CVE-2026-105839

libmikmod before 3.3.14 contains an integer overflow in the Oktalyzer loader OKTdoPBOD that allows attackers to cause heap buffer overflow via crafted track counts. Attackers can supply an OKT module whose SLEN chunk wraps the 16-bit numtrk value, causing PBOD writes past allocated track pointers...

CVE-2026-105839

libmikmod before 3.3.14 contains an integer overflow in the Oktalyzer loader OKTdoPBOD that allows attackers to cause heap buffer overflow via crafted track counts. Attackers can supply an OKT module whose SLEN chunk wraps the 16-bit numtrk value, causing PBOD writes past allocated track pointers...

CVE-2026-105842

lrzsz before 0.13.0 contains a heap-based buffer overflow vulnerability in procheader of the lrz receive utility when copying overlong sender-supplied filenames into Pathname. Malicious ZMODEM senders can supply filenames up to 8192 bytes, overflowing the buffer via sprintf in pipe mode or strcpy...

AZL-106664 CVE-2026-105837 affecting package libmikmod 3.3.11.1-14

libmikmod before 3.3.14 contains an integer overflow vulnerability in DSMLoad in loaddsm.c that allows attackers to trigger heap buffer overflow via crafted track counts. Attackers can supply a DSM module whose numchn and numpat product wraps a 16-bit value, overwriting heap memory to cause crash...

DEBIAN-CVE-2026-105837

libmikmod before 3.3.14 contains an integer overflow vulnerability in DSMLoad in loaddsm.c that allows attackers to trigger heap buffer overflow via crafted track counts. Attackers can supply a DSM module whose numchn and numpat product wraps a 16-bit value, overwriting heap memory to cause crash...

CVE-2026-105837

libmikmod before 3.3.14 contains an integer overflow vulnerability in DSMLoad in loaddsm.c that allows attackers to trigger heap buffer overflow via crafted track counts. Attackers can supply a DSM module whose numchn and numpat product wraps a 16-bit value, overwriting heap memory to cause crash...

pentest-writeups

pentest-writeups Kioptrix Level 1 のwriteup - CVE-2003-0201 Samba trans2open Kioptrix Level 1 — ペネトレーションテスト Writeup 著者: Amirbek Raxmatullayev @americo444 日付: 2026-06-17 プラットフォーム: VulnHub 難易度: 初心者向け 目的: root権限の取得 1. 環境設定 コンポーネント| 詳細 ---|--- ホストOS| Ubuntu 26.04 ハイパーバイザー| QEMU/KVM ターゲット| Kioptrix...

CVE-2021-3156

エクスプロイトチェーン深掘り：CVE-2021-3156（Baron Samedit） 著者: IJ Baig 日付: 2026年7月7日 1. CVE ID、影響を受けるバージョン、およびビルド確認 CVE ID: CVE-2021-3156 脆弱性タイプ: ヒープベースのバッファオーバーフロー 影響を受けるバージョン範囲: レガシーSudoバージョン1.8.2～1.8.31p2、および安定版バージョン1.9.0～1.9.5p1。 ビルド対象バージョン: Sudo 1.9.5p1 1.1 環境設定...

CVE-2026-105842 lrzsz before 0.13.0 Heap Buffer Overflow via lrz procheader() Pathname

lrzsz before 0.13.0 contains a heap-based buffer overflow vulnerability in procheader of the lrz receive utility when copying overlong sender-supplied filenames into Pathname. Malicious ZMODEM senders can supply filenames up to 8192 bytes, overflowing the buffer via sprintf in pipe mode or strcpy...

CVE-2026-105842

lrzsz before 0.13.0 contains a heap-based buffer overflow vulnerability in procheader of the lrz receive utility when copying overlong sender-supplied filenames into Pathname. Malicious ZMODEM senders can supply filenames up to 8192 bytes, overflowing the buffer via sprintf in pipe mode or strcpy...

CVE-2026-105842

The lrzsz utility (versions before 0.13.0 ) is vulnerable to a heap-based buffer overflow within the procheader() function of the lrz receive utility. The flaw occurs when the utility copies overlong, sender-supplied filenames (up to 8192 bytes) into Pathname . Specifically, the overflow is trigg...