CVE-2026-75353

The OpENer v2.3 (commit 76b95cf) software contains an out-of-bounds read vulnerability within the server-side EtherNet/IP ForwardOpen connection-path parser . This flaw could allow a remote attacker to trigger a denial of service condition. No specific exploit details or remediation steps are pro...

CVE-2026-75348

An out-of-bounds read vulnerability exists in the EtherNet/IP TCP SendRRData Common Packet Format parser within EIPStackGroup OpENer v2.3 and master up to commit 76b95cf . The root cause is located in the CreateCommonPacketFormatStructure() function, which fails to validate that the remaining CPF...

CVE-2026-75348

An out-of-bounds read vulnerability exists in EIPStackGroup OpENer v2.3 and master up to commit 76b95cf in the EtherNet/IP TCP SendRRData Common Packet Format parser. The issue occurs in CreateCommonPacketFormatStructure when it parses recognized optional socket address information items of type...

CVE-2026-75351

OpENer v2.3/commit 76b95cf, contains an out-of-bounds read in the server-side EtherNet/IP ForwardOpen connection-path parser. This allows a remote attacker to cause a denial of service...

CVE-2026-75346

An out-of-bounds read vulnerability exists in EIPStackGroup OpENer v2.3 and master through commit 76b95cf in the server-side CIP SetAttributeList service. This allows a remote attacker to cause a denial of service...

CVE-2026-75346

An out-of-bounds read vulnerability exists in the EIPStackGroup OpENer software, specifically affecting versions v2.3 and the master branch through commit 76b95cf . The flaw is located in the server-side CIP SetAttributeList service. A remote attacker can exploit this vulnerability to cause a den...

EUVD-2026-95900

An out-of-bounds read vulnerability exists in EIPStackGroup OpENer v2.3 and master up to commit 76b95cf in the EtherNet/IP TCP SendRRData Common Packet Format parser. The issue occurs in CreateCommonPacketFormatStructure when it parses recognized optional socket address information items of type...

EUVD-2026-95901

An out-of-bounds read vulnerability exists in EIPStackGroup OpENer v2.3 and master through commit 76b95cf in the server-side CIP SetAttributeList service. This allows a remote attacker to cause a denial of service...

EUVD-2026-95970

OpENer v2.3/commit 76b95cf, contains an out-of-bounds read in the server-side EtherNet/IP ForwardOpen connection-path parser. This allows a remote attacker to cause a denial of service...

EUVD-2026-95971

OpENer v2.3/ commit 76b95cf, contains an out-of-bounds read in the server-side EtherNet/IP ForwardOpen connection-path parser. This allows a remtoe attacker to cause a denial of service...

EUVD-2026-95903

OpENer v2.3.0 / commit 76b95cf contains an out-of-bounds read in the unconnected explicit messaging path. This allows a remote attacker to cause a denial of service...

EUVD-2026-95902

EIPStackGroup OpENer v2.3.0/master up to commit 76b95cf contains an out-of-bounds read vulnerability in Connection Manager request parsing. This allows a remote attacker to cause a denial of service...

CVE-2025-7766

استغلال PoC لـ CVE-2025-7766 PoC لاستغلال ثغرة الكيان الخارجي XML في CVE-2025-7766. يوضح قراءة الملفات /etc/passwd واستدعاءات HTTP خارج النطاق. المؤلف : Byte Reaper CVE : CVE-2025-7766 الثغرة : تنفيذ تعليمات برمجية عن بُعد عبر الكيان الخارجي XML XXE PoC لاستغلال XXE في CVE-2025-7766. يوضح: قراءة...

apache-httpd-path-traversal-checker

apache httpd path traversal checker 0x00 Aperçu Le 20211005, une vulnérabilité de traversée de répertoire dans Apache HTTPD 2.4.49 CVE-2021-41773 a été divulguée en ligne, permettant la lecture arbitraire de fichiers le répertoire traversé doit être accessible, par exemple si Require all granted...

CVE-2026-106435

A flaw was found in pymongo. An attacker who can supply crafted BSON Binary JSON data to the application's decoding functions can trigger an out-of-bounds read when parsing a truncated regular expression missing a terminating null byte. This flaw can cause the application process to terminate...

CVE-2023-47504-POC

CVE-2023-47504 POC Exploit pour CVE-2023-47504. Selon le NIST, cette vulnérabilité devrait permettre aux utilisateurs non authentifiés d'accéder à des fonctionnalités dans le plugin Elementor Website Builder. Sur la base de mes recherches sur la vulnérabilité, et aussi en jugeant par l'URL de...

CVE-2025-30208-31125-31486-32395

Guide d'exploitation des vulnérabilités Vite CVE-2025-30208/31125/31486/32395 Ce document résume les méthodes d'exploitation de quatre vulnérabilités de lecture arbitraire de fichiers dans le serveur de développement Vite, avec des exemples pour Linux et Windows. Attention : à utiliser uniquement...

CVE-2025-44137

CVE-2025-44137 Lecture de fichier non authentifiée dans MapTiler Tileserver-php v2.0. Description MapTiler Tileserver-php v2.0 est vulnérable à une traversée de répertoire. La fonction renderTile dans tileserver.php est chargée de délivrer les tuiles stockées sous forme de fichiers sur le serveur...

dirtycow.cr

dirtycow Exploit CVE-2016-5195 Installation Rendez-vous dans la section des versions ou utilisez votre environnement crystal. Utilisation dirtycow --target /path/to/root/file --string "string to write" --offset...

CVE-2026-98190

A flaw was found in the Linux kernel's wilc1000 wireless driver. The driver fails to adequately validate the length of incoming Wi-Fi Direct P2P public action frames before reading the frame header, leading to an integer underflow and out-of-bounds memory read. A nearby unauthenticated attacker c...