CVE-2026-41089-Netlogon-RCE

🚨 CVE-2026-41089: Critical Windows Netlogon RCE Unauthenticated Remote Code Execution on Active Directory Domain Controllers 🧠 Conceptual Overview I am publishing this technical breakdown of CVE-2026-41089 , an exceptionally critical vulnerability residing deep within the Windows Netlogon service...

Blackash-CVE-2025-0282

Blackash-CVE-2025-0282 الوصف ثغرة تجاوز سعة المخزن المؤقت المبنية على المكدس في Ivanti Connect Secure قبل الإصدار 22.7R2.5، وIvanti Policy Secure قبل الإصدار 22.7R1.2، وIvanti Neurons for ZTA gateways قبل الإصدار 22.7R2.3 تتيح لمهاجم غير مصادق عن بُعد تحقيق تنفيذ برمجيات عن بُعد. المقاييس CNA:...

CVE-2026-104115

A stack-based buffer overflow in the illumos reparse point daemon reparsed allows a local user to crash the daemon. getfslocations in usr/src/cmd/fs.d/nfs/rpbasic/libnfsbasic.c, part of the nfs-basic reparse plugin, copies the host and path components of a reparse string into a fixed 1024-byte...

EUVD-2026-95804

A stack-based buffer overflow in the illumos reparse point daemon reparsed allows a local user to crash the daemon. getfslocations in usr/src/cmd/fs.d/nfs/rpbasic/libnfsbasic.c, part of the nfs-basic reparse plugin, copies the host and path components of a reparse string into a fixed 1024-byte...

CVE-2026-63292

⚠️ CVE-2026-63292 — Vulnérabilité de sécurité du serveur HTTP Apache 🔐 --- 🔎 Aperçu CVE-2026-63292 est une vulnérabilité de dépassement de tampon basé sur la pile affectant le module modvhostalias du serveur HTTP Apache. Le problème peut être déclenché dans des configurations serveur spécifiques...

CVE-2026-7827

A stack-based buffer overflow in the RdbLoadEntity function of the RDB graph decoders src/serializers/decoders//decodegraphentities.c in FalkorDB before 4.18.4 allows a remote attacker who can issue Redis replication commands for example, against an instance with no password configured to cause a...

CVE-2026-7827

A stack-based buffer overflow in the RdbLoadEntity function of the RDB graph decoders src/serializers/decoders//decodegraphentities.c in FalkorDB before 4.18.4 allows a remote attacker who can issue Redis replication commands for example, against an instance with no password configured to cause a...

CVE-2026-7827

FalkorDB versions prior to 4.18.4 are vulnerable to a stack-based buffer overflow in the _RdbLoadEntity function of the RDB graph decoders (located in src/serializers/decoders/*/decode_graph_entities.c). The root cause is an unbounded property count in a crafted RDB stream, where the count sizes ...

CVE-2026-7827 Stack-based buffer overflow in FalkorDB _RdbLoadEntity via unbounded property count in crafted RDB

A stack-based buffer overflow in the RdbLoadEntity function of the RDB graph decoders src/serializers/decoders//decodegraphentities.c in FalkorDB before 4.18.4 allows a remote attacker who can issue Redis replication commands for example, against an instance with no password configured to cause a...

EUVD-2026-95474

A stack-based buffer overflow in the RdbLoadEntity function of the RDB graph decoders src/serializers/decoders//decodegraphentities.c in FalkorDB before 4.18.4 allows a remote attacker who can issue Redis replication commands for example, against an instance with no password configured to cause a...

EUVD-2026-95332

IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to a stack-based buffer overflow...

CVE-2026-84035 Multiple vulnerabilities affect the Sniffer component as part of IBM Guardium Data Protection

IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to a stack-based buffer overflow...

CVE-2026-84035

IBM Guardium Data Protection versions 12.0, 12.1, and 12.2 are affected by a stack-based buffer overflow (CWE-121) within the Sniffer component . This vulnerability could allow a remote attacker to execute arbitrary code. To address this, IBM recommends applying the latest Sniffer patch available...

DEBIAN-CVE-2026-107705

Poppler 0.42.0 through 26.10.0 contains a stack-based buffer overflow in Decrypt::revision6Hash that allows attackers controlling the password to overwrite stack memory when opening AESV3/R6 encrypted PDFs. Attackers can supply a password longer than 127 bytes through applications using the...

CVE-2026-107705

Poppler 0.42.0 through 26.10.0 contains a stack-based buffer overflow in Decrypt::revision6Hash that allows attackers controlling the password to overwrite stack memory when opening AESV3/R6 encrypted PDFs. Attackers can supply a password longer than 127 bytes through applications using the...

EUVD-2026-95208

Poppler 0.42.0 through 26.10.0 contains a stack-based buffer overflow in Decrypt::revision6Hash that allows attackers controlling the password to overwrite stack memory when opening AESV3/R6 encrypted PDFs. Attackers can supply a password longer than 127 bytes through applications using the...

CVE-2019-25485

🐞 CVE-2019-25485: R 3.4.4 - تجاوز سعة المخزن المؤقت المستند إلى المكدس x86 و x64 تجاوز سعة المخزن المؤقت المستند إلى المكدس في R 3.4.4. استغلال كامل على x86، ولكن فقط التحكم في RIP مع تحليل القطع على x64 بسبب قيود البرنامج. نفس الثغرة عبر معماريتين، مما يؤدي إلى مسارات استغلال مختلفة. 📑 جدول...

CVE-2022-26937

إثبات المفهوم لتعطل نظام ملفات شبكة ويندوز CVE-2022-26937 nt!KeBugCheckEx: fffff8038996efa0 48894c2408 mov qword ptr rsp+8,rcx ss:0018:ffffd000d589ae60=0000000000000139 1: kd !analyze -v Bugcheck Analysis KERNELSECURITYCHECKFAILURE 139 A kernel component has corrupted a critical data structure. T...

CVE-2017-8367

CVE-2017-8367 استغلال PoC للثغرة CVE-2017-8367 وظيفة تسجيل Easy Mov Converter تجاوز سعة المخزن المؤقت القائم على المكدس. الاستخدام قم بتشغيل السكريبت وسيتم إنشاء الملف POCPayload.txt الذي يحتوي على الحمولة. python3 payloadgeneratorCVE-2017-15950.py افتح ملف الإخراج في المفكرة وانسخ الإخراج النصي...

CVE-2026-87676

A stack-based buffer overflow vulnerability exists in the security library component of Brocade Fabric OS versions before 10.0.1. When parsing uploaded X.509 PEM certificates for management display, the system improperly validates the length of the Authority Key Identifier AKI extension before...