Exploit for CVE-2026-63292

⚠️ CVE-2026-63292 — Apache HTTP Server Security Vulnerability...

CVE-2026-93925

A flaw was found in Apache Thrift. An incorrect bitwise integer shift in the C++ THeaderProtocol implementation can cause a stack-based buffer overflow. A remote, unauthenticated attacker could exploit this vulnerability by sending specially crafted input, resulting in a Denial of Service DoS...

CVE-2026-86325

A stack-based buffer overflow vulnerability exists in protocol gateways' account management interface. The vulnerability is caused by insufficient length validation of the accountname parameter when processing account management requests. An attacker authenticated as a read-only user to the...

CVE-2026-86325

A stack-based buffer overflow vulnerability exists in the account management interface of protocol gateways . The root cause is insufficient length validation of the account_name parameter during account management requests. An attacker authenticated as a read-only user to the web management inte...

EUVD-2026-91371

A stack-based buffer overflow vulnerability exists in protocol gateways' account management interface. The vulnerability is caused by insufficient length validation of the accountname parameter when processing account management requests. An attacker authenticated as a read-only user to the...

CVE-2026-93925

Apache Thrift versions before 0.25.0 are vulnerable to a stack-based buffer overflow caused by an incorrect bitwise integer shift within the C++ THeaderProtocol implementation. Specifically, the flaw exists in the THeaderTransport::writeVarint32() function when processing a negative protocol ID. ...

Out-of-bounds Write

Overview Affected versions of this package are vulnerable to Out-of-bounds Write via the THeaderProtocol. An attacker can cause the application to crash by sending specially crafted input that triggers a stack-based buffer overflow. Remediation Upgrade thrift to version 0.25.0 or higher. Referenc...

EUVD-2026-91369

Stack-based buffer overflow, Incorrect bitwise shift of integer vulnerability in Apache Thrift C++ THeaderProtocol. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

CVE-2026-93925

Stack-based buffer overflow, Incorrect bitwise shift of integer vulnerability in Apache Thrift C++ THeaderProtocol. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

httpd: httpd: Arbitrary code execution via oversized Host header in mod_vhost_alias

A flaw was found in httpd's modvhostalias module. A remote attacker can exploit a stack-based buffer overflow by sending a crafted HTTP request with an excessively large Host header to a server using specific virtual hosting configurations. This issue can lead to arbitrary code execution or cause...

CVE-2026-63292

A flaw was found in httpd's modvhostalias module. A remote attacker can exploit a stack-based buffer overflow by sending a crafted HTTP request with an excessively large Host header to a server using specific virtual hosting configurations. This issue can lead to arbitrary code execution or cause...

PT-2026-104299

Name of the Vulnerable Software and Affected Versions Tenda HG7 affected versions not specified Tenda HG9 affected versions not specified Tenda HG10 300001138 en xpon affected versions not specified Description A stack-based buffer overflow occurs in the Boa Web Server component due to improper...

SUSE SLED15: gimp / gimp-devel / gimp-lang / gimp-plugin-aa / libgimp-2_0-0 / etc (SUSE-SU-2026:4409-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4409-1 advisory. - CVE-2026-18301: Vulnerability Report at readchanneldata bsc1276230. - CVE-2026-18302: TIF File Parsing...

CVE-2026-66837: Stack-based Buffer Overflow

Stack-based Buffer Overflow, Integer Overflow or Wraparound vulnerability in Apache Thrift php bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

PT-2026-104205

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.25.0 Description A stack-based buffer overflow and an incorrect bitwise shift of integer occur in the Apache Thrift C++ THeaderProtocol. A stack-based buffer overflow happens when a program writes more data to...

PT-2026-104323

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.25.0 Description Stack-based Buffer Overflow, Integer Overflow or Wraparound issue exists in the php bindings of Apache Thrift. Recommendations Upgrade to version 0.25.0...

CVE-2026-104610: Stack-based Buffer Overflow

A security vulnerability has been detected in Tenda HG7, HG9 and HG10 300001138enxpon. This impacts the function boaGetVar of the file /boaform/formLoopBack of the component Boa Web Server. Such manipulation of the argument Ethtype leads to stack-based buffer overflow. The attack can be executed...

CVE-2026-104611: Stack-based Buffer Overflow

A vulnerability was detected in Tenda AC9 15.03.02.13. Affected is an unknown function of the file /goform/fastsettinginternetset of the component POST Request Handler. Performing a manipulation of the argument netWanType results in stack-based buffer overflow. The attack is possible to be carrie...

Linux Distros Unpatched Vulnerability : CVE-2026-63292

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Stack-based buffer overflow in modvhostalias in Apache Software Foundation Apache HTTP Server through 2.4.68 on all platforms allows a remote client to cause a...

PT-2026-104300

A vulnerability was detected in Tenda AC9 15.03.02.13. Affected is an unknown function of the file /goform/fast setting internet set of the component POST Request Handler. Performing a manipulation of the argument netWanType results in stack-based buffer overflow. The attack is possible to be...