CVE-2026-41089-Netlogon-RCE

🚨 CVE-2026-41089: 重大な Windows Netlogon RCE Active Directory ドメインコントローラにおける未認証のリモートコード実行 🧠 概念概要 私は、Windows Netlogon サービスの深部に存在する極めて重大な脆弱性である CVE-2026-41089 の技術的詳細分析を公開します。私の分析によると、この欠陥は深刻な スタックベースのバッファオーバーフロー...

Blackash-CVE-2025-0282

Blackash-CVE-2025-0282 説明 Ivanti Connect Secure バージョン22.7R2.5未満、Ivanti Policy Secure バージョン22.7R1.2未満、およびIvanti Neurons for ZTAゲートウェイ バージョン22.7R2.3未満 におけるスタックベースのバッファオーバーフローにより、リモートの未認証攻撃者がリモートコード実行を達成できます。 メトリクス CNA: ivanti 基本スコア: 9.0 CRITICAL ⚫ ベクター: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H...

CVE-2026-63292

⚠️ CVE-2026-63292 — Apache HTTP Server セキュリティ脆弱性 🔐 --- 🔎 概要 CVE-2026-63292 は、Apache HTTP Server の modvhostalias モジュールに影響を与えるスタックベースのバッファオーバーフロー脆弱性です。 この問題は、過大な HTTP Host ヘッダーと VirtualDocumentRoot ホスト名フォーマット指定子を含む特定のサーバー設定下で発生する可能性があります。 脆弱性 CVE-2026-63292 ├── Component: modvhostalias ├── Type:...

Linux Distros Unpatched Vulnerability : CVE-2026-66837

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Stack-based Buffer Overflow, Integer Overflow or Wraparound vulnerability in Apache Thrift php bindings. This issue affects Apache Thrift: before 0.25.0. Users...

CVE-2026-66837

A flaw was found in Apache Thrift. An integer overflow within the PHP bindings leads to a stack-based buffer overflow when processing specially crafted data. A remote, unauthenticated attacker could exploit this flaw to crash the service, leading to a Denial of Service DoS...

CVE-2026-104611

A vulnerability was detected in Tenda AC9 15.03.02.13. Affected is an unknown function of the file /goform/fastsettinginternetset of the component POST Request Handler. Performing a manipulation of the argument netWanType results in stack-based buffer overflow. The attack is possible to be carrie...

CVE-2026-104610

A security vulnerability has been detected in Tenda HG7, HG9 and HG10 300001138enxpon. This impacts the function boaGetVar of the file /boaform/formLoopBack of the component Boa Web Server. Such manipulation of the argument Ethtype leads to stack-based buffer overflow. The attack can be executed...

EUVD-2026-91586

Stack-based Buffer Overflow, Integer Overflow or Wraparound vulnerability in Apache Thrift php bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

CVE-2026-66837 Apache Thrift: PHP accelerator sizes a stack buffer from a wire-controlled string length

Stack-based Buffer Overflow, Integer Overflow or Wraparound vulnerability in Apache Thrift php bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

CVE-2026-66837

A flaw exists in the Apache Thrift PHP bindings (versions before 0.25.0 ) where an integer overflow allows a wire-controlled string length to improperly size a stack buffer. This leads to a stack-based buffer overflow when processing specially crafted data. A remote, unauthenticated attacker can ...

CVE-2026-66837

Stack-based Buffer Overflow, Integer Overflow or Wraparound vulnerability in Apache Thrift php bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

EUVD-2026-91579

A vulnerability was detected in Tenda AC9 15.03.02.13. Affected is an unknown function of the file /goform/fastsettinginternetset of the component POST Request Handler. Performing a manipulation of the argument netWanType results in stack-based buffer overflow. The attack is possible to be carrie...

CVE-2026-104611

A stack-based buffer overflow vulnerability exists in the Tenda AC9 (version 15.03.02.13). The flaw is located within an unknown function in the /goform/fast_setting_internet_set file of the POST Request Handler component. By manipulating the netWanType argument, an attacker can trigger the overf...

CVE-2026-104610

A stack-based buffer overflow vulnerability exists in the Boa Web Server component of Tenda HG7, HG9, and HG10 (300001138_en_xpon) devices. The issue is triggered by manipulating the Ethtype argument within the boaGetVar function of the /boaform/formLoopBack file. This vulnerability can be exploi...

EUVD-2026-91570

A security vulnerability has been detected in Tenda HG7, HG9 and HG10 300001138enxpon. This impacts the function boaGetVar of the file /boaform/formLoopBack of the component Boa Web Server. Such manipulation of the argument Ethtype leads to stack-based buffer overflow. The attack can be executed...

CVE-2026-104610 Tenda HG7/HG9/HG10 Boa Web Server formLoopBack boaGetVar stack-based overflow

A security vulnerability has been detected in Tenda HG7, HG9 and HG10 300001138enxpon. This impacts the function boaGetVar of the file /boaform/formLoopBack of the component Boa Web Server. Such manipulation of the argument Ethtype leads to stack-based buffer overflow. The attack can be executed...

CVE-2026-93925

Stack-based buffer overflow, Incorrect bitwise shift of integer vulnerability in Apache Thrift C++ THeaderProtocol. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

CVE-2026-86325

A stack-based buffer overflow vulnerability exists in protocol gateways' account management interface. The vulnerability is caused by insufficient length validation of the accountname parameter when processing account management requests. An attacker authenticated as a read-only user to the...

CVE-2026-93925

A flaw was found in Apache Thrift. An incorrect bitwise integer shift in the C++ THeaderProtocol implementation can cause a stack-based buffer overflow. A remote, unauthenticated attacker could exploit this vulnerability by sending specially crafted input, resulting in a Denial of Service DoS...

CVE-2026-86325

A stack-based buffer overflow vulnerability exists in protocol gateways' account management interface. The vulnerability is caused by insufficient length validation of the accountname parameter when processing account management requests. An attacker authenticated as a read-only user to the...