Lucene search
+L

1109 matches found

Kitploit
Kitploit
•added 2026/08/31 4:52 a.m.•3 views

CVE-2022-1015

CVE-2022-1015 Root Cause In the nftparseregister function, because there is no validation when the arg defaults, an out-of-bounds OOB occurs on the stack of the nftdochain function. At this point, using the payload expression allows both read and write. The payload operates as follows: That is, b...

6.6CVSS6.8AI score0.01467EPSS
SaveExploits10
Cvelist
Cvelist
•added 2026/08/28 8:31 p.m.•31 views

CVE-2026-75118 http_gdpr_decrypt Pre-Authentication Stack-Based Buffer Overflow

A pre-authentication stack-based buffer overflow vulnerability exists in the httpgdprdecrypt function of TL-MR100 V3.20 due to insufficient bounds checking of encrypted requests to the /cgi/login endpoint. An adjacent unauthenticated attacker with access to the router's web management interface c...

8.7CVSS0.0025EPSS
SaveExploits0References2
Kitploit
Kitploit
•added 2026/08/28 10:34 a.m.•4 views

CVE-2020-1020

CVE-2020-1020 Corruzione dello stack VToHOrigin nel driver dei font Type 1 di Windows funziona solo su win7 x64...

8.8CVSS6.9AI score0.65037EPSS
SaveExploits1
EUVD
EUVD
•added 2026/08/28 12:32 a.m.•6 views

EUVD-2026-67297

In Bluetooth Mesh SDK 6.1.4 and earlier, malformed extended advertisements can trigger out-of-bounds writes leading to stack corruption and remote code execution. These messages must come from a device that has already joined the network. Only provisioners supporting extended advertisements may b...

8.9CVSS6AI score0.00266EPSS
SaveExploits0References3
NVD
NVD
•added 2026/08/28 12:18 a.m.•9 views

CVE-2026-5706

In Bluetooth Mesh SDK 6.1.4 and earlier, malformed extended advertisements can trigger out-of-bounds writes leading to stack corruption and remote code execution. These messages must come from a device that has already joined the network. Only provisioners supporting extended advertisements may b...

8.9CVSS0.00266EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/08/27 12:00 a.m.•13 views

PT-2026-82772

In Bluetooth Mesh SDK 6.1.4 and earlier, malformed extended advertisements can trigger out-of-bounds writes leading to stack corruption and remote code execution. These messages must come from a device that has already joined the network. Only provisioners supporting extended advertisements may b...

8.9CVSS6AI score0.00266EPSS
SaveExploits0References3
OSV
OSV
•added 2026/08/25 4:05 p.m.•5 views

CVE-2026-13216 Out-of-bounds stack write in Zephyr virtio PCI driver from unvalidated device-supplied capability length

The virtio PCI driver drivers/virtio/virtiopci.c parses a device's PCI capability list during driver initialization. In virtiopcireadcap the device-supplied capability length byte caplen read from PCI config space via pcieconfread was only checked with asserttmp.caplen == capstructsize. That asse...

6.1CVSS6.5AI score
SaveExploits0References5
CVE
CVE
•added 2026/08/25 4:05 p.m.•12 views

CVE-2026-13216

CVE-2026-13216 is an out-of-bounds stack write in the Zephyr RTOS virtio PCI driver (drivers/virtio/virtio_pci.c). The device-supplied cap_len field, read from PCI config space, was validated only by a compiled-out assert() (gated by CONFIG_ASSERT, off by default in production). The unvalidated l...

6.1CVSS6.3AI score0.00181EPSS
SaveExploits0References2
AstraLinux
AstraLinux
•added 2026/08/24 10:19 a.m.•13 views

Astra Linux – Vulnerability in imagemagick

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16 and 6.9.13-41, there was a stack buffer overflow issue in ImageMagick’s morphology kernel parsing functions. User-controlled kernel strings that exceeded the buffer size were...

7.1CVSS7.2AI score0.00108EPSS
SaveExploits0References2
AstraLinux
AstraLinux
•added 2026/08/24 10:19 a.m.•11 views

Astra Linux – Vulnerability in Linux, Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: KVM: PPC: Book3S HV: Fixed stack handling in idlekvmstartguest In commit 10d91611f426 ā€œpowerpc/64s: Reimplemented the book3s idle code in Cā€, kvmstartguest became idlekvmstartguest. The old code allocated a stack frame on the...

7.1CVSS5.4AI score0.00224EPSS
SaveExploits0References2
AstraLinux
AstraLinux
•added 2026/08/24 10:19 a.m.•10 views

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerability has been resolved: powerpc/pseries: Enforce hcall result buffer validity and size. Functions like plparhcall, plparhcall9, and related functions expect callers to provide valid result buffers of a certain minimum size. Currently, this is only...

7.8CVSS6.5AI score0.00302EPSS
SaveExploits0References2
OSV
OSV
•added 2026/08/22 3:32 p.m.•11 views

CVE-2026-74627 net: devmem: prevent net-iov / page mixing

In the Linux kernel, the following vulnerability has been resolved: net: devmem: prevent net-iov / page mixing We should either have netiov or page backed frags in a single skb, otherwise it blows up down the stack. Don't allow mixing in zerocopyfillskbfromdevmem...

7.8CVSS5.6AI score
SaveExploits0References6
CVE
CVE
•added 2026/08/22 3:32 p.m.•14 views

CVE-2026-74627

CVE-2026-74627 affects the Linux kernel's net: devmem component. The root cause is improper mixing of net_iov and page-backed fragments within a single skb in the zerocopy_fill_skb_from_devmem() function, which causes a crash downstream in the stack. Red Hat classifies the impact as Denial of Ser...

7.8CVSS5.4AI score0.00127EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/08/21 12:31 a.m.•12 views

EUVD-2026-63752

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 A stack memory corruption vulnerability exists in the AIX IPsec ESP decapsulation handler. Successful exploitation may corrupt kernel stack state and cause a system crash, resulting in denial of service...

6.5CVSS5.5AI score0.00249EPSS
SaveExploits0References2
OSV
OSV
•added 2026/08/20 11:19 p.m.•5 views

MINI-8WGG-X7FP-W6PG

Bulletin has no description...

7.5CVSS7AI score0.00256EPSS
SaveExploits0
NVD
NVD
•added 2026/08/20 10:17 p.m.•11 views

CVE-2026-19448

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 A stack memory corruption vulnerability exists in the AIX IPsec ESP decapsulation handler. Successful exploitation may corrupt kernel stack state and cause a system crash, resulting in denial of service...

7.5CVSS0.00249EPSS
SaveExploits0References1
CVE
CVE
•added 2026/08/20 10:04 p.m.•22 views

CVE-2026-19448

CVE-2026-19448 is a stack memory corruption vulnerability in the AIX IPsec ESP decapsulation handler , affecting IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 . Successful exploitation can corrupt kernel stack state and trigger a system crash , resulting in denial of service . NVD assigns a CVSS 3.1 ...

7.5CVSS5.4AI score0.00249EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2026/08/20 10:04 p.m.•34 views

CVE-2026-19448 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 A stack memory corruption vulnerability exists in the AIX IPsec ESP decapsulation handler. Successful exploitation may corrupt kernel stack state and cause a system crash, resulting in denial of service...

6.5CVSS0.00249EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/08/20 12:00 a.m.•13 views

PT-2026-79255

Name of the Vulnerable Software and Affected Versions IBM AIX versions 7.2 and 7.3 IBM PowerVM VIOS version 4.1 Description A stack memory corruption issue exists in the AIX IPsec ESP decapsulation handler. This can lead to the corruption of the kernel stack state, potentially causing a system...

6.5CVSS5.5AI score0.00249EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2026/08/19 2:41 p.m.•13 views

php: PHP: Arbitrary code execution via out-of-bounds write in bccomp()

A flaw was found in PHP. A remote attacker could exploit this vulnerability by providing specially crafted inputs to the bccomp function. This could lead to an out-of-bounds write, resulting in stack and heap corruption. Such memory corruption can enable arbitrary code execution, allowing the...

9.8CVSS6AI score0.00426EPSS
SaveExploits2References5
Rows per page
Query Builder