CVE-2026-102495

Apache XmlSchema doesn't limit how deeply schema imports and includes can be nested, so a malicious schema can make parsing recurse until the stack overflows. This causes a denial of service. Users are recommended to upgrade to version 2.3.3, which fixes this issue...

CVE-2026-102496

Apache XmlSchema doesn't limit how deeply schema structures can be nested when it builds its schema model, so a malicious schema can make parsing recurse until the stack overflows. This causes a denial of service. Users are recommended to upgrade to version 2.3.3, which fixes this issue...

CVE-2026-102497

The Apache XmlSchema walker xmlschema-walker doesn't detect cycles in type derivation, substitution groups, model groups or attribute groups. A malicious schema with such a cycle can make the walker recurse until the stack overflows, causing a denial of service. Users are recommended to upgrade t...

EUVD-2026-88739

The Apache XmlSchema walker xmlschema-walker doesn't detect cycles in type derivation, substitution groups, model groups or attribute groups. A malicious schema with such a cycle can make the walker recurse until the stack overflows, causing a denial of service. Users are recommended to upgrade t...

CVE-2026-102497

The Apache XmlSchema walker (xmlschema-walker) is vulnerable to a denial of service because it fails to detect cycles in type derivation, substitution groups, model groups, or attribute groups. A malicious schema containing such cycles can cause the walker to recurse indefinitely until a stack ov...

CVE-2026-102497 Apache XMLSchema: Denial of service through cyclic schema definitions in the schema walker

The Apache XmlSchema walker xmlschema-walker doesn't detect cycles in type derivation, substitution groups, model groups or attribute groups. A malicious schema with such a cycle can make the walker recurse until the stack overflows, causing a denial of service. Users are recommended to upgrade t...

CVE-2026-102497 Apache XMLSchema: Denial of service through cyclic schema definitions in the schema walker

The Apache XmlSchema walker xmlschema-walker doesn't detect cycles in type derivation, substitution groups, model groups or attribute groups. A malicious schema with such a cycle can make the walker recurse until the stack overflows, causing a denial of service. Users are recommended to upgrade t...

CVE-2026-102496

Apache XmlSchema is vulnerable to a Denial of Service (DoS) due to a lack of depth limits when building its schema model. A remote attacker can provide a crafted XML schema with deeply nested elements, triggering uncontrolled recursion that leads to a stack overflow and crashes the application. T...

CVE-2026-102496 Apache XMLSchema: Denial of service through deeply nested schema structures

Apache XmlSchema doesn't limit how deeply schema structures can be nested when it builds its schema model, so a malicious schema can make parsing recurse until the stack overflows. This causes a denial of service. Users are recommended to upgrade to version 2.3.3, which fixes this issue...

CVE-2026-102496 Apache XMLSchema: Denial of service through deeply nested schema structures

Apache XmlSchema doesn't limit how deeply schema structures can be nested when it builds its schema model, so a malicious schema can make parsing recurse until the stack overflows. This causes a denial of service. Users are recommended to upgrade to version 2.3.3, which fixes this issue...

EUVD-2026-88738

Apache XmlSchema doesn't limit how deeply schema structures can be nested when it builds its schema model, so a malicious schema can make parsing recurse until the stack overflows. This causes a denial of service. Users are recommended to upgrade to version 2.3.3, which fixes this issue...

EUVD-2026-88737

Apache XmlSchema doesn't limit how deeply schema imports and includes can be nested, so a malicious schema can make parsing recurse until the stack overflows. This causes a denial of service. Users are recommended to upgrade to version 2.3.3, which fixes this issue...

lwip-snmpv3-stack-overflow-cve-2026-8836-critical-embedded-rce

CVE-2026-8836 — lwIP SNMPv3 스택 오버플로우 PoC lwIP의 SNMPv3 USM 핸들러에서 발생하는 치명적인 스택 기반 버퍼 오버플로우인 CVE-2026-8836에 대한 개념 증명 익스플로잇입니다. 취약점 CVE : CVE-2026-8836 CVSS : 9.8 치명적 구성 요소 : snmpparseinboundframe in src/apps/snmp/snmpmsg.c 근본 원인 : snmpasn1decraw의 주석 처리된 경계 검사 및 잘못된 버퍼 크기 매개변수 버퍼 :...

misfortune-cookie

CVE-2014-9222 "Misfortune Cookie" PoC 모음 AllegroSoft RomPager의 HTTP 쿠키 처리에서 발생하는 스택 오버플로우4.34 미만의 모든 버전. 인증되지 않은 단일 요청에 조작된 Cookie: 헤더를 포함하면 메모리가 손상됩니다. 영향: 관리자 인증 우회, DoS/재부팅, 그리고 펌웨어별 오프셋을 사용하는 경우 원격 코드 실행. 소유한 하드웨어 또는 명시적으로 테스트 권한을 부여받은 하드웨어에만 사용하십시오. 대화형 콘솔권장 python3 main.py 그런 다음 1로 대상 설정...

CVE-2026-73321

CVE-2026-73321: PHP worker stack overflow through nested BBCode XenForo before 2.3.13 can exhaust a PHP worker through deeply nested BBCode. Result The public editor/to-html route sends guest-supplied BBCode through XenForo's recursive parser and renderer. It does not apply a raw-length or nestin...

CVE-2026-102809: Memory Allocation with Excessive Size Value

PX4 Autopilot through 1.17.0 contains an uncontrolled stack allocation vulnerability in the file2 test command that fails to validate the write chunk size parameter. Attackers with shell access can supply an excessively large value to the -c option to trigger stack overflow and crash the flight...

CVE-2026-102497: Uncontrolled Recursion

The Apache XmlSchema walker xmlschema-walker doesn't detect cycles in type derivation, substitution groups, model groups or attribute groups. A malicious schema with such a cycle can make the walker recurse until the stack overflows, causing a denial of service. Users are recommended to upgrade t...

CVE-2026-102495: Uncontrolled Recursion

Apache XmlSchema doesn't limit how deeply schema imports and includes can be nested, so a malicious schema can make parsing recurse until the stack overflows. This causes a denial of service. Users are recommended to upgrade to version 2.3.3, which fixes this issue...

CVE-2013-3664_MAC

Sketchup MAC Pict Material Palette Stack Corruption - CVE-2013-3664 SketchUp은 임베디드 MACPict 텍스처를 파싱할 때 입력 값에 대한 검증에 실패합니다. 악성 텍스처나 썸네일 또는 배경 이미지가 스택 오버플로를 유발한 후 임의 코드 실행이 가능함이 입증되었습니다. 이 문제는 Windows 탐색기가 .skp 파일에 포함된 썸네일을 읽을 때도 발생할 수 있습니다. 요약 제목: Sketchup MAC Pict Material Palette Stack Corruption...

CVE-2018-20343

CVE-2018-20343 これは、Ken SilvermanのBuild Engineにおける脆弱性CVE-2018-20343のPoCです。 生成された.mapファイルはバッファオーバーフローを引き起こし、以下に示すようにスタックを上書きします。 DosBox 0.74-2上のOpen Watcom: 解析者がスタックを制御する FreeDos 1.2上: 解析者がEIPを制御する 脆弱なコードはENGINE.Cにあります: 1935 kreadfil,&numsectors,2; 1936 kreadfil,&sector0,sizeofsectortypenumsectors;...