winxp-stack-buffer-overflow

Stack Buffer Overflow & Local Privilege Escalation Project...

ronin-exploits

ronin-exploits !CIhttps://github.com/ronin-rb/ronin-explo...

CVE-2026-71267

A flaw was found in microtar. The mtarwritefileheader and mtarwritedirheader functions copy a caller-supplied entry name into a fixed 100-byte stack buffer using strcpy without validating the name length. An application that archives an attacker-controlled or externally supplied filename longer...

CVE-2026-18909

A stack-based buffer overflow vulnerability exists in ELAN Microelectronics Corp. ELAN Smart-Pad on Windows ETD.sys and ETDSMBus.sys. During Intel SMBus recovery, ETDSMBus.sys does not enforce an upper-bound check on the hardware-derived report count, allowing an out-of-range value to be forwarde...

CVE-2026-18909

A stack-based buffer overflow vulnerability exists in ELAN Microelectronics Corp. ELAN Smart-Pad on Windows ETD.sys and ETDSMBus.sys. During Intel SMBus recovery, ETDSMBus.sys does not enforce an upper-bound check on the hardware-derived report count, allowing an out-of-range value to be forwarde...

EUVD-2026-53707

A stack-based buffer overflow vulnerability exists in ELAN Microelectronics Corp. ELAN Smart-Pad on Windows ETD.sys and ETDSMBus.sys. During Intel SMBus recovery, ETDSMBus.sys does not enforce an upper-bound check on the hardware-derived report count, allowing an out-of-range value to be forwarde...

Security Bulletin: IBM Engineering Lifecycle Management - Doors Next is impacted by vulnerability

Summary A vulnerability has been identified in Json-smart library, which is used in IBM Engineering Lifecycle Management - Doors Next. Vulnerability Details CVEID:CVE-2023-1370 DESCRIPTION:Json-smart is a performance focused, JSON processor lib. When reaching a ‘‘ or ‘‘ character in the JSON inpu...

PT-2026-68518

Name of the Vulnerable Software and Affected Versions APR-util versions prior to 1.6.4 Description A bug allows a stack recursion attack against any library consumer that parses XML from untrusted sources and utilizes the apr xml quote elem function. Recommendations Upgrade to version 1.6.4...

EulerOS 2.0 SP13 : libtiff (EulerOS-SA-2026-3029)

According to the versions of the libtiff packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : libtiff up to v4.7.1 was discovered to contain a stack overflow via the readSeparateStripsIntoBuffer function.CVE-2025-61144 Tenable has extracte...

openSUSE 16: librrd8 / lua-rrdtool / perl-rrdtool / python3-rrdtool / rrdtool / etc (openSUSE-SU-2026:21525-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21525-1 advisory. This update for rrdtool fixes the following issue: - CVE-2026-43958: stack buffer overflow in rrdcached handlerequestcreate can lead to local privilege...

SUSE SLES15: apache2-mod_php7 / php7 / php7-bcmath / php7-bz2 / php7-calendar / etc (SUSE-SU-2026:3510-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3510-1 advisory. - CVE-2026-7260: Stack overflow in phar with circular symlinks bsc1273077. - CVE-2026-9672: Upgrade libgd bsc1273078. -...

EulerOS 2.0 SP15 : libsolv (EulerOS-SA-2026-2934)

According to the versions of the libsolv packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in libsolv. This stack-based buffer overflow vulnerability occurs in libsolv's Debian metadata parser when processing specially...

EulerOS 2.0 SP13 : libtiff (EulerOS-SA-2026-2979)

According to the versions of the libtiff packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : libtiff up to v4.7.1 was discovered to contain a stack overflow via the readSeparateStripsIntoBuffer function.CVE-2025-61144 Tenable has extracte...

Linux Distros Unpatched Vulnerability : CVE-2026-45538

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenSIPS is a Session Initiation Protocol SIP server implementation. In versions 4.0.0 and prior, processing a SIP message with a header name longer than 255...

Exploit for NULL Pointer Dereference in Linux Linux_Kernel

--- CVE-2026-23002 – 5G NAS Message Buffer Overflow in gNode...

CVE-2026-71267

microtar's mtarwritefileheader and mtarwritedirheader functions src/microtar.c copy a caller-supplied entry name into the 100-byte field of a stack-allocated mtarheadert via strcpyh.name, name, with no check that strlenname is less than 100 before the copy...

postgresql: PostgreSQL: Arbitrary code execution vulnerability in 'refint' module

A flaw was found in PostgreSQL. A stack buffer overflow in the 'refint' module allows an unprivileged database user to execute arbitrary code as the operating system user running the database. Additionally, a separate vulnerability exists where, if an application uses a user-controlled column as ...

CVE-2026-71267

CVE-2026-71267 affects microtar. The mtar_write_file_header() and mtar_write_dir_header() functions copy a caller-supplied entry name into a 100-byte name field of a stack-allocated mtar_header_t using strcpy without validating length, allowing a stack buffer overflow if the filename is longer th...

CVE-2026-71266

The CVE-2026-71266 entry concerns tinyobjloader-c. In tinyobj_parse_and_index_mtl_file() (tinyobj_loader_c.h), a line from a .mtl file is copied into a fixed 4096-byte stack buffer linebuf using memcpy(linebuf, p, p_len) with only an assert(p_len

EUVD-2026-53352

microtar's mtarwritefileheader and mtarwritedirheader functions src/microtar.c copy a caller-supplied entry name into the 100-byte name field of a stack-allocated mtarheadert via strcpyh.name, name, with no check that strlenname is less than 100 before the copy. Any application that calls these...