Heap-Oob-Read — PoC Archivehttps://poc.intelseclab.com/tags/heap-oob-read/Latest proof-of-concept entries.Hugoen-usWed, 08 Jul 2026 00:00:00 +0000XRING — XQUIC QPACK Ring Buffer Resize Underflow (Remote Unauthenticated DoS)https://poc.intelseclab.com/pocs/network/2026-07-08_xring-xquic-qpack-ring-mem-resize-underflow/Wed, 08 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/network/2026-07-08_xring-xquic-qpack-ring-mem-resize-underflow/Critical severity — network. Status: Weaponized (public PoC, unpatched at publication). Affects: [alibaba/xquic](https://github.com/alibaba/xquic) — QUIC/HTTP-3 library, used by Tengine and reportedly across Alibaba's cloud/CDN infrastructure (Taobao, AliPay). Tags: quic, http3, qpack, xquic, alibaba, tengine, ring-buffer, integer-underflow, heap-oob-read, memcpy, remote, unauthenticated, dos, no-cve.networkCriticalquichttp3qpackxquicalibabatenginering-bufferinteger-underflowheap-oob-readmemcpyremoteunauthenticateddosno-cvePJSIP DNS Compression Pointer Heap Out-of-Bounds Read (CVE-2026-32945)https://poc.intelseclab.com/pocs/network/2026-07-05_cve-2026-32945-pjsip-dns-oob-read/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/network/2026-07-05_cve-2026-32945-pjsip-dns-oob-read/Medium severity — network · CVE-2026-32945. Status: PoC. Affects: pjproject (PJSIP library) — used by Asterisk, FreeSWITCH, and other SIP applications. Tags: pjsip, pjproject, dns, heap-oob-read, denial-of-service, asterisk, freeswitch, sip.networkMediumpjsippjprojectdnsheap-oob-readdenial-of-serviceasteriskfreeswitchsip