https://poc.intelseclab.com/tags/heap-overflow/Latest proof-of-concept entries.Hugoen-usSun, 16 Aug 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-08-16_cve-2026-42533-nginx-pcre-heap-overflow-rce/Sun, 16 Aug 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-08-16_cve-2026-42533-nginx-pcre-heap-overflow-rce/Critical severity (CVSS 9.8) — web · CVE-2026-42533. Status: Patched. Affects: nginx 1.30.1 (and likely earlier versions). Tags: nginx, pcre, heap-overflow, rce, preauth, info-leak, capture-variable, map-directive, aslr-bypass, CVE-2026-42533.webCriticalnginxpcreheap-overflowrcepreauthinfo-leakcapture-variablemap-directiveaslr-bypassCVE-2026-42533https://poc.intelseclab.com/pocs/network/2026-08-16_cve-2026-8452-citrix-netscaler-saml-preauth-rce/Sun, 16 Aug 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/network/2026-08-16_cve-2026-8452-citrix-netscaler-saml-preauth-rce/Critical severity (CVSS 9.8) — network · CVE-2026-8452. Status: Patched. Affects: Citrix NetScaler ADC and NetScaler Gateway. Tags: citrix, netscaler, adc, gateway, saml, heap-overflow, preauth, rce, shellcode, webshell, freebsd, xml-signature, c14n, CVE-2026-8452.networkCriticalcitrixnetscaleradcgatewaysamlheap-overflowpreauthrceshellcodewebshellfreebsdxml-signaturec14nCVE-2026-8452https://poc.intelseclab.com/pocs/network/2026-07-27_cve-2026-54992-windows-msmq-heap-overflow/Mon, 27 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/network/2026-07-27_cve-2026-54992-windows-msmq-heap-overflow/High severity (CVSS 8.4) — network · CVE-2026-54992. Status: PoC (crash/DoS confirmed, no RCE demonstrated). Affects: Windows Message Queuing (MSMQ) — Queue Manager (mqqm.dll, hosted in mqsvc.exe), reached via the MS-MQRR (RemoteRead) RPC interface. Tags: windows, msmq, message-queuing, heap-overflow, integer-overflow, rpc, dos, crash.networkHighwindowsmsmqmessage-queuingheap-overflowinteger-overflowrpcdoscrashhttps://poc.intelseclab.com/pocs/binary/2026-07-05_cve-2026-20698-xnu-pf-route-heap-overflow/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/binary/2026-07-05_cve-2026-20698-xnu-pf-route-heap-overflow/High severity — binary · CVE-2026-20698. Status: PoC. Affects: XNU kernel routing socket subsystem (PF_ROUTE, bsd/net/rtsock.c / bsd/net/radix.c). Tags: xnu, kernel, ios, macos, pf_route, routing-socket, heap-overflow, radix-tree, kernel-panic, bounds-safety.binaryHighxnukerneliosmacospf_routerouting-socketheap-overflowradix-treekernel-panicbounds-safetyhttps://poc.intelseclab.com/pocs/network/2026-07-05_cve-2026-38698-wyze-cam-tutk-heap-overflow/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/network/2026-07-05_cve-2026-38698-wyze-cam-tutk-heap-overflow/Critical severity — network · CVE-2026-38698. Status: PoC. Affects: TUTK SDK (as used in Wyze Cam Pan v3 and other TUTK-based IoT cameras). Tags: tutk-sdk, iot, camera, heap-overflow, av-server, wyze, authenticated, p2p.networkCriticaltutk-sdkiotcameraheap-overflowav-serverwyzeauthenticatedp2phttps://poc.intelseclab.com/pocs/binary/2026-07-05_cve-2026-27831-rldns-heap-oob-read-dos/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/binary/2026-07-05_cve-2026-27831-rldns-heap-oob-read-dos/Medium severity — binary · CVE-2026-27831. Status: PoC. Affects: rldns 1.3 (open-source DNS server). Tags: dns, heap-overflow, out-of-bounds-read, denial-of-service, rldns, memory-corruption, x86_64.binaryMediumdnsheap-overflowout-of-bounds-readdenial-of-servicerldnsmemory-corruptionx86_64https://poc.intelseclab.com/pocs/binary/2026-07-05_cve-2026-2005-postgresql-pgcrypto-heapoverflow/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/binary/2026-07-05_cve-2026-2005-postgresql-pgcrypto-heapoverflow/Critical severity — binary · CVE-2026-2005. Status: PoC. Affects: PostgreSQL pgcrypto extension (PGP session-key parsing). Tags: postgresql, pgcrypto, heap-overflow, aslr-bypass, privilege-escalation, pgp, memory-corruption.binaryCriticalpostgresqlpgcryptoheap-overflowaslr-bypassprivilege-escalationpgpmemory-corruptionhttps://poc.intelseclab.com/pocs/misc/2026-07-05_cve-2026-7482-poc/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/misc/2026-07-05_cve-2026-7482-poc/Medium severity — misc · CVE-2026-7482. Status: PoC. Affects: Ollama (GGUF model loader / quantization pipeline). Tags: ollama, gguf, heap-overflow, out-of-bounds-read, quantization, llm-serving, docker.miscMediumollamaggufheap-overflowout-of-bounds-readquantizationllm-servingdockerhttps://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-0211-nginx-quic-heap-overflow/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-0211-nginx-quic-heap-overflow/High severity — web · CVE-2026-0211 (repository explicitly labels this as a hypothetical/simulated CVE for coursework, not a confirmed vendor-assigned vulnerability). Status: PoC. Affects: A custom, deliberately vulnerabilized fork of Nginx 1.25.3's QUIC transport module (ngx_event_quic_transport.c), run inside a purpose-built Docker lab — not the stock upstream Nginx release. Tags: nginx, quic, http-3, heap-overflow, dos, fuzzing, dcid, academic-lab, docker.webHighnginxquichttp-3heap-overflowdosfuzzingdcidacademic-labdockerhttps://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-9256-nginx-poolslip-rift-rce-chain/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-9256-nginx-poolslip-rift-rce-chain/Critical severity — web · CVE-2026-9256 ("PoolSlip"), chained with CVE-2026-42945 ("rift"). Status: PoC. Affects: nginx (rewrite engine). Tags: nginx, heap-overflow, heap-over-read, aslr-bypass, rce, rewrite-engine, request-smuggling-adjacent, chained-exploit.webCriticalnginxheap-overflowheap-over-readaslr-bypassrcerewrite-enginerequest-smuggling-adjacentchained-exploithttps://poc.intelseclab.com/pocs/binary/2026-07-05_cve-2026-32710-mariadb-json-schema-udf-rce/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/binary/2026-07-05_cve-2026-32710-mariadb-json-schema-udf-rce/Critical severity — binary · CVE-2026-32710. Status: PoC. Affects: MariaDB (JSON_SCHEMA_VALID() SQL function). Tags: mariadb, mysql, heap-overflow, privilege-escalation, udf, raptor-udf, sql, json, docker-lab.binaryCriticalmariadbmysqlheap-overflowprivilege-escalationudfraptor-udfsqljsondocker-labhttps://poc.intelseclab.com/pocs/binary/2026-07-05_cve-2026-0006-openapv-heap-overflow/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/binary/2026-07-05_cve-2026-0006-openapv-heap-overflow/Critical severity (CVSS 9.8) — binary · CVE-2026-0006. Status: PoC. Affects: libopenapv (Samsung APV — Advanced Professional Video — codec), integrated into Android 16 as a Mainline module (mediaswcodec / C2SoftApvDec). Tags: android, libopenapv, apv-codec, heap-overflow, zero-click, media-framework, mediaswcodec, mainline-module.binaryCriticalandroidlibopenapvapv-codecheap-overflowzero-clickmedia-frameworkmediaswcodecmainline-modulehttps://poc.intelseclab.com/pocs/binary/2026-07-05_cve-2026-5201-gdk-pixbuf-jpeg-heap-overflow/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/binary/2026-07-05_cve-2026-5201-gdk-pixbuf-jpeg-heap-overflow/High severity (CVSS 7.5) — binary · CVE-2026-5201. Status: PoC. Affects: gdk-pixbuf (GNOME image loading library), JPEG loader (io-jpeg.c). Tags: gdk-pixbuf, jpeg, libjpeg, heap-overflow, gnome, gtk, linux-desktop, cwe-122, vtable-hijack.binaryHighgdk-pixbufjpeglibjpegheap-overflowgnomegtklinux-desktopcwe-122vtable-hijackhttps://poc.intelseclab.com/pocs/binary/2026-07-03_vlc-vp9-reschange-crash/Fri, 03 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/binary/2026-07-03_vlc-vp9-reschange-crash/Medium severity — binary · None assigned as of 2026-07-03. Status: Incomplete PoC. Affects: VLC media player, bundled FFmpeg VP9 decoder (plugins/codec/libavcodec_plugin.dll). Tags: vlc, ffmpeg, vp9, ivf, heap-overflow, media-parsing, crash, windows, decoder.binaryMediumvlcffmpegvp9ivfheap-overflowmedia-parsingcrashwindowsdecoderhttps://poc.intelseclab.com/pocs/binary/2026-07-03_pillow-imagecms-output-mode-oob-write/Fri, 03 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/binary/2026-07-03_pillow-imagecms-output-mode-oob-write/High severity — binary · None assigned as of 2026-07-03. Status: PoC. Affects: Pillow (Python Imaging Library fork), PIL.ImageCms module. Tags: pillow, imagecms, littlecms, heap-overflow, oob-write, python, image-processing, memory-corruption.binaryHighpillowimagecmslittlecmsheap-overflowoob-writepythonimage-processingmemory-corruptionhttps://poc.intelseclab.com/pocs/network/2026-07-03_cve-2026-55200-libssh2-packet-length-rce/Fri, 03 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/network/2026-07-03_cve-2026-55200-libssh2-packet-length-rce/Critical severity — network · CVE-2026-55200. Status: Weaponized. Affects: libssh2, ssh2_transport_read() in src/transport.c. Tags: libssh2, ssh, integer-overflow, heap-overflow, packet-length, transport, rce, memory-corruption, cve-2026-55200.networkCriticallibssh2sshinteger-overflowheap-overflowpacket-lengthtransportrcememory-corruptioncve-2026-55200https://poc.intelseclab.com/pocs/network/2026-07-03_libssh2-publickey-list-parser-oob/Fri, 03 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/network/2026-07-03_libssh2-publickey-list-parser-oob/Critical severity — network · None assigned as of 2026-07-03. Status: Weaponized. Affects: libssh2, publickey subsystem list parser (src/publickey.c). Tags: libssh2, ssh, publickey-subsystem, heap-overflow, use-after-free, integer-overflow, windows, rce, memory-corruption.networkCriticallibssh2sshpublickey-subsystemheap-overflowuse-after-freeinteger-overflowwindowsrcememory-corruptionhttps://poc.intelseclab.com/pocs/binary/2026-07-03_ffmpeg-rasc-dlta-heap-oob-write/Fri, 03 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/binary/2026-07-03_ffmpeg-rasc-dlta-heap-oob-write/Critical severity — binary · None assigned as of 2026-07-03. Status: PoC. Affects: FFmpeg, libavcodec RASC decoder (AV_CODEC_ID_RASC). Tags: ffmpeg, libavcodec, heap-overflow, rasc, oob-write, media-parsing, codec, memory-corruption.binaryCriticalffmpeglibavcodecheap-overflowrascoob-writemedia-parsingcodecmemory-corruptionhttps://poc.intelseclab.com/pocs/network/2026-07-01_cve-2026-47729-squidbleed-squid-ftp-oob-read/Wed, 01 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/network/2026-07-01_cve-2026-47729-squidbleed-squid-ftp-oob-read/Medium severity — network · CVE-2026-47729. Status: PoC. Affects: Squid Proxy — FTP gateway / directory-listing parser. Tags: memory-disclosure, information-disclosure, Squid, proxy, FTP, heap-overflow, oob-read, credential-theft, legacy.networkMediummemory-disclosureinformation-disclosureSquidproxyFTPheap-overflowoob-readcredential-theftlegacyhttps://poc.intelseclab.com/pocs/network/2026-05-16_vmware-vcenter-dcerpc-heap-overflow-rce/Sat, 16 May 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/network/2026-05-16_vmware-vcenter-dcerpc-heap-overflow-rce/Critical severity (CVSS 9.8) — network · CVE-2024-37079. Status: Weaponized. Affects: VMware vCenter Server. Tags: RCE, heap-overflow, DCE/RPC, vCenter, unauthenticated, KEV.networkCriticalRCEheap-overflowDCE/RPCvCenterunauthenticatedKEVhttps://poc.intelseclab.com/pocs/web/2026-05-14_nginx-rift-cve-2026-42945/Thu, 14 May 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-05-14_nginx-rift-cve-2026-42945/Critical severity (CVSS 9.8) — web · CVE-2026-42945. Status: Weaponized. Affects: NGINX Open Source / NGINX Plus. Tags: RCE, unauthenticated, nginx, heap-overflow, buffer-overflow, rewrite.webCriticalRCEunauthenticatednginxheap-overflowbuffer-overflowrewrite