PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

CVE-2019-12527 | Cảnh báo khai thác mã từ xa trên Squid proxy

blog.viettelcybersecurity.com | vulnerability | CVE-2019-12527 | #rce | #proxy | #heap-overflow | #cve-2019-12527 | #squid | #patch-now
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

CVE-2019-12527 is a heap buffer overflow in Squid proxy triggered by an oversized Authorization header, allowing remote code execution or denial of service; a PoC exists, so upgrading is urgent.
CVE
CVE-2019-12527
Published
Collected

Related coverage

vulnerability · bugpwn.com
open62541: Integer Overflow → Heap Overflow → RCE.
Original research: how a 16 bit size field overflow in open62541's custom DataType machinery lets a malicious OPC UA server corrupt a connecting client's heap, up to remote code execution. CVE-2026-116014, CVSS 9.2. Root cause, networked PoC, and the official fix. By BUG|PWN.
research · calif.io
Squidbleed (CVE-2026-47729)
# Squidbleed (CVE-2026-47729) Heartbleed's ancient cousin, hiding in Squid since 1997. Lam Jun Rong June 18, 2026 Covered by The Register and The Hacker News madbugs Contents 1. The Target: Squid...
vulnerability · blog.viettelcybersecurity.com
[CVE-2022-42475] Hàng ngàn thiết bị sử dụng FortiOS và FortiProxy chưa cập nhật bản vá cho các lỗ hổng bảo mật nghiêm trọng - Phần II
Part II details CVE-2022-42475, a heap buffer overflow in Fortinet's SSL-VPN (sslvpnd) from integer overflow in Content-Length handling, allowing unauthenticated RCE on FortiOS/FortiProxy.
vulnerability · theori.io
Exploiting Windows Kernel Wild Copy With User Fault Handling (CVE-2023–28218)
How Theori found and reliably exploited CVE-2023-28218, a heap overflow in Windows' afd.sys Fast I/O path, turning wild copy with user fault handling into a kernel exploit, detailed at Hexacon 2023.
Critical · vulnerability · depthfirst.com
ALPC You Later: CVE-2025-64721 Sandbox Escape Smashing The Heap Over IPC
Analysis of CVE-2025-64721, a Sandboxie sandbox escape: a missing bounds check in raw ALPC IPC allowed heap leakage and a 4GB heap smash, leading to SYSTEM-level code execution on Windows.
vulnerability · bishopfox.com
Building an Exploit for FortiGate Vulnerability CVE-2023-27997
Bishop Fox walks through building a proof-of-concept exploit for CVE-2023-27997, a pre-auth heap buffer overflow in Fortinet's SSL VPN, covering the flawed length check and jemalloc heap grooming.
Back