RTSPServer-Code-Execution-Vulnerability

Live Networks LIVE555 流媒体 RTSPServer lookForHeader 代码执行漏洞 CVE-2018-4013 概述 LIVE555 RTSP 服务器库的 HTTP 数据包解析功能中存在一个可被利用的代码执行漏洞。特制数据包可导致基于栈的缓冲区溢出，从而实现代码执行。攻击者可发送数据包触发此漏洞。 详细信息 LIVE555 媒体库是一套轻量级多媒体流库，支持 RTSP/RTCP/RTSP/SIP，提供服务器和客户端的代码支持。被 VLC、MPlayer...

iOS-Kernel-Crash

CVE-2018-4407 内存破坏 该漏洞是 XNU 操作系统内核中网络代码的一个堆缓冲区溢出。XNU 同时被 iOS 和 macOS 使用，因此 iPhone、iPad 和 MacBook 均受影响。我的漏洞利用 PoC 仅用垃圾数据覆盖堆，从而立即导致内核崩溃和设备重启。...

CVE-2004-2271-MiniShare-1.4.1-BOF

CVE-2004-2271 - MiniShare 1.4.1 - 缓冲区溢出 参考资料 https://nvd.nist.gov/vuln/detail/CVE-2004-2271 漏洞 MiniShare 1.4.1 未对其接收的 HTTP GET 请求进行边界检查。攻击者通过发送超长且畸形的 HTTP GET 请求，可触发缓冲区溢出，从而在系统上执行任意代码。 利用说明 EIP 被覆盖后，仅剩 210 字节的空间可用于 shellcode。 因此，此漏洞利用将恶意 shellcode 放入 GET 请求的 "Host: " 头中，并使用 egghunter shellcode...

CVE-2003-0264-SLmail-5.5

CVE-2003-0264 - Seattle Lab Mail 5.5 POP3 缓冲区溢出 参考 https://vulners.com/cve/CVE-2003-0264 漏洞 SLMail 在提交 POP3 密码时没有进行边界检查。 因此，你可以通过向 SLMail 服务器提交一个超长的畸形 POP3 PASS 来执行任意代码。...

CVE-2026-81993

Acrobat Reader is affected by a Heap-based Buffer Overflow (CWE-122) that can lead to disclosure of sensitive memory . Exploitation requires user interaction : a victim must open a malicious file. The CVSS 3.1 score is 5.5 (Medium) , with high confidentiality impact but no integrity or availabili...

EUVD-2026-74108

Acrobat Reader is affected by a Heap-based Buffer Overflow vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious...

CVE-2026-81993 Acrobat Reader | Heap-based Buffer Overflow (CWE-122)

Acrobat Reader is affected by a Heap-based Buffer Overflow vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious...

CVE-2026-81992

Acrobat Reader is affected by a Heap-based Buffer Overflow (CWE-122) that can lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction , specifically opening a malicious file. The CVSS v3.1 score is 7.8 (HIGH) with a local attack vector, low comp...

EUVD-2026-74199

Acrobat Reader is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-81992 Acrobat Reader | Heap-based Buffer Overflow (CWE-122)

Acrobat Reader is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CiscoIOSSNMPToolkit

CiscoIOSSNMPToolkit Cisco iOS SNMP 溢出漏洞利用工具包 CVE-2017-6736 CVE-2018-0296？ 我最近将 CVE-2018-0296 作为子模块集成进来，它可以与这个原始漏洞利用结合使用， 可用于预先进行侦察，以了解设备中包含的内容。...

CVE-2026-82006

Photoshop Desktop is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2021-3156

CVE-2021-3156 概述 Heap-based buffer overflow in Sudo CVE-2021-3156 由于sudo转义\不当而造成的堆溢出漏洞，LPE 影响范围 从1.8.2到1.8.31p2的所有版本 从1.9.0到1.9.5p1的所有稳定版本 检测命令 sudoedit -s '' perl -e 'print "A" x 65536' 如果出现类似Segmentation fault core dumped即表明存在漏洞 相关文献...

redis-cve-2025-62507

Exploit Scripts — CVE-2025-62507 目录结构 root@kitploit: scripts/ ├── exploitx86.py x86-64 ROP exploit ├── exploitarm64.py ARM64 AArch64 ROP exploit └── gdbwithsymbols.sh GDB 调试辅助脚本 漏洞摘要 项目| 说明 ---|--- CVE| CVE-2025-62507 漏洞类型| 栈缓冲区溢出 Stack Buffer Overflow 受影响组件| Redis 8.2.0 xackdelCommand 函数 触发方式|...

Nginx-Rift

NGINX Rift RCE 概念验证，针对 CVE-2026-42945 ——这是 NGINX ngxhttprewritemodule 中一个于 2008 年引入的严重堆缓冲区溢出漏洞。该漏洞使得攻击者能够对使用 rewrite 和 set 指令的服务器进行未经认证的远程代码执行。 该漏洞与另外三个内存破坏问题（CVE-2026-42946、CVE-2026-40701、CVE-2026-42934）一同，由 depthfirst 的安全分析系统在单击一次接入 NGINX 源码后自动发现。...

EUVD-2026-74059

Photoshop Desktop is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-82006

Photoshop Desktop is affected by a Heap-based Buffer Overflow (CWE-122) that could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction —specifically, a victim must open a malicious file . The CVSS v3.1 base score is 7.8 (HIGH) with a local att...

CVE-2026-82006 Photoshop Desktop | Heap-based Buffer Overflow (CWE-122)

Photoshop Desktop is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

wongpress

缓冲区溢出与格式化字符串漏洞的真实案例：在 Ubuntu Server 中获取 RCE 相关 CVE CVE-2024-2961 : Glibc iconv 函数中的缓冲区溢出漏洞 CVE-2024-29510 : Ghostscript（PostScript 语言解释器）中的格式化字符串漏洞 1. 问题背景 soon 。 2. 攻击场景 soon 。 3. 环境搭建 项目结构 soon 。 4. 漏洞利用 soon 。 5. 参考资料 soon 。...

CVE-2026-85384

A stack-based buffer overflow vulnerability exists in the httpd component of RE210 AC750 due to improper bounds checking in the splitString function when processing an uploaded configuration file. An authenticated attacker on the local network can upload a crafted configuration file to trigger th...