CVE-2026-6643

CVE-2026-6643 — ASUSTOR ADM 5.1.2 RCE Format String CWE-134 + Stack Buffer Overflow CWE-121 in vpnupload.cgi Vulnerability Summary Field| Value ---|--- Product| ASUSTOR ADM ASUSTOR Data Master Affected Version| ADM 5.1.2.REO1 X64G3, 2026-02-25 Component| /portal/apis/settings/vpnupload.cgi —...

CVE-2026-42945

CVE-2026-42945 Herramienta de Detección de Seguridad Esta es una herramienta de detección estática de CVE-2026-42945 orientada a la defensa y auditoría interna, utilizada para verificar si las configuraciones relacionadas con ngxhttprewritemodule de NGINX contienen combinaciones de reescritura de...

CVE-2025-34096

🐞 CVE-2025-34096: Easy File Sharing Web Server 7.2 - Desbordamiento de Búfer Basado en Pila SEH Desbordamiento de búfer basado en SEH en Easy File Sharing Web Server 7.2, accesible a través del endpoint de recuperación de contraseña. 📑 Tabla de Contenidos Por qué existe este repositorio Por qué...

CVE-2025-5548

🐞 CVE-2025-5548: Desbordamiento de búfer de FreeFloat FTP Server 1.0 Investigación profesional y desarrollo de exploits para un desbordamiento de búfer clásico basado en pila en FreeFloat FTP Server 1.0. Este laboratorio demuestra la transición desde la ingeniería inversa binaria hasta un RCE...

RLSA-2026:76755 Important: freerdp security update

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox. Security Fixes: FreeRDP: FreeRDP: Denial of Service via crafted Surface Bits command...

CVE-2026-32746

CVE-2026-32746 - telnetd LINEMODE SLC Buffer Overflow Pre-authentication remote code execution via buffer overflow in GNU InetUtils telnetd's LINEMODE SLC Set Local Characters handler. CVSS 3.1: 9.8 Critical | CWE: CWE-120, CWE-787 Overview The addslc function in telnetd/slc.c appends 3 bytes per...

CTT-Enhanced-PX4-Autopilot-Exploit-CVE-2026-32743

CTT-Enhanced-PX4-Autopilot-Exploit-CVE-2026-32743 CVE-2026-32743 — PX4 Autopilot Stack Buffer Overflow CTT-Enhanced: 33-Layer Temporal Cascade Drone DoS .The original exploit crashes the MAVLink task via a 60-byte overflow. The CTT version distributes the overflow across 33 temporal layers, each...

CVE-2025-5844

CVE-2025-5548: Análisis y PoC 📝Resumen Este repositorio proporciona un análisis técnico completo y una Prueba de Concepto PoC funcional para CVE-2025-5548 : una vulnerabilidad de Desbordamiento de Búfer en la Pila que afecta a FreeFloat FTP Server v1.0. La investigación cubre todo el ciclo de vid...

cve-2026-0013-exploit

This repository does not have a README...

CVE-2019-25485

🐞 CVE-2019-25485: R 3.4.4 - Desbordamiento de Búfer Basado en Pila x86 y x64 Desbordamiento de búfer basado en pila en R 3.4.4. Explotación completa en x86, pero solo control de RIP con análisis de gadgets en x64 debido a restricciones del programa. La misma vulnerabilidad en dos arquitecturas, l...

CVE-2025-5548

🐞CVE-2025-5548 Desbordamiento de búfer en FreeFloat FTP Server 1.0 🎯 Explotación de Desbordamiento de Búfer en la Pila Este repositorio contiene la documentación y el desarrollo práctico de un proyecto de ciberseguridad centrado en la ingeniería inversa y la explotación de vulnerabilidades a nive...

Binary-Exploitation-and-Kernel-Escalation

Binary-Exploitation-and-Kernel-Escalation Secured root-level access by identifying and exploiting misconfigurations and outdated software. Buffer overflow vulnerability in an outdated version of modssl CVE-2002-0082. Privilege escalation was subsequently achieved by exploiting a race condition in...

CVE-2026-41089-PoC

CVE-2026-41089 — LongLogon crasher PoC Pre-authentication stack buffer overflow in the Netlogon service of Windows Server 2025. A single CLDAP packet UDP/389 from any host on the wire is enough: lsass.exe dies with STATUSSTACKBUFFEROVERRUN 0xc0000409 and the domain controller reboots. Component:...

CVE-2026-41089

CVE-2026-41089 ██████╗██╗ ██╗███████╗ ██╗ ██╗ ██╗ ██████╗ ██████╗ ██╔════╝██║ ██║██╔════╝ ██║ ██║███║██╔═████╗██╔═████╗ ██║ ██║ ██║█████╗ ███████║╚██║██║██╔██║██║██╔██║ ██║ ╚██╗ ██╔╝██╔══╝ ██╔══██║ ██║████╔╝██║████╔╝██║ ╚██████╗ ╚████╔╝ ███████╗ ██║ ██║ ██║╚██████╔╝╚██████╔╝ ╚═════╝ ╚═══╝ ╚══════...

CVE-2026-14669

CVE-2026-14669 - PostgreSQL tochar Timezone Abbreviation Heap Buffer Overflow PostgreSQL tochar function has a heap buffer overflow vulnerability when handling timezone formatting. By setting an overly long POSIX timezone abbreviation, an attacker can trigger an out-of-bounds write to a fixed...

nginx-rift-check

nginx-rift-check Finds configurations vulnerable to CVE-2026-42945 , the heap buffer overflow in nginx's ngxhttprewritemodule. Running an affected nginx version 0.6.27 through 1.30.0 is not enough to be exploitable. The configuration has to contain a specific pair of directives, and that pair is...

Apache-Lua-Buffer-Overflow-Exploit-CVE-2021-44790

🔥 CVE-2021-44790 - Apache modlua Buffer Overflow Exploitation 📋 Overview Apache modlua Buffer Overflow Exploitation is an advanced, enterprise-grade exploitation platform for CVE-2021-44790 - a critical buffer overflow vulnerability in the Apache HTTP Server 2.4.x modlua module. This framework...

CVE-2026-22013-Hardware-Wallet-USB-Descriptor-Buffer-Overflow

CVE-2026-22013 – Hardware Wallet USB Descriptor Buffer Overflow Program Code C firmware sim // hwwalletusb.c - USB descriptor parsing with fixed buffer include void handleusbsetupchar data, int len char descriptor32; if len 0 && data0 == 0x06 // GETDESCRIPTOR // Copy descriptor payload without...

openbsd_ov1

OpenBSD TCP/IP overflow Tested with latest OpenBSD 7.2 Details: int ipdooptionsstruct mbuf m, struct ifnet ifp ... for ; cnt 0; cnt -= optlen, cp += optlen opt = cpIPOPTOPTVAL; if opt == IPOPTEOL break; if opt == IPOPTNOP optlen = 1; else if cnt cnt code = &cpIPOPTOLEN - uchar ip; goto bad; switc...

netbsd_hfs

NetBSD hfs local overflow Bug details: sizet hfslibreadanodeoffsetsvoid inbytes, uint16t outoffsetarray void ptr; if inbytes == NULL || outoffsetarray == NULL return 0; ptr = inbytes; / The offset for record 0 which is the very last offset in the node is always equal to 14, the size of the node...