Blackash-CVE-2025-0282

Blackash-CVE-2025-0282 Description A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.5, Ivanti Policy Secure before version 22.7R1.2, and Ivanti Neurons for ZTA gateways before version 22.7R2.3 allows a remote unauthenticated attacker to achieve remote code execution...

CVE-2026-17544-PoC

CVE-2026-17544 — PHP bcmath bccomp Out-of-Bounds Write Stack Smashing CVSS 9.8 Critical · CWE-787 · GHSA-x692-q9x7-8c3f Summary bcstr2num in ext/bcmath/libbcmath/src/str2num.c vendored libbcmath, PHP 8.4+ contains an off-by-N out-of-bounds write. When the user-supplied scale is smaller than the...

EvilSunCheck

EvilSun Vulnerability Checker CVE-2020-14871 This is a little Python script to detect the "EvilSun" vulnerability CVE-2020-14871 on Solaris systems. The vulnerability is a buffer overflow in the Pluggable Authentication Module PAM pamunixauth when handling keyboard-interactive authentication in...

Tivoli-Madness

Tivoli-Madness Advisory for: CVE-2020-28054: An Authorization Bypass vulnerability affecting JamoDat – TSMManager Collector v. = 6.5.0.21 A Stack Based Buffer Overflow affecting IBM Tivoli Storage Manager Command Line Administrative Interface Version 5, Release 2, Level 0.1. Unfortunately, after ...

test_iconv

Testing CVE-2024-2961 V1 - Under Analysis This repository contains a C program to test for CVE-2024-2961, which involves a buffer overflow vulnerability in the iconv function of the GNU C Library glibc. Due to the structure of PHP’s heap, this overflow can be exploited to modify part of a free li...

CVE-2004-1561-Icecast-Header-Overwrite-buffer-overflow-RCE-2.0.1-Win32-

CVE-2004-1561-Icecast-Header-Overwrite-buffer-overflow-RCE-2.0.1-Win32- Usage Reverse shell listener with Ncat root@kitploit: root@Kali:/TryHackme/Ice nc -nlvp 443 listening on any 443 ... connect to 192.168.92.128 from UNKNOWN 192.168.92.133 49211 Microsoft Windows Version 6.1.7601 Copyright c...

CVE-2019-9766

CVE-2019-9766 Exploiting the buffer overflow vulnerability in Free MP3 CD Ripper version 2.6, by constructing a specially crafted MP3 file, when the attacker uses the player to play the audio file, the audio file bait exploits the buffer overflow vulnerability to execute arbitrary code...

Important: Red Hat Security Advisory: freerdp security update

An update for freerdp is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerabili...

FreeRDP: FreeRDP: Heap-buffer-overflow allows arbitrary code execution via crafted RPC response

A flaw was found in FreeRDP. A remote attacker, specifically a malicious TS Gateway, can exploit a heap-buffer-overflow vulnerability by sending a specially crafted Remote Desktop Protocol RDP response. This occurs because the client incorrectly uses a smaller allochint value instead of the actua...

CVE-2022-30040

Tenda AX1803 v1.0.0.12890 Denial-of-service Vulnerability Overview Manufacturer's website infomation: https://www.tenda.com.cn/profile/contact.html Firmware download address: https://www.tenda.com.cn/download/default.html Vulnerability description The vulnerability lies in rootfs In / goform /...

CVE-2009-4049

CVE-2009-4049 Heap-based buffer overflow in aswRdr.sys aka the TDI RDR driver in avast! Home and Professional 4.8.1356.0 allows local users to cause a denial of service memory corruption or possibly gain privileges via crafted arguments to IOCTL 0x80002024. While part of the reason as to why I di...

CVE-2026-32707-PX4-Autopilot-tattu_can-Stack-Buffer-Overflow-DoS-

-orange CVE-2026-32707 - PX4-Autopilot tattucan Stack Buffer Overflow DoS root@kitploit: ╔════════════════════════════════════════════════════════════════════════════════════════════╗ ║ ║ ║ ██████╗ █████╗ ███╗ ██╗██╗ ██╗ █████╗ ███╗ ███╗███████╗██████╗ ║ ║ ██╔══██╗██╔══██╗████╗ ██║╚██╗...

CVE-2002-0740

CVE-2002-0740 SLRNPull Spool Directory Command Line Parameter Buffer Overflow Vulnerability Packetstorm publication at https://packetstormsecurity.com/files/25989/slrnpull.overflow.txt.html Securiteam publication at http://www.securiteam.com/unixfocus/5FP0R0K6UC.html Securityfocus publication at...

R7000_httpd_BOF_CVE-2020-15416

R7000httpdBOFCVE-2020-15416 I demenstrated you on how to set up a debugging environment using QEMU user mode for Netgear R7000 wifi router. Then I provide a walkthrough of an Exploit of Netgear WiFi Router httpd Buffer Overflow VulnerabilityCVE-2020-15416. It refers to...

CVE-2024-27815

CVE-2024-27815 XNU kernel buffer overflow. Introduced in xnu-10002.1.13, fixed in xnu-10063.121.3. Writeup: https://jprx.io/cve-2024-27815 root@kitploit: gcc TURPENTINE.c -o TURPENTINE ./TURPENTINE Hash root@kitploit: $ sha256sum TURPENTINE.c...

CVE-2026-33147

CVE-2026-33147 CVE-2026-33147Stack-based Buffer Overflow in gmtremotedatasetid Summary A stack-based buffer overflow vulnerability was identified in the gmtremotedatasetid function within src/gmtremote.c. This issue occurs when a specially crafted long string is passed as a dataset identifier e.g...

CVE-2022-32548-RCE-POC

CVE-2022-32548-RCE-POC DrayTek unauthenticated remote code execution vulnerability CVE-2022-32548 in /cgi-bin/wlogin.cgi via username field Technical details The web management interface of the vulnerable DrayTek devices is affected by a buffer overflow on the login page at /cgi-bin/wlogin.cgi. A...

CVE-2024-21762_FortiNet_PoC

CVE-2024-21762FortiNetPoC Proof-of-concept scanner targeting CVE-2024-21762 in FortiOS SSL VPN’s /remote/hostcheckvalidate endpoint with reverse shell payload delivery. Here’s a GitHub-style writeup for your project, including a clean and concise summary, a usage guide, and context on how it fits...

CVE-2024-4323

🇮🇱 BringThemHome NeverAgainIsNow 🇮🇱 Exigimos el regreso seguro de todos los ciudadanos que han sido tomados como rehenes por el grupo terrorista Hamás. No descansaremos hasta que cada rehén sea liberado y regrese a casa sano y salvo. Puedes ayudar a traerlos de...

CVE-2025-0282-Ivanti-exploit

CVE-2025-0282-Ivanti-exploit CVE-2025-0282 is a critical vulnerability found in Ivanti Connect Secure, allowing Remote Command Execution RCE through a buffer overflow exploit. This vulnerability enables attackers to upload malicious files e.g., web shells and execute commands on the target system...