19865 matches found
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: librabbitmq (UTSA-2023-002168)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002168 advisory. An issue was discovered in the C AMQP client library aka rabbitmq-c through 0.13.0 for RabbitMQ. Credentials can only be entered on the command line e.g., for...
CVE-2026-95818: Stack-based Buffer Overflow
A stack-based buffer overflow in the dynamic loader ld.so of the GNU C Library glibc versions 2.14 through 2.44 allows a local attacker to crash or corrupt the memory of setuid/setgid ATSECURE programs. When such a program's DTRPATH or DTRUNPATH begins with $ORIGIN and is followed by NUL or '/' t...
CVE-2026-88345
An out-of-bounds read vulnerability exists in the schema lexer of flatcc 4c3b999e. When an exact-length FlatBuffers schema ends with an unterminated quotation mark, the C-string scanning logic in lex dereferences the input pointer after it has reached the end of the buffer. A specially crafted...
ROS-20260922-73-0051
The vulnerability of the opmap2430probe function in the drivers/usb/musb/omap2430.c driver for Linux USB device drivers is related to the dereferencing of a pointer with an expired lifetime. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...
external_expat_AOSP10_r33_CVE-2022-25236
Expat, Release 2.2.6 This is Expat, a C library for parsing XML, started by James Clark in 1997. Expat is a stream-oriented XML parser. This means that you register handlers with the parser before starting the parse. These handlers are called when the parser discovers the associated structures in...
impostor
Impostor SMB1 server for intercepting NTLMv2 Hashes, written in C. The goal of the project is to implement an SMB1 server as a state machine that correctly accepts and responds to client requests in order to deceive it, leading it to complete an NTLM authentication and thus reveal its own NTLMv2...
Enigma-
Enigma C++ reimplementation of Ghidra's analytical core SoftwareModeling + Utility, stripped of Java/JVM dependencies. Built for AI integration, performance, and embeddability. Part of the Enigma Engine project. Enigma Engine A C++ reimplementation of Ghidra's analytical core — no JVM, no Java,...
iconvfix
iconvfix Bash script to patch for CVE-2024-2961 Currently works on Centos7. No warranty, do not use on production systems, this is just an internal helper : Usage tsh ssh username@target sudo 'bash -s' iconvfix.sh...
CVE-2017-8759
Kit de explotación para CVE-2017-8759 No seas un imbécil Herramienta simple escrita en C para manejar la vulnerabilidad RCE en .NET Framework 2.0, 3.5, 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2 y 4.7. también conocida como "Vulnerabilidad de ejecución remota de código en .NET Framework." Ayuda root@kitploi...
CVE-2026-11105-Stack-Buffer-Overflow-in-Custom-Base64-Decoder
CVE-2026-11105 – Stack Buffer Overflow in Custom Base64 Decoder Program Code C root@kitploit: // base64vuln.c - Vulnerable Base64 decoder include include include int base64decodeconst char in, sizet inlen, char out, sizet outlen static const char table =...
cve-2021-42013
CVE-2021-42013 Implementación en C del infame exploit de Apache 2.4.50 Compilación $ gcc cve-2021-42013.c -lcurl -o cve-2021-42013 Uso $ ./cve-2021-42013 Ejemplo...
vim: Vim: Arbitrary command execution via crafted tags file in C omni-completion
A command injection vulnerability in Vim's C omni-completion script allows an attacker to execute arbitrary commands if a user is tricked into opening a maliciously crafted tags file and manually invoking the autocomplete feature...
Vulnerability of the avc444_ensure_buffer() function in the libfreerdp/codec/h264.c file of the RDP client FreeRDP, allowing a intruder to execute arbitrary code
The vulnerability of the avc444ensurebuffer function in the libfreerdp/codec/h264.c file of the RDP client FreeRDP is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
Oracle Linux 9 : curl (ELSA-2026-69126)
The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-69126 advisory. - add sasl service name to connection reuse checks CVE-2026-8458 Tenable has extracted the preceding description block directly from the Oracle Linux...
SUSE SLED15 / SLES15 Security Update : c-ares (SUSE-SU-2026:4021-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4021-1 advisory. - CVE-2024-25629: out of bounds read in aresreadline bsc1220279. - CVE-2025-31498: use-after-free in readanswe...
OESA-2026-3960 xmlrpc-c security update
XML-RPC is a quick-and-easy way to make procedure calls over the Internet. It converts the procedure call into an XML document, sends it to a remote server using HTTP, and gets back the response as XML. Security Fixes: libexpat before 2.8.3 has an out-of-bounds read and resultant infinite loop...
OESA-2026-3958 xmlrpc-c security update
XML-RPC is a quick-and-easy way to make procedure calls over the Internet. It converts the procedure call into an XML document, sends it to a remote server using HTTP, and gets back the response as XML. Security Fixes: libexpat before 2.8.3 has an out-of-bounds read and resultant infinite loop...
OESA-2026-3959 xmlrpc-c security update
XML-RPC is a quick-and-easy way to make procedure calls over the Internet. It converts the procedure call into an XML document, sends it to a remote server using HTTP, and gets back the response as XML. Security Fixes: libexpat before 2.8.3 has an out-of-bounds read and resultant infinite loop...
OESA-2026-3957 xmlrpc-c security update
XML-RPC is a quick-and-easy way to make procedure calls over the Internet. It converts the procedure call into an XML document, sends it to a remote server using HTTP, and gets back the response as XML. Security Fixes: libexpat before 2.8.3 has an out-of-bounds read and resultant infinite loop...
