cve-2024-11477-writeup

Análisis de CVE-2024-11477 Este es un análisis de mi investigación sobre CVE-2024-11477. Ten en cuenta que esto puede contener errores y no será perfecto, ya que fue un análisis bastante rápido. ¡Házmelo saber si no estás de acuerdo con algo! Consulta el otro archivo Markdown para obtener...

cve-2019-11477-poc

cve-2019-11477-poc Prueba simple 1. Inicie dos máquinas virtuales una para un servidor SSL y la otra para un cliente SSL 2. Servidor Ejecute la aplicación del servidor cd apps ./server.sh 7000 3. Cliente Instale los paquetes requeridos sudo apt-get install libmnl-dev sudo apt-get install...

CVE-2026-11477

creationtimestamp| type| source ---|---|--- 2026-06-08 05:40:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnqxsjnyfd2r...

org.hswebframework.web:hsweb-system-authorization-oauth2 (>=4.0.8, <=5.0.1) potentially affected by CVE-2026-11477 via org.hswebframework.web:hsweb-authorization-oauth2 (>=4.0.8, <=5.0.1)

org.hswebframework.web:hsweb-authorization-oauth2 MAVEN version =4.0.8, =4.0.8, =5.0.1 Source cves: CVE-2026-11477 Source advisory: SNYK:JAVA-ORGHSWEBFRAMEWORKWEB-17232077...

CVE-2026-11477 hs-web hsweb-framework OAuth2 Client OAuth2Client.java OAuth2Client redirect

A vulnerability was detected in hs-web hsweb-framework up to 5.0.1. This affects the function OAuth2Client of the file hsweb-authorization/hsweb-authorization-oauth2/src/main/java/org/hswebframework/web/oauth2/server/OAuth2Client.java of the component OAuth2 Client. The manipulation results in op...

CVE-2025-11477

A security flaw has been discovered in SourceCodester Wedding Reservation Management System 1.0. This vulnerability affects unknown code of the file /global.php. The manipulation of the argument User results in sql injection. The attack may be launched remotely. The exploit has been released to t...

Ruckus Wireless ICX Switches Integer Overflow or Wraparound (CVE-2019-11477)

Three flaws were found in the Linux kernel's handling of TCP networking. The most severe vulnerability could allow a remote attacker to trigger a kernel panic in systems running the affected software and, as a result, impact the system's availability. The issues have been assigned multiple CVEs:...

libQt5Pdf5-5.15.19-1.1 on GA media (moderate)

libQt5Pdf5-5.15.19-1.1 on GA media Announcement ID: openSUSE-SU-2025:15531-1 Rating: moderate Cross-References: CVE-2024-10229 CVE-2024-10827 CVE-2024-11477 CVE-2024-12694 CVE-2024-55549 CVE-2025-0436 CVE-2025-0762 CVE-2025-0996 CVE-2025-0999 CVE-2025-1426 CVE-2025-1919 CVE-2025-2136 CVE-2025-242...

Linux Distros Unpatched Vulnerability : CVE-2019-11477

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Jonathan Looney discovered that the TCPSKBCBskb-tcpgsosegs value was subject to an integer overflow in the Linux kernel when handling TCP Selective...

qt6-webengine -- Multiple vulnerabilities

Qt qtwebengine-chromium repo reports: Backports for 11 security bugs in Chromium: CVE-2024-11477: 7-Zip Zstd decompression integer underflow CVE-2025-0762: Use after free in DevTools CVE-2025-0996: Inappropriate implementation in Browser UI CVE-2025-0998: Out of bounds memory access in V8...

Exploit for Integer Underflow (Wrap or Wraparound) in 7-Zip

CVE-2024-11477 Writeup This is a writeup of my research...

CVE-2024-11477

7-Zip Zstandard Decompression Integer Underflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of 7-Zip. Interaction with this library is required to exploit this vulnerability but attack vectors may vary dependi...

7-Zip < 24.07 RCE (ZDI-24-1532)

The version of 7-Zip installed on the remote host is prior to 24.07. It is, therefore, affected by a remote code execution vulnerability as referenced in the ZDI-24-1532 advisory. - This vulnerability allows remote attackers to execute arbitrary code on affected installations of 7-Zip. Interactio...

CVE-2024-11477

creationtimestamp| type| source ---|---|--- 2024-11-20 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1532/ 2024-11-22 16:40:16+00:00| seen| https://t.me/truesecator/6464 2024-11-23 09:01:40+00:00| exploited| https://t.me/kasperskyb2b/1513 2024-11-23 12:18:03+00:00| seen...

KLA77436 RCE vulnerability in 7-Zip

Remote code execution vulnerability was found in 7-Zip. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories CVE-2024-11477 ZDI-24-1532 Exploitation Public exploits exist for this vulnerability. Related products 7-Zip CVE list CVE-2024-11477 critical...

Siemens Industrial Products Integer Overflow or Wraparound (CVE-2019-11477)

Multiple industrial products are affected by a vulnerability in the kernel known as TCP SACK PANIC. The kernel used in some products is affected by an integer overflow when handling TCP Selective Acknowledgements. A remote attacker could use this to cause a denial of service. This plugin only wor...

Sprecher Automation SPRECON-E TCP SACK PANIC (CVE-2019-11477)

Jonathan Looney discovered that the TCPSKBCBskb-tcpgsosegs value was subject to an integer overflow in the Linux kernel when handling TCP Selective Acknowledgments SACKs. A remote attacker could use this to cause a denial of service. This has been fixed in stable kernel releases 4.4.182, 4.9.182,...

Security Bulletin: Multiple vulnerabilities in the Linux kernel affect IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products

Summary Vulnerabilities in the Linux Kernel affect IBM SAN Volume Controller, IBM Storwize V7000, V5000, V5100, V3700 and V3500, IBM Spectrum Virtualize Software, IBM Spectrum Virtualize for Public Cloud and IBM FlashSystem V9000 and 9100 family products. The applicable vulnerabilities are...

Mageia: Security Advisory (MGASA-2019-0197)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mageia: Security Advisory (MGASA-2019-0196)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...