LooneyPwner

LooneyPwner Exploit tool for CVE-2023-4911, targeting the 'Looney Tunables' glibc vulnerability in various Linux distributions. LooneyPwner is a proof-of-concept PoC exploit tool targeting the critical buffer overflow vulnerability, nicknamed "Looney Tunables," found in the GNU C Library glibc...

CVE-2023-4911

CVE-2023-4911 CVE-2023-4911-Looney-Tunables...

looney-tuneables

looney-tuneables CVE-2023-4911 Install pwntools: https://github.com/Gallopsled/pwntools root@kitploit: apt-get update apt-get install python3 python3-pip python3-dev git libssl-dev libffi-dev build-essential python3 -m pip install --upgrade pip python3 -m pip install --upgrade pwntools...

CVE-2023-4911

Este repositorio no tiene un README...

CVE-2023-4911

CVE-2023-4911 - Looney Tunables Esto es una prueba de concepto por ahora bastante rudimentaria para CVE-2023-4911. Hasta ahora solo he verificado que funciona en Ubuntu 22.10 kinetic. La versión actual del exploit contiene una cantidad considerable de offsets "mágicos". Si tienes sugerencias sobr...

Photon OS 5.0: Glibc PHSA-2026-5.0-90-0855

An update of the glibc package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-90-0855. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Exploit for Out-of-bounds Write in Netapp Bootstrap_Os

glibc 힙 버퍼 오버플로우 취약점CVE-2023-4911 | 항목 | 내용 | |---|---| | C...

ECHO-4911-1ADA-38AF

Bulletin has no description...

CVE-2026-4911

creationtimestamp| type| source ---|---|--- 2026-04-29 00:33:05+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mkltyvcr6l2c 2026-04-29 04:21:35+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116486078137152177...

glibc 2.38 Buffer Overflow

This is a local privilege escalation exploit for CVE-2023-4911, also known as "Looney Tunables", caused by a buffer overflow in the glibc dynamic loader's environment variable parsing logic. The vulnerability is triggered by crafting a maliciously long GLIBCTUNABLES string which corrupts internal...

glibc 2.38 - Buffer Overflow

Exploit Title: glibc 2.38 - Buffer Overflow Google Dork: N/A Date: 2025-10-08 Exploit Author: Beatriz Fresno Naumova Vendor Homepage: https://www.gnu.org/software/libc/ Software Link: https://ftp.gnu.org/gnu/libc/glibc-2.35.tar.gz Version: glibc 2.35 specifically 2.35-0ubuntu3.3 on Ubuntu 22.04.3...

MiracleLinux 9 : glibc-2.34-60.el9.7 (AXSA:2023-6486:05)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2023-6486:05 advisory. glibc: buffer overflow in ld.so leading to privilege escalation CVE-2023-4911 glibc: Stack read overflow in getaddrinfo in no-aaaa mode CVE-2023-452...

CVE-2009-4911

Unspecified vulnerability on Cisco Adaptive Security Appliances ASA 5580 series devices with software before 8.12 allows remote attackers to cause a denial of service device crash via vectors involving SSL VPN and PPPoE transactions, aka Bug ID CSCsm77958...

Oracle Linux 8 : glibc (ELSA-2025-20375)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-20375 advisory. - CVE-2025-4802: static setuid dlopen may search LDLIBRARYPATH RHEL-92685 - CVE-2025-0395: Fix a buffer overflow in assert RHEL-83306 - CVE-2024-33599: nscd:...

TencentOS Server 4: glibc (TSSA-2024:0038)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2024:0038 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

TencentOS Server 3: glibc (TSSA-2023:0245)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2023:0245 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

CVE-2011-4911

Joomla! before 1.5.12 does not perform a JEXEC check in unspecified files, which allows remote attackers to obtain the installation path via unspecified vectors...

CVE-2025-4911

creationtimestamp| type| source ---|---|--- 2025-05-19 05:38:06+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16803 2026-07-29 12:03:22+00:00| seen| https://t.me/shmelovod/924 2026-07-30 00:03:08+00:00| seen| https://t.me/shmelovod/924 2026-08-04 05:00:04+00:00|...

CVE-2025-4911

A vulnerability, which was classified as critical, was found in PHPGurukul Zoo Management System 2.1. Affected is an unknown function of the file /admin/view-foreigner-ticket.php. The manipulation of the argument viewid leads to sql injection. It is possible to launch the attack remotely. The...

CVE-2025-4911 PHPGurukul Zoo Management System view-foreigner-ticket.php sql injection

A vulnerability, which was classified as critical, was found in PHPGurukul Zoo Management System 2.1. Affected is an unknown function of the file /admin/view-foreigner-ticket.php. The manipulation of the argument viewid leads to sql injection. It is possible to launch the attack remotely. The...