Lucene search
+L

1673 matches found

Kitploit
Kitploit
added 2026/09/11 6:31 a.m.9 views

how-to-bypass-aslr-on-linux-x86_64

Breaking 64 bit aslr on Linux x86-64 이 글에서는 Samuel Groß가 자신의 Remote iPhone Exploitation Part 2: Bringing Light into the Darkness -- a Remote ASLR Bypass에서 설명한 기법을 Linux x8664에서 ASLR을 우회하기 위해 적용하는 방법에 대해 다루겠습니다. 이를 보여주기 위해 Buckeye CTF의 pwnable 챌린지인 guessgod를 풀어보겠습니다. 가능한 한 초보자 친화적으로 내용을 작성하려고 하니, ...

5.9AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/10 9:01 p.m.6 views

memaddressanalysis

Mem Address Analyzer Research project related to memory address space analysis Released as open source by NCC Group Plc - http://www.nccgroup.com/ Developed for Linux by Aidan Marlin, aidan dot marlin at nccgroup dot com Developed for Windows by Nikos Laleas, nikos dot laleas at nccgroup dot com...

5.9AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/10 7:27 a.m.6 views

CVE-2015-8522.RCE

CVE-2015-8522 La aplicación Tivoli FastBack Server 6.1.4 es vulnerable a un desbordamiento de búfer basado en pila que permite a los actores de amenazas obtener ejecución de código arbitrario ACE a través de una conexión TCP remota. El PoC proporcionado en este repositorio aprovecha esta...

9.8CVSS8.2AI score0.02774EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/09 3:43 p.m.10 views

EUVD-2026-75058

eprosima Fast DDS is a C++ implementation of the DDS Data Distribution Service standard of the OMG Object Management Group. Versions prior to 2.6.12, 2.14.6, 3.2.4, 3.3.1, and 3.4.2 have a remotely triggerable Out-of-Bounds Read while processing RTPS DATAFRAG submessages. An attacker can craft a...

9.1CVSS0.00383EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/09/09 3:43 p.m.35 views

CVE-2026-22590 Fast-DDS Discovery Server: Out-of-Bounds Read & Heap Memory Disclosure via DATA_FRAG  sampleSize / fragmentsInSubmessage

eprosima Fast DDS is a C++ implementation of the DDS Data Distribution Service standard of the OMG Object Management Group. Versions prior to 2.6.12, 2.14.6, 3.2.4, 3.3.1, and 3.4.2 have a remotely triggerable Out-of-Bounds Read while processing RTPS DATAFRAG submessages. An attacker can craft a...

9.1CVSS0.00383EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/08 9:51 p.m.7 views

CVE-2018-0802

CVE-2018-0802 CVE-2018-08022: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0802 MITRE CVE-2018-0802: https://vulners.com/cve/CVE-2018-0802 Vídeo de explotación y parche de 0patch: https://www.youtube.com/watch?v=XU-U4K270Z4 Entrada de blog de Qihoo 360:...

9.3CVSS8AI score0.93289EPSS
SaveExploits7
Kitploit
Kitploit
added 2026/09/08 9:38 p.m.10 views

CVE-2018-0802

CVE-2018-0802 CVE-2018-08022: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0802 MITRE CVE-2018-0802: https://vulners.com/cve/CVE-2018-0802 0patch video de explotación y parche: https://www.youtube.com/watch?v=XU-U4K270Z4 Entrada de blog de Qihoo 360...

9.3CVSS8AI score0.93289EPSS
SaveExploits7
Kitploit
Kitploit
added 2026/09/08 9:15 p.m.9 views

IPC-Memory-Mac-OSX-Exploit

IPC-Memory-Mac-OSX-Exploit Omisión de seguridad local de IPC La comunicación entre procesos a través de memoria compartida es un concepto donde dos o más procesos pueden acceder a la memoria común. Y la comunicación se realiza mediante esta memoria compartida, donde los cambios realizados por un...

4.9CVSS5.9AI score0.01085EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/08 5:53 a.m.8 views

cve-2025-9951-ffmpeg-jp2-poc

CVE-2025-9951 FFmpeg JPEG 2000 Exploitation Research This repository contains two deliberately separated exploitation milestones for the FFmpeg JPEG 2000 component-mapping vulnerability: 1. 01-gdb-assisted/ — the original deterministic GDB-launched PoC and its full research-journey writeup,...

7.2CVSS6.7AI score0.00433EPSS
SaveExploits1References2
Kitploit
Kitploit
added 2026/09/07 3:48 p.m.4 views

CVE-2013-2028-x64-bypass-ssp-and-pie-PoC

for bypass NX PIE SSP ASLR this poc is not stable. sometimes http service will down. you should fix morecore-offset and chose correct libc-file...

7.5CVSS5.8AI score0.87475EPSS
SaveExploits17
Kitploit
Kitploit
added 2026/09/07 3:42 p.m.4 views

CVE-2025-0282-Full-version

Storks: Инструмент для эксплуатации уязвимости удаленного выполнения кода Обзор Storks — это PoC-инструмент на Python, предназначенный для демонстрации критической уязвимости удаленного выполнения кода RCE, обозначенной как CVE-2025-0282 , в конкретном сетевом устройстве. Эта уязвимость может быт...

9CVSS8.3AI score0.99979EPSS
SaveExploits14
Debian CVE
Debian CVE
added 2026/09/01 3:19 p.m.8 views

CVE-2026-84267

A flaw was found in the SFTP backend in gvfs. When mounting a share, a malicious SFTP server can cause readstring to allocate a buffer with a certain length but the function does not verify that the buffer is completely filled, leaving the remainder of the buffer containing uninitialized heap...

4.3CVSS6AI score0.00212EPSS
SaveExploits0
OSV
OSV
added 2026/09/01 3:19 p.m.6 views

CVE-2026-84267 Gvfs: sftp: uninitialized heap disclosure in read_string()

A flaw was found in the SFTP backend in gvfs. When mounting a share, a malicious SFTP server can cause readstring to allocate a buffer with a certain length but the function does not verify that the buffer is completely filled, leaving the remainder of the buffer containing uninitialized heap...

4.3CVSS6AI score
SaveExploits0References7
EUVD
EUVD
added 2026/09/01 3:19 p.m.9 views

EUVD-2026-69296

A flaw was found in the SFTP backend in gvfs. When mounting a share, a malicious SFTP server can cause readstring to allocate a buffer with a certain length but the function does not verify that the buffer is completely filled, leaving the remainder of the buffer containing uninitialized heap...

4.3CVSS6AI score0.00212EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2026/09/01 3:19 p.m.14 views

CVE-2026-84267 Gvfs: sftp: uninitialized heap disclosure in read_string()

A flaw was found in the SFTP backend in gvfs. When mounting a share, a malicious SFTP server can cause readstring to allocate a buffer with a certain length but the function does not verify that the buffer is completely filled, leaving the remainder of the buffer containing uninitialized heap...

4.3CVSS6AI score0.00212EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2026/09/01 2:53 p.m.7 views

CVE-2026-84267

A flaw was found in the SFTP backend in gvfs. When mounting a share, a malicious SFTP server can cause readstring to allocate a buffer with a certain length but the function does not verify that the buffer is completely filled, leaving the remainder of the buffer containing uninitialized heap...

4.3CVSS6AI score0.00212EPSS
SaveExploits0References4
AstraLinux
AstraLinux
added 2026/08/24 10:19 a.m.11 views

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in XML in Google Chrome prior to 107.0.5304.62 allowed a remote attacker to potentially perform an ASLR bypass via a crafted HTML page. Chromium security severity: Low...

6.3CVSS6.6AI score0.00443EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2026/08/20 6:16 p.m.13 views

CVE-2026-74339

A flaw was found in the ALSA Advanced Linux Sound Architecture sequencer component of the Linux kernel. A local attacker, by writing a direct variable event to itself, can read back a kernel memory address from the returned event header. This information disclosure could potentially be used to...

5.5CVSS5.4AI score0.00173EPSS
SaveExploits0References4
GithubExploit
GithubExploit
added 2026/08/18 11:37 a.m.104 views

Exploit for CVE-2026-14669

CVE-2026-14669 - PostgreSQL tochar Time Zone Abbreviation H...

8.8CVSS7.3AI score0.00676EPSS
SaveExploits1
Amazon
Amazon
added 2026/08/17 12:00 a.m.12 views

Important: libssh2

Issue Overview: libssh2 through 1.11.1, fixed in commit 5e47761, contains a double-free vulnerability in the sftpopen function in src/sftp.c that allows a malicious SSH server to corrupt the heap of any authenticated client opening an SFTP session. When a server responds to SSHFXPOPEN with...

8.8CVSS5.9AI score0.00448EPSS
SaveExploits0
Rows per page
Query Builder