CVE-2024-35333

CVE-2024-35333 html2xhtml 버전 1.3의 문자셋charset 처리 기능에 스택 버퍼 오버플로stack buffer overflow 취약점이 존재합니다. 공격자는 특수하게 조작된 입력을 제공하여 이 취약점을 악용할 수 있으며, 이로 인해 스택에 위치한 'buf' 변수가 오버플로될 수 있습니다. 이 취약점을 성공적으로 악용하면 공격자가 임의의 코드를 실행하거나 애플리케이션을 충돌시켜 서비스 거부denial of service를 유발할 수 있습니다. 크래시 재현 단계 Crash Out Phase 크래시를 재현하려...

CVE-2021-23017

CVE-2021-23017 PoC 扫描器 NGINX DNS 溢出漏洞检查 - CVE-2021-23017 PoC 此 Python 脚本检查 nginx 服务器是否可能受到关键漏洞 CVE-2021-23017 的影响，该漏洞影响 nginx 内置的 DNS 解析器 ，可能导致缓冲区溢出。 🔍 它做什么？ 提示用户输入 URL。 发送一个带有恶意（非常长）Host 头的 HTTP 请求。 如果服务器配置了 nginx 的 resolver 并且存在漏洞，则可能会崩溃或在日志中记录错误。 不执行恶意代码 ，仅是一种被动的检测测试。 🚀 如何使用 1. 确保已安装 Python 3。...

CVE-2026-51934

Buffer Overflow vulnerability in Shenzhen Jixiang Tengda Technology Co., Ltd. Tenda A18 v.15.13.07.09 allows a remote attacker to execute arbitrary code via the fromSetCmdlineRun function...

wget: GNU Wget: Arbitrary code execution or denial of service via crafted HTML attribute

A flaw was found in GNU Wget. A remote attacker can exploit a heap buffer overflow vulnerability in the htmlquotestring function by providing a specially crafted HTML attribute. This can lead to memory corruption and potentially result in arbitrary code execution or a denial of service...

wget: GNU Wget: Heap buffer overflow via server-supplied filename leads to memory corruption

A flaw was found in GNU Wget. A remote attacker can exploit a heap buffer overflow vulnerability in the convertfname function. This occurs when processing a server-supplied filename that requires character set conversion, leading to memory corruption due to incorrect buffer reallocation. This can...

Moderate: Red Hat Security Advisory: wget security, bug fix, and enhancement update

An update for wget is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the C...

cve-2023-33476

CVE-2023-33476 ReadyMedia MiniDLNA 버전 1.1.15부터 1.3.2까지는 버퍼 오버플로우에 취약합니다. 이 취약점은 청크 전송 인코딩을 사용하는 HTTP 요청을 처리할 때 잘못된 검증 로직으로 인해 발생합니다. 이로 인해 이후 코드에서 할당된 버퍼 길이를 초과하는 공격자 제어 청크 값을 사용하게 되어 범위를 벗어난 읽기/쓰기가 발생합니다. 원인 분석 익스플로잇 세부 정보 NIST CVE 항목 익스플로잇 x86-64 대상용 tcache poisoning + GOT overwrite 익스플로잇을 통한 R...

Moderate: Red Hat Security Advisory: wget security, bug fix, and enhancement update

An update for wget is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the C...

CVE-2018-6892-Golang

CVE-2018-6892-Golang Python에서 Golang으로 포팅된 익스플로잇 https://packetstormsecurity.com/files/157407/CloudMe-1.11.2-Buffer-Overflow.html...

CVE-2017-11882

CVE-2017-11882 개요 취약점 악용 효과 측면에서 보면 Office 2003부터 2016까지 모든 버전을 공격할 수 있으며, 전체 공격 환경의 구축도 매우 간단합니다. 이 취약점은 Office 소프트웨어의 수식 편집기로 인해 발생합니다. 편집기 프로세스가 이름 길이를 검증하지 않아 버퍼 오버플로buffer overflow가 발생하며, 공격자는 특수 문자를 구성하여 임의 코드 실행을 달성할 수 있습니다. 예를 들어, 해커가 이 취약점을 악용하여 셸 백도어가 포함된 Office 파일을 만들면, 일반 사용자가 이 Offic...

CVE-2026-84269

A flaw was found in the AFP backend in gvfs. When mounting a share, a malicious AFP server can cause the DSI read path to process a length that exceeds the size requested by the client. The function does not verify the server-provided length against the pre-sized reply buffer, causing the operati...

DEBIAN-CVE-2026-84269

A flaw was found in the AFP backend in gvfs. When mounting a share, a malicious AFP server can cause the DSI read path to process a length that exceeds the size requested by the client. The function does not verify the server-provided length against the pre-sized reply buffer, causing the operati...

CVE-2026-84268

A flaw was found in the SFTP backend in gvfs. When mounting a share and reading a file, a malicious SFTP server can cause readreply to process a length that exceeds the size requested by the client. The function does not verify the server-provided length against the allocated buffer size, causing...

wget: GNU Wget: Heap buffer overflow via server-supplied filename leads to memory corruption

A flaw was found in GNU Wget. A remote attacker can exploit a heap buffer overflow vulnerability in the convertfname function. This occurs when processing a server-supplied filename that requires character set conversion, leading to memory corruption due to incorrect buffer reallocation. This can...

wget: GNU Wget: Arbitrary code execution or denial of service via crafted HTML attribute

A flaw was found in GNU Wget. A remote attacker can exploit a heap buffer overflow vulnerability in the htmlquotestring function by providing a specially crafted HTML attribute. This can lead to memory corruption and potentially result in arbitrary code execution or a denial of service...

Moderate: Red Hat Security Advisory: wget security, bug fix, and enhancement update

An update for wget is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

EUVD-2026-69297

A flaw was found in the AFP backend in gvfs. When mounting a share, a malicious AFP server can cause the DSI read path to process a length that exceeds the size requested by the client. The function does not verify the server-provided length against the pre-sized reply buffer, causing the operati...

CVE-2026-84269 Gvfs: afp: heap-based buffer overflow in dsi read path

A flaw was found in the AFP backend in gvfs. When mounting a share, a malicious AFP server can cause the DSI read path to process a length that exceeds the size requested by the client. The function does not verify the server-provided length against the pre-sized reply buffer, causing the operati...

CVE-2026-84269 Gvfs: afp: heap-based buffer overflow in dsi read path

A flaw was found in the AFP backend in gvfs. When mounting a share, a malicious AFP server can cause the DSI read path to process a length that exceeds the size requested by the client. The function does not verify the server-provided length against the pre-sized reply buffer, causing the operati...

CVE-2026-84269

A heap-based buffer overflow was identified in the AFP backend of gvfs . When mounting a share, a malicious AFP server can supply a length in the DSI read path that exceeds the size the client requested. Because the function does not validate the server-provided length against the pre-sized reply...