238 matches found
CVE-2024-1112
CVE-2024-1112 This is a PoC, I wrote for "ResHacker.exe" Heap overflow vulnerability. Usage Execute CVE-2024-1112.py, copy all string at created payload.txt then use it to as parameter to open ResHacker.exe root@kitploit: ResHacker.exe $string NOTE: Don't forget the find correct address - You can...
CVE-2024-23897
Jenkins ファイル読み取り脆弱性 - CVE-2024-23897 CVE-2024-23897 は、認証されていない攻撃者に Jenkins コントローラのファイルシステム上の任意のファイルを読み取り可能にする、Jenkins の重大な脆弱性です。この欠陥は、args4j ライブラリにおけるコマンド引数の不適切な処理に起因し、特にコマンドライン操作で @ 文字の後にファイルパスが続く場合に、許可されていないファイル内容の漏えいにつながる可能性があります。...
CVE-2026-4631-cockpit-RCE
CVE-2026-4631 — 代码分析 Cockpit：通过 SSH 命令行参数注入实现未认证远程代码执行...
Dnstracer-1.9-Fix
Dnstracer-1.9-Fix dnstracer dnstracerは、指定されたホスト名について、指定されたドメインネームサーバー（DNS）がどこから情報を取得しているかを特定し、権威サーバーに至るまでDNSサーバーのチェーンを辿ります。 問題 dnstracer 1.9以前におけるスタックベースのバッファオーバーフローにより、攻撃者はargv0のstrcpy呼び出しで長いname引数を不正に処理させ、任意のコードを実行できる可能性があります。 root@kitploit: /dnstracerbroken.h/ define NSMAXDNAME 1024...
...[ More ]
A stack-based buffer overflow vulnerability exists in the htpasswd utility bundled with thttpd. The vulnerability occurs due to unsafe copying of a user-supplied command-line argument into a fixed-size stack buffer without proper bounds checking.Specifically, the program copies the username...
EUVD-2026-67040
In opensslencrypt pip package openssl-encrypt versions /cmdline for the lifetime of the subprocess. Fixed in 1.4.9...
CVE-2026-31217
The loadmodel function in the neuralmagictraining.py script of the optimate project in commit a6d302f912b481c94370811af6b11402f51d377f 2024-07-21 allows arbitrary code execution. When a user supplies a directory path via the --model command-line argument, the function reads a module.py file from...
EUVD-2016-10831
yTree 1.94-1.1 contains a stack-based buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying an excessively long argument to the application. Attackers can craft a malicious command-line argument containing shellcode and a return address to overwrite the...
CVE-2016-20038
yTree 1.94-1.1 contains a stack-based buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying an excessively long argument to the application. Attackers can craft a malicious command-line argument containing shellcode and a return address to overwrite the...
CVE-2016-20038
CVE-2016-20038 affects yTree 1.94-1.1 and is caused by a stack-based buffer overflow triggered by an excessively long command-line argument. This allows a local attacker to execute arbitrary code by injecting shellcode and a crafted return address to overwrite the stack. Exploitation is described...
CVE-2016-20038 yTree 1.94-1.1 Stack-Based Buffer Overflow
yTree 1.94-1.1 contains a stack-based buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying an excessively long argument to the application. Attackers can craft a malicious command-line argument containing shellcode and a return address to overwrite the...
CVE-2005-1395
Buffer overflow in Ce/Ceterm aka ARPUS/Ce 2.5.4 and earlier may allow local users to gain privileges via a long 1 XAPPLRESLANGPATH or 2 XAPPLRESDIR environment variable, or 3 command line argument...
EUVD-2002-1040
Malware in sbrugna...
EUVD-2003-1349
Malware in sbrugna...
EUVD-2004-1463
Malware in sbrugna...
EUVD-2001-0384
Malware in sbrugna...
EUVD-2003-0605
Malware in sbrugna...
EUVD-2003-0646
Malware in sbrugna...