CVE-2021-20294-POC

CVE-2021-20294-POC 2023년 1월 21일, Altin tin-z, github.com/tin-z Poc 다운로드 및 컴파일 root@kitploit: wget https://ftp.gnu.org/gnu/binutils/binutils-2.35.tar.gz && tar -xzvf binutils-2.35.tar.gz cd binutils-2.35 && ./configure && make && cd .. gcc -shared -fPIC poc.c -o poc.so -Wl,--version-script=poc.ver...

CVE-2023-4863

уровень 1: craft.c - bad.webp root@kitploit: существует: docker 813b6b757038 /webp cd CVE-2023-4863 make -f makefile.unix -B фатальная ошибка: jpeglib.h: No such file or directory apt-get update apt-get install libjpeg-dev фатальная ошибка: png.h: No such file or directory apt-get install...

AZL-100244 CVE-2026-89559 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: libnvdimm/labels: Prevent integer overflow in ndlabelvalidate The on-media namespace index field nslot is a u32 read from the DIMM label storage area. ndlabelvalidate bounds it against the config area size, but sizeofnamespacelab...

CVE-2026-79590

A NULL pointer dereference vulnerability exists in the Prism parser component of mruby 4.0.0. An attacker can provide a specially crafted Ruby source file that triggers the parser to pass a NULL pointer to nonnull string handling functions, resulting in undefined behavior and application crash...

PT-2026-89520

Tesseract is an open source OCR engine. In version 5.5.3 and earlier, Plumbing::DeSerialize in src/lstm/plumbing.cpp rejects excessively large network stacks but accepts a zero-length stack for NT SERIES, NT PARALLEL, or NT REVERSED layers in a crafted .traineddata model. During LSTMRecognizer...

net/mail: golang: Go net/mail: Denial of Service via crafted email inputs

A flaw was found in the net/mail package of the Go programming language. An attacker could provide specially crafted inputs to the ParseAddress, ParseAddressList, or ParseDate functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service DoS for...

practice-22-23

프로젝트 실행: ./script.sh GitHub 저장소 - https://github.com/LaCinquette/practice-22-23 진행 상황 1. 취약점을 찾기 위해 FFmpeg 프로젝트를 선택했습니다. 요구 사항을 충족하는 커밋을 찾았습니다: CWE-476 유형 - 널 포인터 역참조 2. 도커파일을 생성했습니다: 1. 기본 이미지로 Ubuntu 22.04 선택 2. 패키지 설치 및 기타 명령 중 명령줄 상호작용을 방지하기 위해 DEBIANFRONTEND=nointeractive 설정 3. 공식 위키에 명시된 필수...

Exim-CVE-2019-15846

Exim CVE-2019-15846 CVE-2019-15846을 악용하기 위한 PoC 자료입니다. PoC를 설명하는 블로그 게시물은 다음 링크에서 확인할 수 있습니다: Synacktiv Blog. 이 PoC는 exim에서 힙 오버플로를 악용하는 데 사용되는 스풀 파일을 생성하는 데 도움이 됩니다. 두 개의 예제 스풀 파일은 1i7Jgy-0002dD-Pb-D 및 1i7Jgy-0002dD-Pb-H에 제공됩니다. 특수하게 제작된 스풀 헤더 파일은 exgen.py로 생성할 수 있습니다...

CVE-2026-79516

CVE-2026-79516 is an out-of-bounds read in the stbsp_vsnprintf function (stb_sprintf.h) of the nothings/stb library, as of commit 31c1ad3 . A crafted input can trigger the OOB read, leading to a Denial of Service . The CVSS 3.1 score is 4.0 (MEDIUM) with a local attack vector and high complexity ...

CVE20265172poc

CVE20265172poc CVE-2026-5172: 제작된 리소스 레코드에서 extractaddresses의 버퍼 오버플로우 PoC 토폴로지는 여기서 읽기 https://medium.com/@yanyuyingshu/reproduction-journal-dnsmasq-ecs-validation-and-buffer-overflow-flaws-e0fe0f66f60c 단계​ 1. vi /etc/dnsmasq.conf​ port=5353​ listen-address=xxx.xxx.xxx.x bind-interfaces​...

mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header

A flaw was found in the Golang MIME Multipurpose Internet Mail Extensions package. A remote attacker could exploit this vulnerability by sending a maliciously-crafted MIME header containing many invalid encoded-words. This could lead to excessive CPU consumption, resulting in a Denial of Service...

CVE-2026-79574

An issue in the gateway server of mpush v0.8.1 allows attackers to execute arbitrary code via sending a crafted broadcast message...

CVE-2026-86430 league/commonmark before 2.9.1 Denial of Service via parsing

league/commonmark versions before 2.9.1 contain multiple denial of service vulnerabilities in fenced code block detection, reference link label lookup, and emphasis delimiter processing that perform super-linear work on crafted input. Attackers can submit specially crafted Markdown with long...

CVE-2026-86423 ImageMagick before 7.1.2-30 Heap-use-after-free via GetList

ImageMagick before 7.1.2-30 and 6.9.x before 6.9.13-55 contains a heap-use-after-free vulnerability in the GetList method of PerlMagick. A crafted call to the GetList method can trigger the use-after-free, resulting in a crash denial of service...

Linux Distros Unpatched Vulnerability : CVE-2026-86430

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - league/commonmark versions before 2.9.1 contain multiple denial of service vulnerabilities in fenced code block detection, reference link label lookup, and...

AZL-99738 CVE-2026-6244 affecting package libpcap for versions less than 1.10.7-1

libpcap BPF interpreter for the 'div k' and 'mod k' ALU instructions does not check whether the immediate value is zero. In particular uncommon use cases a crafted filter program can cause a division by zero...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: ffmpeg (UTSA-2026-106212)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-106212 advisory. An improper resource deallocation and closure vulnerability in the tools/zmqsend.c component of FFmpeg v8.0.1 allows attackers to cause a Denial of Service DoS via...

ALSA-2026:63022 Important: grafana security update

Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Security Fixes: net/mail: golang: net/mail: Denial of Service via pathological email address parsing CVE-2026-42499 net/mail: golang: Go net/mail: Denial of Service via crafted email inpu...

kernel: fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath

A flaw was found in the Linux kernel's CIFS Common Internet File System client. When the cifssanitizeprepath function processes specially crafted input, such as an empty string or a string containing only delimiters, it can attempt to read data beyond its allocated memory buffer. This out-of-boun...

kernel: fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath

A flaw was found in the Linux kernel's CIFS Common Internet File System client. When the cifssanitizeprepath function processes specially crafted input, such as an empty string or a string containing only delimiters, it can attempt to read data beyond its allocated memory buffer. This out-of-boun...