154 matches found
CVE-2017-14980_syncbreeze_10.0.28_bof
Exploit - CVE-2017-14980 - Sync Breeze Enterprise v10.0.28 Questa repository contiene un proof-of-concept exploit di buffer overflow BOF per Sync Breeze Enterprise versione 10.0.28, che sfrutta la vulnerabilità identificata come CVE-2017-14980. Descrizione La vulnerabilità è dovuta a una non...
CVE-2025-5548
⚡ CVE-2025-5548: Ricerca e Sfruttamento delle Vulnerabilità Questo repository fornisce un'analisi tecnica e un walkthrough di prova di concetto per CVE-2025-5548. Questa ricerca copre l'intero ciclo di vita della vulnerabilità, dall'ispezione binaria iniziale allo sfruttamento con successo. ⚠️...
CVE-2025-5548-Exploit-Development
CVE-2025-5548 - Laboratorio di Sviluppo Exploit Questo repository documenta il processo di configurazione di un ambiente di lavoro per l'analisi delle vulnerabilità e lo sviluppo di exploit, e la sua applicazione a un caso pratico di buffer overflow. Il progetto è costruito attorno a FreeFloat FT...
CVE-2017-14980
🐞 CVE-2017-14980: Sync Breeze Enterprise 10.0.28 - Stack-basierter Pufferüberlauf Stack-basierter Pufferüberlauf in Sync Breeze Enterprise 10.0.28, erreichbar über den /login-Handler, der zeigt, wie eine ungeprüfte Eingabelänge den Stapelspeicher beschädigen kann. 📑 Inhaltsverzeichnis Warum diese...
Win32-Exploit-Dev-Labs-Vulnserver
Win32 Exploit Dev Series: Vol. 1 Vulnserver This repository...
programming-for-penetration-testing-buffer-overflow-exploit
Buffer Overflow Exploit in Ruby Overview This project was...
CVE-2016-20050 NetSchedScan 1.0 Buffer Overflow Denial of Service
NetSchedScan 1.0 contains a buffer overflow vulnerability in the scan Hostname/IP field that allows local attackers to crash the application by supplying an oversized input string. Attackers can paste a crafted payload containing 388 bytes of data followed by 4 bytes of EIP overwrite into the...
EUVD-2019-20014
X-NetStat Pro 5.63 contains a local buffer overflow vulnerability that allows local attackers to execute arbitrary code by overwriting the EIP register through a 264-byte buffer overflow. Attackers can inject shellcode into memory and use an egg hunter technique to locate and execute the payload...
CVE-2019-25332
FTP Commander Pro 8.03 contains a local stack overflow vulnerability that allows attackers to execute arbitrary code by overwriting the EIP register through a custom command input. Attackers can craft a malicious payload of 4108 bytes to overwrite memory and execute shellcode, demonstrating remot...
Malware-Analysis-Project-SLMAIL-5.5-BOF-
Malware Analysis Project Introduction to exploit development w...
Stack-Buffer-Overflow-x86
Stack-Based Buffer Overflow: From Bug to Code Execution I...
CVE-2010-5333
The web server in Integard Pro and Home before 2.0.0.9037 and 2.2.x before 2.2.0.9037 has a buffer overflow via a long password in an administration login POST request, leading to arbitrary code execution. An SEH-overwrite buffer overflow already existed for the vulnerable software. This CVE is t...
CVE-2024-47613
A flaw was found in the gdk-pixbuf decoder in the GStreamer library. Processing a specially crafted input file can cause a NULL pointer dereference due to an unchecked return value, resulting in an application crash and a denial of service. Mitigation Do not process untrusted files with the...
CVE-2024-47613
GStreamer is a library for constructing graphs of media-handling components. A null pointer dereference vulnerability has been identified in gstgdkpixbufdecflush within gstgdkpixbufdec.c. This function invokes memcpy, using outpix as the destination address. outpix is expected to point to the fra...
CVE-2024-47607 GHSL-2024-116: Stack-buffer overflow in gst_opus_dec_parse_header
GStreamer is a library for constructing graphs of media-handling components. stack-buffer overflow has been detected in the gstopusdecparseheader function within gstopusdec.c'. The pos array is a stack-allocated buffer of size 64. If nchannels exceeds 64, the for loop will write beyond the...
CVE-2024-47607
CVE-2024-47607 affects GStreamer’s opus decoder (gst_opus_dec_parse_header in gstopusdec.c). A stack-allocated pos buffer of size 64 can overflow when n_channels > 64, causing writes beyond the buffer and potential control-flow corruption (overwriting the EIP). The issue is fixed in GStreamer ...
CVE-2024-47538
CVE-2024-47538 affects GStreamer’s vorbis handling in the Vorbis decoder. A stack-buffer overflow is triggered in the function vorbis_handle_identification_packet within gstvorbisdec.c: a stack-allocated position buffer of size 64 is overflowed when vd->vi.channels exceeds 64, writing the valu...
CVE-2024-45166
An issue was discovered in UCI IDOL 2 aka uciIDOL or IDOL2 through 2.12. Due to improper input validation, improper deserialization, and improper restriction of operations within the bounds of a memory buffer, IDOL2 is vulnerable to Denial-of-Service DoS attacks and possibly remote code execution...
CVE-2024-45166
An issue was discovered in UCI IDOL 2 aka uciIDOL or IDOL2 through 2.12. Due to improper input validation, improper deserialization, and improper restriction of operations within the bounds of a memory buffer, IDOL2 is vulnerable to Denial-of-Service DoS attacks and possibly remote code execution...
Email-Worm.Win32.Agent.gi Remote Stack Buffer Overflow
Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/74e65773735f977185f6a09f1472ea46.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Email-Worm.Win32.Agent.gi Vulnerability: Remote Stack Buffer Overflow - UDP Datagram Description:...