CVE-2021-3156-Exp

CVE-2021-3156-Exp CVE-2021-3156의 익스플로잇입니다. 하룻밤의 연구 끝에, 드디어 해냈습니다! 감사 https://www.qualys.com/2021/01/26/cve-2021-3156/baron-samedit-heap-based-overflow-sudo.txt...

CVE-2026-27831-POC

CVE-2026-27831-POC CVE-2026-27831 の PoC エクスプロイト これは、rldns バージョン 1.3 におけるリモートのヒープベースの領域外読み取り（サービス拒否を引き起こす）に対する概念実証エクスプロイトです。 rldns は、x8664 アーキテクチャ上で動作する、linux、freebsd、netbsd 向けのオープンソース DNS サーバーです。 Rldns バージョン 1.3 には、サービス拒否につながるヒープベースの領域外読み取りがあります。バージョン 1.4 には、この問題に対するパッチが含まれています。 脆弱性発見者: Antonius...

Linux-Heap-Based-Type-Confusion-in-L2CAP

Linux: L2CAP 中基于堆的类型混淆 CVE-2020-12351 Linux: L2CAP 中基于堆的类型混淆 针对 BLE 实现的 PoC CVE-2020-12351 为何修改原始 PoC？ 原始 PoC 专注于通过经典蓝牙发送恶意 l2cap 数据包。然而，我的需求是将其测试于仅支持蓝牙低功耗 BLE 通信且已采用完整 BlueZ 协议栈（经典和低功耗均支持）的外设上。 L2CAP 是主机协议栈中的通用协议，同时支持蓝牙经典和 BLE 实现。 先决条件 配备 BLE 适配器的 Linux 机器。如果机器没有内置适配器，可以购买一个外接适配器。 使用方式：...

CVE-2021-3156-Heap-Based-Buffer-Overflow-in-Sudo-Baron-Samedit-

Qualys Security Advisory Baron Samedit：Sudo 中的堆缓冲区溢出 CVE-2021-3156 ======================================================================== 目录 概述 分析 利用 致谢 时间线 ======================================================================== 概述 我们在 Sudo https://www.sudo.ws/ 中发现了一个堆缓冲区溢出漏洞。该漏洞：...

CVE-2021-3156

CVE-2021-3156 Ansible角色为CentOS修补CVE-2021-3156 简介 Sudo 1.9.5p2之前版本存在基于堆的缓冲区溢出漏洞，允许通过 "sudoedit -s" 和以单个反斜杠字符结尾的命令行参数将权限提升至 root。 CVE-2021-3156 新闻（俄语） 运行 root@kitploit: ansible-playbook updatessh.yml --tags ssh-update...

CVE-2021-3156

CVE-2021-3156 https://www.qualys.com/2021/01/26/cve-2021-3156/baron-samedit-heap-based-overflow-sudo.txt https://blog.qualys.com/vulnerabilities-research/2021/01/26/cve-2021-3156-heap-based-buffer-overflow-in-sudo-baron-samedit https://access.redhat.com/security/vulnerabilities/RHSB-2021-002...

CVE-2025-47987

CVE-2025-47987: Windows CredSSP Elevation of Privilege 📌 Questo repository contiene documentazione e risorse di analisi sulla vulnerabilità CVE-2025-47987, un difetto di overflow del buffer nella regione heap Heap-based Buffer Overflow che interessa il protocollo Windows Credential Security Suppo...

CVE-2026-55200

Отчет по безопасности: CVE-2026-55200 📝 Общее описание CVE-2026-55200 — это критическая уязвимость переполнения памяти на основе кучи нарушение динамической памяти, затрагивающая библиотеку libssh2 в версиях до 1.11.1. Позволяет вредоносному SSH-серверу скомпрометировать уязвимые клиенты,...

CVE-2019-19204

CVE-2019-19204 Ein Problem wurde in Oniguruma 6.x vor 6.9.4rc2 entdeckt. In der Funktion fetchintervalquantifier früher bekannt als fetchrangequantifier in regparse.c wird PFETCH aufgerufen, ohne PEND zu überprüfen. Dies führt zu einem heap-basierten Pufferüberlesen. Forscher: ManhND vom The...

cve-2024-49113-ldap_nightmare_reproduction

CVE-2024-49113 — LDAP Nightmare Remotecodeausführung im Windows-LDAP-Client Heap-basierter Pufferüberlauf...

CVE-2026-75767

Substance3D - Painter is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-75766

Substance3D - Painter is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-48432

Substance3D - Designer is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-48423

Substance3D - Sampler is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

EUVD-2026-65688

Substance3D - Painter is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-75767 Substance3D - Painter | Heap-based Buffer Overflow (CWE-122)

Substance3D - Painter is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-75766

Adobe Substance3D Painter is affected by a Heap-based Buffer Overflow (CWE-122) vulnerability that can lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction , specifically opening a malicious file. The CVSS 3.1 score is 7.8 (High) with a local...

CVE-2026-75769 Substance3D - Painter | Heap-based Buffer Overflow (CWE-122)

Substance3D - Painter is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-48425

Substance3D - Sampler (Adobe) is affected by a Heap-based Buffer Overflow (CWE-122) that can lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction : the victim must open a crafted malicious file. The CVSS 3.1 base score is 7.8 (HIGH) , reflect...

CVE-2026-48423 Substance3D - Sampler | Heap-based Buffer Overflow (CWE-122)

Substance3D - Sampler is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...