CVE-2022-0185-Case-Study

CVE-2022-0185-Case-Study This case study is a result of an assignment of ECE 9069: Introduction to Hacking : https://whisperlab.org/introduction-to-hacking/ CVE-2022-0185 Overview CVE-2022-0185 is a heap-based buffer overflow flaw was found in the way the legacyparseparam function in the Filesyst...

CVE-2023-38545-libcurl-SOCKS5-heap-buffer-overflow

Disclaimer This article is intended solely for technical discussion and learning. Any direct or indirect consequences or losses caused by the use of the information provided herein shall be borne solely by the user. The author assumes no responsibility for such consequences or losses...

ros2_CVE-2024-28231

This repo includes a vulnerable Docker image of ros2 iron based on ubuntu 22 and a matching exploit. We exploit the vulnerability in fastrtps version 2.10.3, enabling denial of service of a remote subscriber via heap buffer overflow. Vulnerable base image Fast RTPS version 2.10.3 and dependencies...

nginx-rift-private-lab

NGINX Rift RCE Proof of concept for CVE-2026-42945 , a critical heap buffer overflow in NGINX's ngxhttprewritemodule introduced in 2008. The bug enables unauthenticated remote code execution against servers using rewrite and set directives. This fork extends the original PoC with an ASLR-bypass...

CVE-2026-42945-POC

CVE-2026-42945 NGINX Rift - HTB-Ready Exploit Standalone exploit for the NGINX heap buffer overflow vulnerability discovered in 2024. This version is optimized for HackTheBox and CTF environments where you can't set up Docker containers. Vulnerability Details CVE-2026-42945 is a critical heap...

CVE-2023-4863

level 1: craft.c - bad.webp root@kitploit: exist: docker 813b6b757038 /webp cd CVE-2023-4863 make -f makefile.unix -B fatal error: jpeglib.h: No such file or directory apt-get update apt-get install libjpeg-dev fatal error: png.h: No such file or directory apt-get install libpng-dev fatal error:...

postgresql:15 security update

An update is available for module.pgrepack, module.postgres-decoderbufs, module.pgaudit, pgrepack, postgres-decoderbufs, pgaudit. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

porfolio-Baron-Samedit

porfolio-Baron-Samedit this is a study about CVE-2021-3156: Heap-Based Buffer Overflow in Sudo Baron Samedit...

CVE-2026-44236

A flaw was found in rabbitmq-c. A malicious AMQP Advanced Message Queuing Protocol server or an on-path attacker can send an undersized frame size during the login handshake. This can lead to a heap buffer overflow, causing memory corruption and potentially a denial of service. Code execution is...

CVE-2026-42533

CVE-2026-42533 — nginx map/regex capture clobbering tracking site Source for the CVE-2026-42533 patch-status tracker: a single-page site recording which distributions have shipped a fix for the nginx map/regex capture-clobbering heap overflow. Where the facts live Everything about the bug —...

CVE-2026-35330

CVE-2026-35330 strongSwan: преждевременное переполнение кучи в парсере атрибутов EAP-SIM / EAP-AKA через целочисленное исчерпание Описание parseattributes в src/libsimaka/simakamessage.c:419 читает заголовки TLV, у которых байт length подсчитывает 4-байтовые слова. Для ветви ATRAND / ATENCRDATA:...

CVE-2024-4323

🇮🇱 BringThemHome NeverAgainIsNow 🇮🇱 We demand the safe return of all citizens who have been taken hostage by the terrorist group Hamas. We will not rest until every hostage is released and returns home safely. You can help bring them back home.https://stories.bringthemhomenow.net/ CVE-2024-4323...

CVE-2025-47981

🔵 CVE-2025-47981 — Windows SPNEGO NEGOEX 취약점 평가 스크립트 유형: 취약점 평가 — 탐지 / 규정 준수 점검 CVE: CVE-2025-47981 CVSS: 9.8 Critical AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CWE: CWE-122 — 힙 기반 버퍼 오버플로우 별칭: "SPNEGO Nightmare" / "Windows Authentication Wormable RCE" 패치: KB5062560 | 2025년 7월 Patch Tuesday Windows 시스템...

fgt-cve-2023-27997-exploit

fgt-cve-2023-27997-exploit FortiGate SSL‑VPN CVE‑2023‑27997 PoC-скрипт эксплойта с ROP-цепочкой Содержание Описание Затронутые версии Установка Использование Пример вывода Технические детали Предупреждения Источники Описание fgt-cve-2023-27997-exploit.py — это Proof‑of‑Concept PoC скрипт эксплойт...

CVE-2026-42533

CVE-2026-42533 — PoC-эксплойт для переполнения буфера в куче nginx Удалённое выполнение кода до аутентификации через затирание захватов при двухпроходной обработке Публичный PoC выпущен 2026-07-27 — Не ждите, патчите сейчас. | ---|--- CVE| CVE-2026-42533 CVSS 4.0| 9.2 Critical Тип| Переполнение...

CVE-2021-3156

CVE-2021-3156: Heap-Based Buffer Overflow in Sudo Baron Samedit Root Exploit No BruteForce All research credit: Qualys Research Team Check out the details on their blog. Manually installed Ubuntu 20.04 LTS and Sudo version 1.8.31 on Docker container for testing purpose and running the command...

CVE-2021-3156

Глубокий анализ эксплойт-цепочки: CVE-2021-3156 Baron Samedit Автор: IJ Baig Дата: 7 июля 2026 года 1. Идентификатор CVE, затронутые версии и подтверждение сборки Идентификатор CVE: CVE-2021-3156 Тип уязвимости: Переполнение буфера в куче heap-based buffer overflow Диапазон затронутых версий:...

CVE-2026-9256-POC

CVE-2026-9256-POC CVE-2026-9256 Nginx heap buffer overflow POC...

CVE-2026-42945

CVE-2026-42945 — NGINX Rift Переполнение буфера кучи в NGINXngxhttprewritemodule...

Baron-Samedit-Heap-Buffer-Overflow-CVE-2021-3156

Baron-Samedit-Heap-Buffer-Overflow-CVE-2021-3156 Version Vulnarable To The Exploit The Baron Samedit vulnerability CVE-2021-3156 affects sudo legacy versions 1.8.2 through 1.8.31p2 and stable versions 1.9.0 through 1.9.5p1. This heap-based buffer overflow flaw was introduced in July 2011 via comm...