CVE-2021-3156

CVE-2021-3156 Sudo prima della versione 1.9.5p2 contiene un errore off-by-one che può causare un overflow del buffer basato su heap, consentendo l'escalation dei privilegi a root tramite sudoedit -s e un argomento della riga di comando che termina con un singolo carattere backslash. Crediti:...

CVE-2022-3602

CVE−2022-3602 Was ist das? Dieses Dokument und Repository ist eine Aufarbeitung von CVE‑2022‑3602, einem Punycode‑Pufferüberlauf‑Problem in OpenSSL. Es ist ein "Anti‑POC" das Problem scheint nicht ausnutzbar zu sein und richtet sich an Leute, die ihre eigenen OpenSSL‑Builds pflegen, und an...

CVE-2026-63387

A flaw was found in Libevent, an event notification library. An off-by-one stack buffer overflow exists in the dnsnametolabels function when processing a name-bearing DNS record. A remote attacker could send a specially crafted DNS server response, which may lead to a crash or corruption of the...

CVE-2006-3747

File riguardanti la mia pubblicazione su bugtraq e il primo exploit funzionante per CVE-2006-3747 Apache modrewrite LDAP off-by-one buffer overflow. http://www.securityfocus.com/archive/1/443870 Data di rilascio pubblico del POC/Exploit: 2006-08-20 Autore: Jacobo Avariento Gimeno ID CVE:...

EUVD-2026-66452

In the Linux kernel, the following vulnerability has been resolved: xfs: fix off-by-one in rtrefcount btree root level validation xfsrtrefcountbtcomputemaxlevels sets mp-mrtrefcmaxlevels = mindmaxlevels, rmaxlevels + 1; where the trailing "+ 1" already accounts for the inode-root level, so the...

cve-2016-6187-poc

针对 https://duasynt.com/blog/cve-2016-6187-heap-off-by-one-exploit 的 PoC...

Baron-Samedit-Heap-Buffer-Overflow-CVE-2021-3156

Baron-Samedit-Débordement-de-Tas-Heap-CVE-2021-3156 Version Vulnérable à l'Exploit La vulnérabilité Baron Samedit CVE-2021-3156 affecte les versions legacy de sudo 1.8.2 à 1.8.31p2 et les versions stables 1.9.0 à 1.9.5p1. Ce défaut de débordement de tas basé sur le heap a été introduit en juillet...

OBO

Off-By-One Off-By-One सम्मेलनों से स्लाइड्स सभी वार्ताएँ देखें...

CVE-2021-3156

CVE-2021-3156 - Sudo में हीप-आधारित बफर अतिप्रवाह ⚠️ केवल शैक्षिक और अधिकृत सुरक्षा अनुसंधान उद्देश्यों के लिए मूल एक्सप्लॉइट लेखक मूल PoC लेखक Qualys Research Team के प्रति बहुत आभारी हैं विवरण Sudo 1.9.5p2 से पहले एक ऑफ-बाय-वन त्रुटि होती है जो हीप-आधारित बफर अतिप्रवाह का कारण बन सकती है, जो...

cve-2010-1938

🚀 CVE-2010-1938 FTP 오프바이원 익스플로잇 OPIE 라이브러리의 오프바이원 취약점CVE-2010-1938을 테스트하기 위한 간단한 Python 스크립트입니다. 이 취약점은 일부 FTP 서버에 영향을 미치며, 서비스 거부DoS 또는 임의 코드 실행을 허용할 수 있습니다. 📜 설명 이 스크립트는 일부 FTP 서버에서 사용되는 OPIE 라이브러리의 알려진 취약점CVE-2010-1938을 대상으로 합니다. 특수하게 조작된 사용자 이름을 전송함으로써, 스크립트는 FTP 서버에서 스택 오버플로를 유발하여 잠재적으로 원격 코...

cve-2021-3156

CVE-2021-3156 -- Baron Samedit Среда уязвимости Создание образа с помощью Dockerfille root@kitploit: docker build -t cve-2021-3156:ubuntu2004 . Создание контейнера с помощью образа root@kitploit: docker run --rm -it cve-2021-3156:ubuntu2004 /bin/bash Причина уязвимости В версиях Sudo до 1.9.5p2...

CVE-2023-40296

CVE-2023-40296 async-sockets-cpp 0.3.1 이하에는 udpsocket.hpp의 160-167행 부근에 있는 static void ReceiveFromUDPSocket udpSocket에서 off-by-one 버퍼 오버플로 취약점이 존재합니다. 이 버퍼 오버플로는 해당하는 모든 UDP 서버에 영향을 미칩니다. 원격 버퍼 오버플로는 UDP 소켓에 연결하여 큰 바이트 버퍼를 전송함으로써 트리거될 수 있습니다...

CVE-2026-46369 Nimiq: Validity store off by one error

Nimiq is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm. Through 1.5.0, the validity store uses a strict lower-bound comparison that expires a stored transaction too early relative to Transaction::isvalidat, allowing a remote attacker to repl...

CVE-2026-46369

Nimiq (Rust implementation of the Nimiq Proof-of-Stake protocol, Albatross consensus) is affected by an off-by-one error in its validity store through version 1.5.0 . The store uses a strict lower-bound comparison that expires a stored transaction one block too early relative to Transaction::is_v...

CVE-2026-80537

A flaw was found in the Linux kernel's XFS filesystem. An off-by-one error in the rtrefcount btree root level validation allows a local attacker to craft a malicious XFS image. When this image is mounted, it can lead to a slab-out-of-bounds write, causing a kernel panic and a denial of service Do...

CVE-2026-80537

In the Linux kernel, the following vulnerability has been resolved: xfs: fix off-by-one in rtrefcount btree root level validation xfsrtrefcountbtcomputemaxlevels sets mp-mrtrefcmaxlevels = mindmaxlevels, rmaxlevels + 1; where the trailing "+ 1" already accounts for the inode-root level, so the...

CVE-2026-80537

CVE-2026-80537 is an off-by-one error in the Linux kernel's XFS filesystem, specifically in the realtime refcount btree root level validation. The functions xfs_rtrefcountbt_verify() and xfs_iformat_rtrefcount() use > instead of >= when checking the on-disk root level, allowing a crafted XF...

CVE-2026-80537

In the Linux kernel, the following vulnerability has been resolved: xfs: fix off-by-one in rtrefcount btree root level validation xfsrtrefcountbtcomputemaxlevels sets mp-mrtrefcmaxlevels = mindmaxlevels, rmaxlevels + 1; where the trailing "+ 1" already accounts for the inode-root level, so the...

CVE-2026-80537 xfs: fix off-by-one in rtrefcount btree root level validation

In the Linux kernel, the following vulnerability has been resolved: xfs: fix off-by-one in rtrefcount btree root level validation xfsrtrefcountbtcomputemaxlevels sets mp-mrtrefcmaxlevels = mindmaxlevels, rmaxlevels + 1; where the trailing "+ 1" already accounts for the inode-root level, so the...

EUVD-2026-66130

Off-by-one Error vulnerability in Apache Tomcat impacting the N flag on the rewrite valves causes rewrite processing to restart at the second rule rather than the first rule. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from 10.1.0-M1 through 10.1.57, from 9.0.0.M1 through...