CVE-2006-3747

File riguardanti la mia pubblicazione su bugtraq e il primo exploit funzionante per CVE-2006-3747 Apache modrewrite LDAP off-by-one buffer overflow. http://www.securityfocus.com/archive/1/443870 Data di rilascio pubblico del POC/Exploit: 2006-08-20 Autore: Jacobo Avariento Gimeno ID CVE:...

OBO

Off-By-One Slide dalle conferenze Off-By-One Guarda tutti i talk Anno ↓| Slide| Playlist YouTube ---|---|--- 2024| Slide del Giorno 1...

CVE-2022-3602

CVE−2022-3602 Cos'è questo? Questo documento e repository sono un write-up di CVE−2022-3602, un problema di buffer overflow in punycode in OpenSSL. È un "anti-POC" il problema non sembra sfruttabile destinato a chi mantiene le proprie build di OpenSSL e ai manutentori di compilatori. C'è un CVE...

Chromium: CVE-2026-79148 Off-by-one error in DevTools

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

cve-2010-1938

🚀 Exploit FTP Off-by-One CVE-2010-1938 Un semplice script Python per testare una vulnerabilità off-by-one nella libreria OPIE CVE-2010-1938. Questa vulnerabilità colpisce alcuni server FTP e può consentire Denial of Service DoS o esecuzione arbitraria di codice. 📜 Descrizione Questo script prende...

CVE-2023-40296

CVE-2023-40296 async-sockets-cpp fino alla versione 0.3.1 contiene una vulnerabilità di buffer overflow off-by-one in static void ReceiveFromUDPSocket udpSocket in udpsocket.hpp, intorno alle righe 160-167. Il buffer overflow interessa tutti i server UDP corrispondenti. Il remote buffer overflow...

CVE-2026-80712

In the Linux kernel, the following vulnerability has been resolved: spi: spi-qpic-snand: write the feature value before executing SETFEATURE qcomspisendcmdaddr programs NANDFLASHCMD/NANDEXECCMD and submits the descriptors, which makes the controller execute the command immediately. For...

CVE-2026-80603

In the Linux kernel, the following vulnerability has been resolved: netfilter: nfconntrackirc: fix parsedcc off-by-one OOB read parsedcc treats dataend as an inclusive end pointer, but its only caller passes datalimit = ibptr + datalen, which points one past the last valid byte. The newline searc...

CVE-2026-80712

This vulnerability affects the Linux kernel's spi-qpic-snand driver (Qualcomm QPIC SPI-NAND controller). The root cause is an off-by-one in SET_FEATURE command handling : qcom_spi_send_cmdaddr() submits and executes the command immediately, but the feature value is only written to NAND_FLASH_FEAT...

CVE-2026-80712 spi: spi-qpic-snand: write the feature value before executing SET_FEATURE

In the Linux kernel, the following vulnerability has been resolved: spi: spi-qpic-snand: write the feature value before executing SETFEATURE qcomspisendcmdaddr programs NANDFLASHCMD/NANDEXECCMD and submits the descriptors, which makes the controller execute the command immediately. For...

CVE-2026-80603 netfilter: nf_conntrack_irc: fix parse_dcc() off-by-one OOB read

In the Linux kernel, the following vulnerability has been resolved: netfilter: nfconntrackirc: fix parsedcc off-by-one OOB read parsedcc treats dataend as an inclusive end pointer, but its only caller passes datalimit = ibptr + datalen, which points one past the last valid byte. The newline searc...

EUVD-2026-67479

In the Linux kernel, the following vulnerability has been resolved: netfilter: nfconntrackirc: fix parsedcc off-by-one OOB read parsedcc treats dataend as an inclusive end pointer, but its only caller passes datalimit = ibptr + datalen, which points one past the last valid byte. The newline searc...

CVE-2026-80603

An off-by-one out-of-bounds read in the Linux kernel's netfilter nf_conntrack_irc module affects the parse_dcc() function. The function treats data_end as an inclusive bound, but its caller passes an exclusive end pointer (ib_ptr + datalen). The newline search loop iterates with

CVE-2026-80603

In the Linux kernel, the following vulnerability has been resolved: netfilter: nfconntrackirc: fix parsedcc off-by-one OOB read parsedcc treats dataend as an inclusive end pointer, but its only caller passes datalimit = ibptr + datalen, which points one past the last valid byte. The newline searc...

cve-2021-3156

CVE-2021-3156 -- Baron Samedit Ambiente di vulnerabilità Crea un'immagine usando Dockerfile root@kitploit: docker build -t cve-2021-3156:ubuntu2004 . Crea un contenitore usando l'immagine root@kitploit: docker run --rm -it cve-2021-3156:ubuntu2004 /bin/bash Causa della vulnerabilità Nelle version...

cve-2016-6187-poc

PoC für https://duasynt.com/blog/cve-2016-6187-heap-off-by-one-exploit...

CVE-2021-3156

CVE-2021-3156 Sudo prima della versione 1.9.5p2 contiene un errore off-by-one che può causare un overflow del buffer basato su heap, consentendo l'escalation dei privilegi a root tramite sudoedit -s e un argomento della riga di comando che termina con un singolo carattere backslash. Crediti:...

CVE-2026-63387

A flaw was found in Libevent, an event notification library. An off-by-one stack buffer overflow exists in the dnsnametolabels function when processing a name-bearing DNS record. A remote attacker could send a specially crafted DNS server response, which may lead to a crash or corruption of the...

EUVD-2026-66452

In the Linux kernel, the following vulnerability has been resolved: xfs: fix off-by-one in rtrefcount btree root level validation xfsrtrefcountbtcomputemaxlevels sets mp-mrtrefcmaxlevels = mindmaxlevels, rmaxlevels + 1; where the trailing "+ 1" already accounts for the inode-root level, so the...

Baron-Samedit-Heap-Buffer-Overflow-CVE-2021-3156

Baron-Samedit-Débordement-de-Tas-Heap-CVE-2021-3156 Version Vulnérable à l'Exploit La vulnérabilité Baron Samedit CVE-2021-3156 affecte les versions legacy de sudo 1.8.2 à 1.8.31p2 et les versions stables 1.9.0 à 1.9.5p1. Ce défaut de débordement de tas basé sur le heap a été introduit en juillet...