bouncer-overflow

PgBouncer-Absturz-PoC Dieses Repository enthält einen lokalen Proof of Concept für einen PgBouncer-Absturz, der durch einen Integer-Überlauf in verwundbaren PgBouncer-Versionen verursacht wird. Das enthaltene Docker-Setup baut PgBouncer 1.25.1, startet ein PostgreSQL-Backend, aktiviert die...

fgt-cve-2023-27997-exploit

fgt-cve-2023-27997-exploit Script de Exploit PoC com ROP Chain para FortiGate SSL‑VPN CVE‑2023‑27997 Conteúdo Descrição Versões Afetadas Instalação Uso Exemplo de Saída Detalhes Técnicos Avisos Referências Descrição fgt-cve-2023-27997-exploit.py é um script de exploit Proof‑of‑Concept PoC escrito...

Moderate: Red Hat Security Advisory: qemu-kvm security, bug fix, and enhancement update

An update for qemu-kvm is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling

A flaw was found in QEMU's virtio-blk device. The issue arises because the device does not properly validate the size of input descriptors before writing data. A malicious guest with high privileges could exploit this vulnerability by submitting a malformed virtio-blk SCSI request, leading to an...

CVE-2026-42945-Reverse-Shell-POC

CVE-2026-42945 NGINX Rift PoC di RCE con Reverse Shell Proof-of-concept di esecuzione remota di codice per CVE-2026-42945 , un overflow del buffer heap nel ngxhttprewritemodule di NGINX. Questo fork estende il PoC di trigger pubblico con un listener di reverse shell integrato e parametri di...

windows-x86-shellcode-poc

Preuve de concept de débordement de tampon Windows x86 pour débutants Ceci est un tutoriel simple et autonome sur les exploits de débordement de tampon basé sur la pile pour Windows 32 bits. Aucun guide externe requis — tout ce dont vous avez besoin est ici. Qu'est-ce que ce dépôt ? vulnerable.c ...

pentest-writeups

pentest-writeups Kioptrix Level 1 writeup - CVE-2003-0201 Samba trans2open Kioptrix Level 1 — Writeup di Penetration Testing Autore: Amirbek Raxmatullayev @americo444 Data: 2026-06-17 Piattaforma: VulnHub Difficoltà: Principiante Obiettivo: Ottenere accesso root 1. Configurazione dell'Ambiente...

SOC-L1-OSINT-Investigation-MikroTik-CVE-2018-1156

SOC L1 Bedrohungsuntersuchung: Mehrere exponierte Dienste von MikroTik RouterOS Analyst: Jonatan Alexander Guerrero Gomez | Rollen-Ziel: SOC L1 / Jr. Cybersecurity Analyst Status: Untersuchung abgeschlossen | Schweregrad: Hoch Zusammenfassung Proaktive Bedrohungssuche, die ein öffentlich...

CVE-2025-4517-tarfile-PATH_MAX-bypass

CVE-2025-4517 / CVE-2025-4330 — Bypass del filtro dati di Python tarfile tramite overflow di PATHMAX Autore: 0xDTC CVE: CVE-2025-4517 / CVE-2025-4330 Avviso: GHSA-6r6c-684h-9j7p Correzione CPython: PR 135037 Panoramica tarfile.extractallfilter="data" di Python dovrebbe estrarre archivi tar in mod...

CVE-2021-3156-Baron-Samedit

CVE-2021-3156 – Baron Samedit Buffer Overflow basato su heap in sudo | Analisi dello sfruttamento e mitigazione Panoramica CVE-2021-3156, noto come Baron Samedit , è una vulnerabilità di buffer overflow basato su heap nel programma sudo. Consente a qualsiasi utente locale non privilegiato di...

thm-ice-icecast-rce-privesc

TryHackMe — Ice: Icecast 2.0.1 RCE & Windows-Privilegieneskalation Plattform: TryHackMe Ziel-Betriebssystem: Windows 7 / Windows Server 2008 R2 Schwierigkeit: Einfach Kategorie: Buffer Overflow RCE, lokale Privilegieneskalation Zusammenfassung Dieser Bericht dokumentiert die vollständige...

CVE-2026-14266

CVE-2026-14266 — Overflow del buffer heap nel decoder XZ di 7-Zip Gravità critica | CVSS: 8.8 Alta | CWE-122: Buffer overflow basato su heap Versioni interessate: 7-Zip ≤ 26.01 | Corretto: 7-Zip 26.02 2026-06-25 Scoperto e analizzato da: Li Yuxuan liyuxuan504-byte e team Sintesi Esecutiva Nelle...

nGixshell

nGixShell è uno scanner per CVE di nginx e un framework di exploit RCE. Include una proof-of-concept funzionante per CVE-2026-42945 — un heap buffer overflow critico in ngxhttprewritemodule — e uno scanner che copre 53 CVE di nginx con probe HTTP automatizzati, fingerprinting, rilevamento/bypass...

thm-cybersec-portfolio

TryHackMe Notizen — Cybersicherheits-Portfolio Persönliche Notizen und Zusammenfassungen abgeschlossener TryHackMe-Räume. Erstellt als Studienreferenz und Portfolio für IT-Sicherheitsrollen. Abgeschlossene Räume | Raum| Thema ---|---|--- 01| Linux Privilege Escalation|...

CVE-2026-78169

A vulnerability was detected in UTT HiPER 1250GW up to 3.2.7-210907-180535. This impacts the function strcpy of the file /goform/aspRemoteApConfTempSend of the component HTTP Request Handler. Performing a manipulation of the argument Profile results in stack-based buffer overflow. The attack is...

CVE-2026-78170

A flaw has been found in UTT HiPER 1200GW up to 2.5.3-170306. Affected is the function strcpy of the file /goform/formConfigFastDirectionW. Executing a manipulation of the argument ssid can lead to buffer overflow. The attack may be performed from remote. The exploit has been published and may be...

CVE-2026-78170

UTT HiPER 1200GW (up to version 2.5.3-170306) is affected by a remote buffer overflow in the strcpy function within /goform/formConfigFastDirectionW. An authenticated attacker (low privileges) can exploit this by manipulating the ssid argument, potentially achieving full compromise of confidentia...

EUVD-2026-64692

A flaw has been found in UTT HiPER 1200GW up to 2.5.3-170306. Affected is the function strcpy of the file /goform/formConfigFastDirectionW. Executing a manipulation of the argument ssid can lead to buffer overflow. The attack may be performed from remote. The exploit has been published and may be...

CVE-2026-78170 UTT HiPER 1200GW formConfigFastDirectionW strcpy buffer overflow

A flaw has been found in UTT HiPER 1200GW up to 2.5.3-170306. Affected is the function strcpy of the file /goform/formConfigFastDirectionW. Executing a manipulation of the argument ssid can lead to buffer overflow. The attack may be performed from remote. The exploit has been published and may be...

EUVD-2026-64691

A vulnerability was detected in UTT HiPER 1250GW up to 3.2.7-210907-180535. This impacts the function strcpy of the file /goform/aspRemoteApConfTempSend of the component HTTP Request Handler. Performing a manipulation of the argument Profile results in stack-based buffer overflow. The attack is...