inetutils-CVE-2019-0053-Patched-PKGBUILD

inetutils hasn't been updated in 5 years, and neither has the official Arch package. A patch has been released that addresses CVE-2019-0053 buffer overflow exploit from the use of sprintf instead of snprintf, but there's no official release in sight. Honestly, there's a lot more wrong with using...

CVE-2026-5201

CVE-2026-5201 Heap-based buffer overflow in gdk-pixbuf JPEG loader Hi, I'm Kağan Çapar. I discovered a heap-based buffer overflow vulnerability in gdk-pixbuf's JPEG image loader that affects virtually all Linux desktop environments. The vulnerability was assigned CVE-2026-5201 and acknowledged by...

setcred

FreeBSD setcred2 — research artifacts This subdirectory collects the write-up and working exploits for the setcred2 stack buffer overflow in FreeBSD 14.x kernel. The vulnerability itself is fully documented in setcred.txt. The short version: kernsetcredcopyinsuppgroups uses sizeofgroups where...

flow_divert-heap-overflow

flowdivert-heap-overflow flowdivert-heap-overflow is a proof-of-concept exploit for CVE-2016-1827, which was patched in OS X El Capitan 10.11.5 and iOS 9.3.2. The vulnerability is a series of unchecked arithmetic operations on an untrusted length supplied from user space in the function...

CVE-2023-39063

CVE-2023-39063 This repository contains an exploit for the vulnerability CVE-2023-39063 found in the RaidenFTPD v2.4.4005 software. The exploit has been created to work with Python 3. Exploit Details Python 3 code to exploit a SEH based Buffer Overflow vulnerability in RaidenFTPD v.2.4.4005. This...

CVE-2023-3519

Exploit Repository Stack-Overflow on Citrix CVE-2023-3519 Video Demonstration PoC: https://github.com/Mohammaddvd/CVE-2023-3519/assets/108727157/97fde2d9-2110-40bb-ae08-19163927115c Disclaimer This code is intended solely for educational purposes and ethical use in understanding security...

CVE-2021-43229

CVE-2021-43229 Walkthrough Public information Windows NTFS Elevation of Privilege Vulnerability Unique from: CVE-2021-43230 CVE-2021-43231 Patch: Dec 14, 2021 According to @AravGarg3 on Twitter, CVE-2021-43229 seems to be exploitable and related to an integer overflow. Source :...

CVE-2025-47256

CVE-2025-47256 Stack overflow in LibXMP Description A stack-based buffer overflow vulnerability exists in the depackpha function of libxmp, a library for module music playback. The vulnerability is triggered when parsing malformed Pha Packer PHA module files. Improper bounds checking on a local...

Router-Exploit-Shovel

Router Exploit Shovel Automated Application Generation for Stack Overflow Types on Wireless Routers Router exploits shovel is an automated application generation tool for stack overflow types on wireless routers. The tool implements the key functions of exploits, it can adapt to the length of the...

CVE-2016-6187_LPE

CVE-2016-6187 - Linux Kernel Exploit Kernel Exploit for CVE-2016-6187 Local Privilege Escalation affected versions: 4.6.5 Exploit was developed against a custom compiled 4.6 kernel + buildroot kconfig coming soon and defeats KASLR, SMEP, SMAP KPTI not available for 4.6 Presentation slides...

badblood

Bad Blood Bad Blood is an exploit for CVE-2021-20038, a stack-based buffer overflow in the httpd binary of SMA-100 series systems using firmware versions 10.2.1.x. I've written a lot of the technical details here: AttackerKB CVE-2021-20038 The exploit, as written, will open up a telnet bind shell...

-CVE-2020-0796-SMBGhost-Windows-10-SMBv3-Remote-Code-Execution-Vulnerability

CVE-2020-0796 Remote overflow POC POC to check for CVE-2020-0796 / "SMBGhost" Usage Make sure Python is installed, then run cve-2020-0796.py...

CVE-2023-4863

level 1: craft.c - bad.webp exist: docker 813b6b757038 /webp cd CVE-2023-4863 make -f makefile.unix -B fatal error: jpeglib.h: No such file or directory apt-get update apt-get install libjpeg-dev fatal error: png.h: No such file or directory apt-get install libpng-dev fatal error: tiffio.h: No su...

Windows-Kernel-Exploitation

1. Non-Paged Pool Overflow Exploitation with Named Pipes Techniques based on named pipes for pool overflow exploitation demonstrated on CVE-2020-17087 and an off-by-one overflow 2. Segment Heap VS Allocator Metadata Abuse Techniques for turning a potentially limited write primitive eg a pool...

CVE-2023-28218

Report CVE-2023-28218 Bug overview Bug leading to privilege escalation in the Windows kernel. The bug appears in the driver Windows Ancillary Function Driver for WinSock AFD.sys. The bug was released in the patch dated 11/04/2023. It has a CVSS:3.1 7.0 / 6.1 score and is rated as Important. Bug...

CVE-2021-3156

CVE-2021-3156 CVE-2021-3156: Sudo heap overflow exploit for Debian 10 Vulnerability analysis and exploit development: https://syst3mfailure.io/sudo-heap-overflow Exploit designed for: Sudo: Version 1.8.27 1.8.27-1+deb10u1 Checksum sha256:...

CVE-2020-8597

CVE-2020-8597 eap.c in pppd in ppp 2.4.2 through 2.4.8 has an rhostname buffer overflow in the eaprequest and eapresponse functions. If you manage to get "EAP: unauthenticated peer name" long enough, seems like my client limits it to 255, you can do Buffer Overflow. You still have to beat the Sta...

CVE-2021-3156

CVE-2021-3156 Sudo Baron Samedit This repository is CVE-2021-3156 exploit targeting Linux x64. For writeup, please visit https://datafarm-cybersecurity.medium.com/exploit-writeup-for-cve-2021-3156-sudo-baron-samedit-7a9a4282cb31 Credit to Braon Samedit of Qualys for the original advisory. Files...

CVE-2014-0195

CVE-2014-0195 OpenSSL heap overflow PoC CVE-2014-0195...

CVE-2014-4481

CoreGraphics CCITT Memory Corruption - CVE-2014-4481 Apple CoreGraphics framework fails to validate the input when parsing CCITT group 3 encoded data resulting in a heap overflow condition. A small heap memory allocation can be overflowed with controlled data from the input resulting in arbitrary...