ai-vuln-rediscovery-nginx-cve-2026-42945

AI-Assisted Rediscovery of CVE-2026-42945 in nginx This repository documents a reproducible AI-assisted vulnerability rediscovery experiment against nginx ngxhttprewritemodule, later associated with CVE-2026-42945. The experiment is intentionally narrow. The vulnerable file,...

CVE-2009-0182

VUPlayer 2.49 Local Buffer Overflow to Arbitrary Code Execution Program Version: VUPlayer 2.49 Vulnerability: local buffer overflow when importing .wax playlist file that will lead to arbitrary code execution Exploitation: Local Buffer Overflow CVE: CVE-2009-0182 VUPlayer2.49poc.py : without bypa...

CVE-2019-10999

D-Link Exploit The exploit exists in the devices server, alphapd, when processing wireless.htm prior to displaying it to the user. If WEPEncryption is provided in the URL this leads to a buffer overflow if the value is longer than 0x28 bytes. A URL of the form:...

CVE

cve: A collection of code pertaining to CVE-2016-0728 various authors Excerpts from Linux, showing the evolution and fix of the bug Exploit code from Perception Point with added comments that explain what each line does. A short script that uses the leak to increment usage count, useful for...

trans2open-CVE-2003-0201

Samba versions 2.2.0 to 2.2.8 This exploits the buffer overflow found in Samba versions 2.2.0 to 2.2.8. This particular module is capable of exploiting the flaw on x86 Linux systems that do not have the noexec stack option set. NOTE: Some older versions of RedHat do not seem to be vulnerable sinc...

CVE-2021-3156-Baron-Samedit

CVE-2021-3156 – Baron Samedit Heap-Based Buffer Overflow in sudo | Exploitation & Mitigation Analysis Overview CVE-2021-3156, known as Baron Samedit , is a heap-based buffer overflow vulnerability in the sudo program. It allows any unprivileged local user to gain root privileges on vulnerable...

CVE-2026-41089

🚨 CVE-2026-41089 - Critical Windows Netlogon Remote Code Execution RCE ⚠️ A critical Windows Netlogon vulnerability allowing unauthenticated remote code execution on domain controllers. 📖 Overview CVE-2026-41089 is a critical vulnerability affecting the Windows Netlogon service. The flaw originate...

scanginx

Scanginx Scanner For Nginx - Remote Integer Overflow Vulnerability Nginx versions since 0.5.6 up to and including 1.13.2 are vulnerable to integer overflow vulnerability in nginx range filter module resulting into leak of potentially sensitive information triggered by specially crafted request...

CVE-2017-14980_syncbreeze_10.0.28_bof

Exploit - CVE-2017-14980 - Sync Breeze Enterprise v10.0.28 This repository contains a proof-of-concept buffer overflow exploit BOF for Sync Breeze Enterprise version 10.0.28, targeting the vulnerability identified as CVE-2017-14980. Description The vulnerability exists due to improper input...

AppleDOS

AppleDOS CVE-2018-4407 Based on CVE-2018-4407 https://lgtm.com/blog/applexnuicmperrorCVE-2018-4407, this tweet, and this video. The bug is heap overflow vulnerability in bad packet handling when OS try to send ICMP message containing segments from bad packet back to the sender. This POC will...

CVE-2021-3064

CVE-2021-3064: Pan-OS Remote Buffer Overflow + HTTP Smuggling Exploit This exploit uses an HTTP Smuggling vuln to deliver a payload to an otherwise inaccessible endpoint on Pan-OS firewalls; the endpoint is vulnerable to an overflow that can be exploited to run arbitrary code as root on the...

CVE-2017-14980

Exploit-CVE-2017-14980 PoC exploit for CVE-2017-14980 — a stack-based buffer overflow vulnerability in Sync Breeze Enterprise 10.0.28. 📖 Full technical analysis of the exploit: 👉 https://davigsantana.github.io/posts/buffer-overflow/ About This repository contains a proof-of-concept PoC developed...

CVE-2019-16724

Vulnerability Description File Sharing Wizard 1.5.0 allows a remote attacker to obtain arbitrary code execution by exploiting a Structured Exception Handler SEH based buffer overflow in an HTTP POST parameter. This exploit was tested on windows 7 Home. It will certainly break when on other...

CVE-2023-6931

CVE-2023-6931 Kernel Panic PoC for CVE-2023-6931 Description CVE-2023-6931 is a vulnerability in perfevent that leads to a heap buffer overflow caused by an integer overflow in the readsize of a group. What is a Performance Event perf event? perfevents is a performance monitoring and analysis...

CVE-2018-4407-iOS-exploit

CVE-2018-4407 iOS Attack Exploit CVE-2018-4407 is a Simple and Very Fast BOF attack Against iOS/mac that can lead to DOS. The vulnerability is a heap buffer overflow in the networking code in the XNU operating system kernel. XNU is used by both iOS and macOS, which is why iPhones, iPads, and...

Winrar-CVE-2023-40477-POC

CVE-2023-4047 PoC By Wild Pointer Read Research: https://wildptr.io/winrar-cve-2023-40477-poc-new-vulnerability-winrar-security-research/ Recvol3.cpp Vulnerability: https://www.rarlab.com/vulnrev3names.html, https://www.win-rar.com/ Vulnerable: WinRAR = 6.22 How to Test? You can generate your own...

CVE-2017-7529

Nginx Integer Overflow Vulnerability CVE-2017-7529 Vulnerability Information When using the nginx standard module, an attacker can obtain cache file header information in the response by sending a header request containing a maliciously crafted range field. In certain configurations, the cache fi...

CVE-2017-8367

CVE-2017-8367 PoC exploit for vulnerability CVE-2017-8367 Easy Mov Converter Register functionality Stack-Based Buffer Overflow. Usage Execute script and the file POCPayload.txt will be created containing the payload. python3 payloadgeneratorCVE-2017-15950.py Open the output file on notepad and...

libwebp-checker

中文 | EN CVE-2023-4863 libwebp dependency check tools This tool checks if your server's application or process that is affected by CVE-2023-4863 libwebp Heap buffer overflow Version above 0.5.0. Run this script in your production environment carefully. Result Screen Shot Scan Result Table of...

Exim-CVE-2019-15846

Exim CVE-2019-15846 PoC materials to exploit CVE-2019-15846. Blogpost explaining the PoC is available on Synacktiv Blog. This PoC help generate spool files used exploit a heap overflow in exim. Two example spool files are given in 1i7Jgy-0002dD-Pb-D and 1i7Jgy-0002dD-Pb-H. A specialy crafted spoo...