1760 matches found
BlackHat-Europe-2022
BlackHat-Europe-2022 Select Bugs From Binary Where Pattern Like CVE-1337-Days Abstract Static code review is an effective way to discover vulnerability variants and exploitation primitives, but two of the most challenging tasks for static analysis are the effective code pattern extraction from hu...
CVE-2021-32819
CVE-2021-32819 CVE-2021-32819 : SquirrellyJS mixes pure template data with engine configuration options through the Express render API. By overwriting internal configuration options, remote code execution may be triggered in downstream applications. Source...
process_overwriting
Process Overwriting Process Overwriting is a PE injection technique, closely related to Process Hollowing and Module Overloading. With its help, you can replace the main executable not a DLL of the target process. It works only for a newly created process - injection to existing processes is not...
ProcessStomping
ProcessStomping A variation of ProcessOverwriting to execute shellcode on an executable's section What is it For a more detailed explanation you can read my blog post Process Stomping, is a variation of hasherezade’s Process Overwriting and it has the advantage of writing a shellcode payload on a...
CVE-2025-5548
Technical study of vulnerability CVE-2025-5548 Introduction This work analyzes the vulnerability CVE-2025-5548 , associated with a stack buffer overflow in FreeFloat FTP Server v1.0. The main objective of the lab is to understand how a vulnerable application behaves when faced with manipulated...
Astra Linux – vulnerability in linux-6.1, linux-6.12, linux-6.18
In the Linux kernel, the following vulnerability has been resolved: Input: ims-pcu - fix type confusion in CDC union descriptor parsing The driver currently trusts the bMasterInterface0 from the CDC union descriptor without verifying that it matches the interface being probed. This could lead to...
Astra Linux – vulnerability in linux-6.1, linux-6.12, linux-6.18
In the Linux kernel, the following vulnerability has been resolved: ocfs2: avoid moving extents to occupied clusters For non-auto OCFS2IOCMOVEEXT operations, userspace supplies a physical megoal. ocfs2moveextent initializes newphyscpos from that goal and expects ocfs2probeallocgroup to replace it...
CVE-2026-120325
A flaw was found in Knip. An attacker could exploit a path traversal vulnerability by providing a manipulated workspaces configuration during file writing operations. This flaw allows unauthorized modification or overwriting of files outside the intended project directory. Mitigation --- CME...
Linux Distros Unpatched Vulnerability : CVE-2026-120067
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - For updatable cursors, which are enabled by default, psqlODBC adds hidden ctid and, for tables with OIDs, oid columns to the query. It copies each value into a...
CVE-2026-107029
Insecure permissions in rubenalfon Pile v1.1.3 allows unauthorized attackers to invoke an exported component, leading to arbitrary data access and overwriting...
CVE-2026-107027
Insecure permissions in lz233 Tarnhelm v1.8.2 versionCode 20250630 allows unauthorized attackers to invoke an exported component, leading to arbitrary data access and overwriting...
CVE-2026-107027
Insecure permissions in lz233 Tarnhelm v1.8.2 versionCode 20250630 allows unauthorized attackers to invoke an exported component, leading to arbitrary data access and overwriting...
CVE-2026-107029: n/a: Insecure permissions in rubenalfon Pile v1.1.3 allows unauthorized attackers to invoke an exported component, leading…
Insecure permissions in rubenalfon Pile v1.1.3 allows unauthorized attackers to invoke an exported component, leading to arbitrary data access and overwriting...
CVE-2026-107029
Insecure permissions in rubenalfon Pile v1.1.3 allows unauthorized attackers to invoke an exported component, leading to arbitrary data access and overwriting...
PT-2026-132845
Name of the Vulnerable Software and Affected Versions Docat versions prior to 1.6.0 Description An arbitrary file upload issue exists in the Upload API because the system fails to validate the uploaded file path or type. This allows authenticated users to overwrite sensitive configuration files o...
lz233 Tarnhelm security vulnerability
In version 1.8.2 of Tarnhelm, there is a security vulnerability stemming from insecure permissions on exported components. This may allow unauthorized attackers to invoke these exported components, leading to arbitrary data access and overwriting...
CVE-2026-107027
The lz233 Tarnhelm application, specifically version v1.8.2 (versionCode 20250630), is vulnerable to a security flaw caused by insecure permissions on exported components (CWE-926). This allows unauthorized attackers to invoke these components, which can lead to arbitrary data access and overwrit...
EUVD-2026-113176
Insecure permissions in lz233 Tarnhelm v1.8.2 versionCode 20250630 allows unauthorized attackers to invoke an exported component, leading to arbitrary data access and overwriting...
