unzip_poc

CVE-2022-0529 and CVE-2022-0530 POC for unzip 6.0 CVE-2022-0529 & CVE-2022-0530 https://bugzilla.redhat.com/showbug.cgi?id=2051402 https://bugzilla.redhat.com/showbug.cgi?id=2051395...

looney-tunables-CVE-2023-4911

PoC of CVE-2023-4911 Looney Tunables This is a PoC of CVE-2023-4911 a.k.a. "Looney Tunables" exploiting a bug in glibc dynamic loader's GLIBCTUNABLES environment variable parsing function parsetunables. Getting Started Executing program We can check if target is vulnerable env -i...

xpdf-docker

Xpdf Docker Images This repository contains docker images for Xpdf version 4.04, which is vulnerable to CVE-2022-30524. Building the Images 📦 This repository contains the image in 3 flavours: bullseye/gcc : Debian "bullseye", built with gcc bullseye/afl : Debian "bullseye", built with...

EUVD-2026-114330

mouse07410/asn1c is an ASN.1 compiler. Prior to 1.2.5, OPEN TYPE decoding can dereference an unallocated member pointer and crash the consuming program. OPENTYPEaperget in OPENTYPEaper.c, OPENTYPEberget in OPENTYPEber.c, OPENTYPEoerget in OPENTYPEoer.c, and OPENTYPEuperget in OPENTYPEuper.c share...

CVE-2010-1205

Sample exploit using CVE-2010-1205 vulnerability in libpng =1.4.2 gregbook - set of sample programs distributed with libpng sources generate - generates malicious png file which triggers heap-overflow while reading the file with libpng steps to reproduce: ./build.sh build all libraries and...

CVE-2014-3466_PoC

Proof of Concept for CVE-2014-3466 GnuTLS buffer overflow: session id length check Information See: https://bugzilla.redhat.com/showbug.cgi?id=1101932 This is not a weaponized exploit. be warned: this python code is ugly, I pretty much handcrafted the ServerHello and spent only about five fifteen...

CVE-2023-38545-sample

Quick description This showcases the cURL CVE-2023-38545. It is as lightweight as I could make it. Setup First, build the Docker Image: docker build . -t cveimage Next, we can simply run the image file, creating a temporary Docker Container which will get deleted once the container is stopped:...

CVE-2025-67445

Overview A vulnerability in the TOTOLINK X5000R V9.1.0cu.2415 web management interface allows an unauthenticated remote attacker on the LAN to crash the web service via a segmentation fault. By sending an oversized HTTP POST request to the CGI endpoint, an attacker can trigger memory exhaustion,...

CVE-2022-0918

CVE-2022-0918 Red Hat CVE page: https://access.redhat.com/security/cve/cve-2022-0918 Github issue with patches linked: https://github.com/389ds/389-ds-base/issues/5242 PoC The PoC application takes in a single IP, either IPv4 or IPv6 will work. By default it will send the message to port 389, thi...

sudo-1.8.3p1-patched

sudo-1.8.3p1-patched This is a custom version of sudo, based on the sudo 1.8.3p1 package as provided by Canonical for Ubuntu 12.04 using the URLs below, with the CVE-2021-3156 patches applied. http://us.archive.ubuntu.com/ubuntu/pool/main/s/sudo/sudo1.8.3p1-1ubuntu3.7.dsc...

CVE-2022-43343

Description for CVE-2022-43343 N-Prolog v1.91 was discovered to contain a global buffer overflow vulnerability in the function gettoken at Main.c Reproduction To reproduce the vulnerability, download a vulnerable version of N-Prolog v1.91 and compile the project: git clone...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: xorg-x11-server-Xwayland (UTSA-2026-147008)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-147008 advisory. A heap-based buffer over-read vulnerability was found in the X.org server's ProcXIGetSelectedEvents function. This issue occurs when byte-swapped length values are...

TencentOS Server 3: perl-DBI (TSSA-2026:1201)

"The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:1201 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: mariadb (UTSA-2026-146124)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146124 advisory. MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component subselect. Tenable has extracted the preceding description block directly fro...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: mariadb (UTSA-2026-146128)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146128 advisory. MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component Exectimetracker::getloops/Filesorttracker::reportuse/filesort. Tenable has...

Security Bulletin: SOAR App Host is vulnerable to using components with known vulnerabilities (CVE-2026-16440)

Summary The product includes vulnerable components e.g., framework libraries that may be identified and exploited with automated tools. SOAR APP host has addressed the applicable CVEs with an update. Vulnerability Details CVEID:CVE-2026-16440 DESCRIPTION: In Eclipse OpenJ9 versions up to 0.60, a...

CVE-2026-110938

In Eclipse OpenJ9 versions up to 0.63.0, the JITServer component is vulnerable to denial of service due to improper boundary checks during protocol message and reply handling. An unauthenticated remote attacker or malicious JITServer can transmit malformed network payloads that cause out-of-bound...

EUVD-2026-107139

In Eclipse OpenJ9 versions up to 0.63.0, the JITServer component is vulnerable to denial of service due to improper boundary checks during protocol message and reply handling. An unauthenticated remote attacker or malicious JITServer can transmit malformed network payloads that cause out-of-bound...

CVE-2026-110938 JITServer: Multiple Denial of Service vulnerabilities via out-of-bounds heap reads during message and reply parsing

In Eclipse OpenJ9 versions up to 0.63.0, the JITServer component is vulnerable to denial of service due to improper boundary checks during protocol message and reply handling. An unauthenticated remote attacker or malicious JITServer can transmit malformed network payloads that cause out-of-bound...

CVE-2026-110938 JITServer: Multiple Denial of Service vulnerabilities via out-of-bounds heap reads during message and reply parsing

In Eclipse OpenJ9 versions up to 0.63.0, the JITServer component is vulnerable to denial of service due to improper boundary checks during protocol message and reply handling. An unauthenticated remote attacker or malicious JITServer can transmit malformed network payloads that cause out-of-bound...