CVE-2022-0918

CVE-2022-0918 Red Hat CVE page: https://access.redhat.com/security/cve/cve-2022-0918 Github issue with patches linked: https://github.com/389ds/389-ds-base/issues/5242 PoC The PoC application takes in a single IP, either IPv4 or IPv6 will work. By default it will send the message to port 389, thi...

CVE-2014-3466_PoC

Proof of Concept for CVE-2014-3466 GnuTLS buffer overflow: session id length check Information See: https://bugzilla.redhat.com/showbug.cgi?id=1101932 This is not a weaponized exploit. be warned: this python code is ugly, I pretty much handcrafted the ServerHello and spent only about five fifteen...

looney-tunables-CVE-2023-4911

PoC of CVE-2023-4911 Looney Tunables This is a PoC of CVE-2023-4911 a.k.a. "Looney Tunables" exploiting a bug in glibc dynamic loader's GLIBCTUNABLES environment variable parsing function parsetunables. Getting Started Executing program We can check if target is vulnerable env -i...

CVE-2025-67445

Overview A vulnerability in the TOTOLINK X5000R V9.1.0cu.2415 web management interface allows an unauthenticated remote attacker on the LAN to crash the web service via a segmentation fault. By sending an oversized HTTP POST request to the CGI endpoint, an attacker can trigger memory exhaustion,...

sudo-1.8.3p1-patched

sudo-1.8.3p1-patched This is a custom version of sudo, based on the sudo 1.8.3p1 package as provided by Canonical for Ubuntu 12.04 using the URLs below, with the CVE-2021-3156 patches applied. http://us.archive.ubuntu.com/ubuntu/pool/main/s/sudo/sudo1.8.3p1-1ubuntu3.7.dsc...

CVE-2026-110938

In Eclipse OpenJ9 versions up to 0.63.0, the JITServer component is vulnerable to denial of service due to improper boundary checks during protocol message and reply handling. An unauthenticated remote attacker or malicious JITServer can transmit malformed network payloads that cause out-of-bound...

CVE-2026-110938 JITServer: Multiple Denial of Service vulnerabilities via out-of-bounds heap reads during message and reply parsing

In Eclipse OpenJ9 versions up to 0.63.0, the JITServer component is vulnerable to denial of service due to improper boundary checks during protocol message and reply handling. An unauthenticated remote attacker or malicious JITServer can transmit malformed network payloads that cause out-of-bound...

CVE-2026-110938

Eclipse OpenJ9 versions up to 0.63.0 are vulnerable to a Denial of Service (DoS) via out-of-bounds heap reads in the JITServer component. The root cause is improper boundary checks during the handling of protocol messages and replies. An unauthenticated remote attacker or a malicious JITServer ca...

EUVD-2026-107139

In Eclipse OpenJ9 versions up to 0.63.0, the JITServer component is vulnerable to denial of service due to improper boundary checks during protocol message and reply handling. An unauthenticated remote attacker or malicious JITServer can transmit malformed network payloads that cause out-of-bound...

CVE-2010-1205

Sample exploit using CVE-2010-1205 vulnerability in libpng =1.4.2 gregbook - set of sample programs distributed with libpng sources generate - generates malicious png file which triggers heap-overflow while reading the file with libpng steps to reproduce: ./build.sh build all libraries and...

unzip_poc

CVE-2022-0529 and CVE-2022-0530 POC for unzip 6.0 CVE-2022-0529 & CVE-2022-0530 https://bugzilla.redhat.com/showbug.cgi?id=2051402 https://bugzilla.redhat.com/showbug.cgi?id=2051395...

PT-2026-120496

In Eclipse OpenJ9 versions up to 0.63.0, the JITServer component is vulnerable to denial of service due to improper boundary checks during protocol message and reply handling. An unauthenticated remote attacker or malicious JITServer can transmit malformed network payloads that cause out-of-bound...

CVE-2026-110673

A flaw was found in perl-Cpanel-JSON-XS. When the allowtags configuration is enabled, the "" character starts a tagged value. Its tag and value are decoded recursively, and each can start another tagged value. Unlike arrays and objects, this nesting is not counted against maxdepth. A maliciously...

CVE-2022-43343

Description for CVE-2022-43343 N-Prolog v1.91 was discovered to contain a global buffer overflow vulnerability in the function gettoken at Main.c Reproduction To reproduce the vulnerability, download a vulnerable version of N-Prolog v1.91 and compile the project: git clone...

CVE-2026-110673

Cpanel::JSON::XS versions before 4.80 for Perl allow stack exhaustion via nested tagged values under allowtags in decodetag. With allowtags, "" starts a tagged value. Its tag and value are decoded recursively, and each can start another tagged value. Unlike arrays and objects, this nesting is not...

CVE-2026-110673

The Cpanel::JSON::XS Perl module, in versions before 4.80 , is vulnerable to stack exhaustion via nested tagged values within the decode_tag function when allow_tags is enabled. Because the nesting of these tagged values is not counted against max_depth, a sequence of ( bytes can exhaust the C st...

EUVD-2026-104554

Cpanel::JSON::XS versions before 4.80 for Perl allow stack exhaustion via nested tagged values under allowtags in decodetag. With allowtags, "" starts a tagged value. Its tag and value are decoded recursively, and each can start another tagged value. Unlike arrays and objects, this nesting is not...

CVE-2026-110673 Cpanel::JSON::XS versions before 4.80 for Perl allow stack exhaustion via nested tagged values under allow_tags in decode_tag

Cpanel::JSON::XS versions before 4.80 for Perl allow stack exhaustion via nested tagged values under allowtags in decodetag. With allowtags, "" starts a tagged value. Its tag and value are decoded recursively, and each can start another tagged value. Unlike arrays and objects, this nesting is not...

PT-2026-117571

Cpanel::JSON::XS versions before 4.80 for Perl allow stack exhaustion via nested tagged values under allow tags in decode tag. With allow tags, "" starts a tagged value. Its tag and value are decoded recursively, and each can start another tagged value. Unlike arrays and objects, this nesting is...

CVE-2023-38545-sample

Quick description This showcases the cURL CVE-2023-38545. It is as lightweight as I could make it. Setup First, build the Docker Image: docker build . -t cveimage Next, we can simply run the image file, creating a temporary Docker Container which will get deleted once the container is stopped:...