CVE-2023-38545-sample

Quick description This showcases the cURL CVE-2023-38545. It is as lightweight as I could make it. Setup First, build the Docker Image: docker build . -t cveimage Next, we can simply run the image file, creating a temporary Docker Container which will get deleted once the container is stopped:...

CVE-2014-3466_PoC

Proof of Concept for CVE-2014-3466 GnuTLS buffer overflow: session id length check Information See: https://bugzilla.redhat.com/showbug.cgi?id=1101932 This is not a weaponized exploit. be warned: this python code is ugly, I pretty much handcrafted the ServerHello and spent only about five fifteen...

looney-tunables-CVE-2023-4911

PoC of CVE-2023-4911 Looney Tunables This is a PoC of CVE-2023-4911 a.k.a. "Looney Tunables" exploiting a bug in glibc dynamic loader's GLIBCTUNABLES environment variable parsing function parsetunables. Getting Started Executing program We can check if target is vulnerable env -i...

sudo-1.8.3p1-patched

sudo-1.8.3p1-patched This is a custom version of sudo, based on the sudo 1.8.3p1 package as provided by Canonical for Ubuntu 12.04 using the URLs below, with the CVE-2021-3156 patches applied. http://us.archive.ubuntu.com/ubuntu/pool/main/s/sudo/sudo1.8.3p1-1ubuntu3.7.dsc...

CVE-2025-67445

Overview A vulnerability in the TOTOLINK X5000R V9.1.0cu.2415 web management interface allows an unauthenticated remote attacker on the LAN to crash the web service via a segmentation fault. By sending an oversized HTTP POST request to the CGI endpoint, an attacker can trigger memory exhaustion,...

unzip_poc

CVE-2022-0529 and CVE-2022-0530 POC for unzip 6.0 CVE-2022-0529 & CVE-2022-0530 https://bugzilla.redhat.com/showbug.cgi?id=2051402 https://bugzilla.redhat.com/showbug.cgi?id=2051395...

CVE-2022-0918

CVE-2022-0918 Red Hat CVE page: https://access.redhat.com/security/cve/cve-2022-0918 Github issue with patches linked: https://github.com/389ds/389-ds-base/issues/5242 PoC The PoC application takes in a single IP, either IPv4 or IPv6 will work. By default it will send the message to port 389, thi...

CVE-2022-43343

Description for CVE-2022-43343 N-Prolog v1.91 was discovered to contain a global buffer overflow vulnerability in the function gettoken at Main.c Reproduction To reproduce the vulnerability, download a vulnerable version of N-Prolog v1.91 and compile the project: git clone...

xpdf-docker

Xpdf Docker Images This repository contains docker images for Xpdf version 4.04, which is vulnerable to CVE-2022-30524. Building the Images 📦 This repository contains the image in 3 flavours: bullseye/gcc : Debian "bullseye", built with gcc bullseye/afl : Debian "bullseye", built with...

CVE-2010-1205

Sample exploit using CVE-2010-1205 vulnerability in libpng =1.4.2 gregbook - set of sample programs distributed with libpng sources generate - generates malicious png file which triggers heap-overflow while reading the file with libpng steps to reproduce: ./build.sh build all libraries and...

Security Bulletin: A Vulnerability in IBM® Java SDK affect IBM WebSphere Application Server and WebSphere Application Server Liberty due to the July 2026 CPU plus deferred CVE-2026-16440

Summary There are multiple vulnerabilities in the IBM® SDK, Java™ Technology Edition that is shipped with IBM WebSphere Application Server and IBM WebSphere Application Server Liberty. The CVEs listed in this document might affect some configurations of IBM WebSphere Application Server traditiona...

CLEANSTART-2024-YM29296 ircII before 20210314 allows remote attackers to cause a denial of service (segmentation fault and client crash, disconnecting the victim from an IRC server) via a crafted CTCP UTC message

Security vulnerability affects the ircii package. ircII before 20210314 allows remote attackers to cause a denial of service segmentation fault and client crash, disconnecting the victim from an IRC server via a crafted CTCP UTC message...

CLEANSTART-2024-VX24328 segmentation fault was discovered in radare2 with adf command

Security vulnerability affects the radare2 package. A segmentation fault was discovered in radare2 with adf command...

CLEANSTART-2024-DP36454 Segmentation fault was found in UPX in PackLinuxElf64::invert_pt_dynamic() in p_lx_elf

Security vulnerability affects the upx package. A Segmentation fault was found in UPX in PackLinuxElf64::invertptdynamic in plxelf...

CLEANSTART-2024-YP08801 xterm before Patch #366 allows remote attackers to execute arbitrary code or cause a denial of service (segmentation fault) via a crafted UTF-8 combining character sequence

Security vulnerability affects the xterm package. xterm before Patch 366 allows remote attackers to execute arbitrary code or cause a denial of service segmentation fault via a crafted UTF-8 combining character sequence...

CLEANSTART-2024-VV95778 Empty or malformed p256-ECDH public keys may trigger a segmentation fault due values being improperly sanitized before being copied into memory and used

Security vulnerability affects the firefox-esr package. Empty or malformed p256-ECDH public keys may trigger a segmentation fault due values being improperly sanitized before being copied into memory and used...

CVE-2026-54610 LibreDWG: const-input mutation and crash in bit_TV_to_utf8 error handling

LibreDWG is a free C library to read and write DWG files. Prior to 0.14, bitTVtoutf8 in src/bits.c can write to the caller-provided src buffer despite accepting const input. On an iconv error other than E2BIG, the function frees its output buffer and passes the original input alias to bituexpand,...

EUVD-2026-114330

mouse07410/asn1c is an ASN.1 compiler. Prior to 1.2.5, OPEN TYPE decoding can dereference an unallocated member pointer and crash the consuming program. OPENTYPEaperget in OPENTYPEaper.c, OPENTYPEberget in OPENTYPEber.c, OPENTYPEoerget in OPENTYPEoer.c, and OPENTYPEuperget in OPENTYPEuper.c share...

PT-2026-133787

Name of the Vulnerable Software and Affected Versions mouse07410/asn1c versions prior to 1.2.5 Description An issue exists in the decoding of OPEN TYPE where the program may dereference an unallocated member pointer, leading to a segmentation fault and causing the consuming program to crash. This...

CVE-2023-27597

OpenSIPS is a Session Initiation Protocol SIP server implementation. Prior to versions 3.1.8 and 3.2.5, when a specially crafted SIP message is processed by the function rewriteruri, a crash occurs due to a segmentation fault. This issue causes the server to crash. It affects configurations...