CVE-2025-5548

Memory Corruption Research & Exploitation Lab CVE-2025-5548 Advanced Vulnerability Analysis on Windows 11 Environment English Version Project Overview This repository documents a professional-grade cybersecurity research project focused on CVE-2025-5548 : a Stack-based Buffer Overflow vulnerabili...

CVE-2025-15467

CVE-2025-15467: OpenSSL CMS AuthEnvelopedData Stack Buffer Overflow Overview CVE-2025-15467 is a critical stack buffer overflow vulnerability in OpenSSL's CMS Cryptographic Message Syntax parsing code. The vulnerability exists in the evpciphergetasn1aeadparams function when processing AES-GCM...

katana

Katana A BootROM exploit for Qualcomm devices released within 2016 til 2019. Brief Explanation of the Exploit With the MSM8998 Nazgul SoC, the command 0x13 SAHARARESETSTATEMACHINEID was added. The command called into bootsaharaentry, which is supposed to reinitialize Sahara. The flaw is that each...

CVE-2026-53921

🚨 CVE-2026-53921 - odhcpd OpenWrt odhcpd의 치명적인 스택 기반 버퍼 오버플로 원격의 인증되지 않은 스택 기반 버퍼 오버플로로, 루트 권한 으로의 잠재적 원격 코드 실행RCE을 허용합니다. 📖 개요 ⚡ 설명 CVE-2026-53921은 OpenWrt DHCPv6 서버odhcpd에 영향을 미치는 치명적인 스택 기반 버퍼 오버플로 입니다. 원격의 인증되지 않은 공격자는 특수하게 제작된 DHCPv6 REQUEST 패킷을 전송하여 메모리 손상을 유발할 수 있으며, 이는 루트 권한을 사용한 임의 코드 실행...

CVE-2022-30040

Tenda AX1803 v1.0.0.12890 서비스 거부DoS 취약점 개요 제조사 웹사이트 정보: https://www.tenda.com.cn/profile/contact.html 펌웨어 다운로드 주소: https://www.tenda.com.cn/download/default.html 취약점 설명 이 취약점은 rootfsubifs 파일 시스템의 / bin / tdhttpd에 있는 / goform / setsystimecfg에 존재합니다. 공격자는 http://ip/goform/SetSysTimeCfg에 접근하고 ntpser...

CVE-2026-85508

A stack-based buffer overflow exists in FreeIPMI's ipmi-oem tool, in the Dell OEM handler for the get-system-info cmc-ipv6-info subcommand. The vulnerable function outputdellsysteminfocmcipv6info uses a 256-byte stack buffer but allows up to 65536 bytes of data to be copied from a BMC response...

CVE-2006-6184

CVE-2006-6184 이것은 CVE-2006-6184를 위한 파이썬 기반의 독립 실행형 익스플로잇입니다. 이 익스플로잇은 Allied Telesyn TFTP Server AT-TFTP 1.9 및 이전 버전에서 스택 기반 버퍼 오버플로를 유발하여, 원격 공격자가 서비스 거부를 일으키거나 임의의 코드를 실행할 수 있게 합니다. 빠른 시작 0. exploit/multi/handler로 리스닝 상태를 유지하세요. 1. python generate.py LHOST LPORT PAYLOAD RHOST RPORT를 실행하세요 PAYLO...

libmsm_acdb_exploit

Original code is written by @gorohkun https://www.codeaurora.org/projects/security-advisories/stack-based-buffer-overflow-acdb-audio-driver-cve-2013-2597...

CVE-2025-22457

PoC for CVE-2025-22457 A remote unauthenticated stack based buffer overflow affecting Ivanti Connect Secure, Pulse Connect Secure, Ivanti Policy Secure, and ZTA Gateways Overview This is a proof of concept exploit to demonstrate exploitation of CVE-2025-22457. For a complete technical analysis of...

CVE-2023-38545

usage root@kitploit: git clone https://github.com/imfht/CVE-2023-38545 cd CVE-2023-38545/curl-7.74.0 && ./configure --with-openssl make -j 4 python3 socks.py & export ALLPROXY=socks5h://127.0.0.1:9050 ./curl-7.74.0/src/curl $python3 -c "print'A'10000, end=''" -vvvv proof for details please see:...

kartlanpwn

Kart"LAN"Pwn CVE-2024-45200 Information & Proof-of-Concept for Mario Kart 8 Deluxe's "KartLANPwn" stack-based buffer overflow vulnerability Written by Chad Hyatt...

CVE-2026-85504

A flaw was found in FreeIPMI. This vulnerability, a stack-based buffer overflow, could allow a remote attacker to achieve arbitrary code execution. The flaw occurs when FreeIPMI processes specially crafted Fujitsu System Event Log SEL long-text responses, leading to a system compromise. Mitigatio...

CVE-2026-85507

A flaw was found in FreeIPMI. This vulnerability, a stack-based buffer overflow in the ipmi-oem component, can be exploited by a remote attacker through a crafted cmc-info subcommand to dell get-system-info. Successful exploitation could lead to arbitrary code execution. Mitigation Restrict IPMI...

CVE-2025-40634

CVE-2025-40634 The TP-Link Archer AX50 router is vulnerable to a stack-based buffer overflow on its firmware version 1.0.14 Build 20240108 rel.426554555, leading to Remote Code Execution both in the LAN and in the WAN side. This vulnerability has the same root cause as CVE-2020-10881, found by th...

cve-2024-27130-poc

CVE-2024-27130-poc CVE-2024-27130 is a critical vulnerability affecting QNAP Network Attached Storage NAS devices. The flaw originates from the unsafe use of the strcpy function in the NoSupportACL function of the share.cgi script within the QTS operating system, leading to a stack buffer overflo...

CVE-2025-5548

Breaking FreeFloat FTP: analysis and exploitation of CVE-2025-5548 Anderson Steven — Master in Cybersecurity, Module 6 Vulnerabilities Individual assignment: Methodology for vulnerability analysis and exploitation Why this repository I did not want to simply hand in "here is the exploit working"...

CVE-2023-0179-PoC

Needle CVE-2023-0179 취약점 공격 이 저장소는 최근에 발견된 nftables 서브시스템의 취약점에 대한 익스플로잇을 포함하고 있습니다. 이 취약점은 CVE-2023-0179로 할당되었으며, Linux 5.5부터 6.2-rc3까지의 모든 버전에 영향을 미칩니다. 익스플로잇은 6.1.6에서 테스트되었습니다. 취약점 세부 정보와 설명은 oss-security에서 확인할 수 있습니다. 빌드 방법 make needle 명령어를 실행하여 해당 실행 파일을 생성하면 됩니다. 빌드가 성공하려면 libmnl과 libnftnl이...

CVE-2026-11105-Stack-Buffer-Overflow-in-Custom-Base64-Decoder

CVE-2026-11105 – カスタムBase64デコーダのスタックバッファオーバーフロー プログラムコード C root@kitploit: // base64vuln.c - Vulnerable Base64 decoder include include include int base64decodeconst char in, sizet inlen, char out, sizet outlen static const char table =...

DrayTek-Exploit

CVE-2022-23093 FreeBSD Stack-Based Overflow Informations ⚠️ The shellcode that is used by default is FreeBSD/x86-64 - execve - 28 bytes from Gitsnik change it and put your own one for starting ⚠️ Details of Vulnerability The ping utility, used to solicit an ICMP ECHORESPONSE from a host or gateway,...

CVE-2019-17147

CVE-2019-17147: TP-Link TL-WR841N Exploitation Overview This repository documents the comprehensive reverse engineering and exploitation of CVE-2019-17147 , a critical remote code execution RCE vulnerability in the TP-Link TL-WR841N router MIPSEL architecture. The vulnerability resides in the htt...