kartlanpwn

Kart"LAN"Pwn CVE-2024-45200 Information & Proof-of-Concept for Mario Kart 8 Deluxe's "KartLANPwn" stack-based buffer overflow vulnerability Written by Chad Hyatt...

CVE-2025-0282

PoC for CVE-2025-0282 Remote Unauthenticated Stack Buffer Overflow in Ivanti Products Overview This proof-of-concept demonstrates exploitation of CVE-2025-0282, a critical vulnerability affecting: Ivanti Connect Secure Ivanti Policy Secure Ivanti Neurons for ZTA gateways Based on watchTowr's...

EUVD-2026-86752

In the Linux kernel, the following vulnerability has been resolved: drm/rockchip: analogixdp: fix unchecked bound endpoint name length rockchipdpdrmencoderenable uses sprintf to format a device tree path into a 32-byte stack buffer. Device tree paths are not limited to this size, so a sufficientl...

CVE-2010-5301

CVE-2010-5301 A proof of concept of an SEH overflow with arbitrary dll injection Description Kolibrì HTTP Server 2.0 is affected by a stack-based buffer overflow. At the time of discovery this vulnerability was exploited by simply overwriting the instruction pointer with a JMP ESP instruction,...

CVE-2025-5548

Rompiendo FreeFloat FTP: análisis y explotación de CVE-2025-5548 Anderson Steven — Máster en Ciberseguridad, Módulo 6 Vulnerabilidades Entrega individual: Metodología de análisis de vulnerabilidades y explotación Por qué este repositorio No quería entregar simplemente "aquí está el exploit...

QuickHeal

QuickHeal CVE-2017-5005 for Quick Heal Antivirus Advisory Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability. The software performs operations on a memory buffer, but it can read from or write to a memory location that is outside of the intended boundary of the...

CVE-2026-53921-PoC-Exploit

CVE-2026-53921 – odhcpd Stack Overflow ⚠️ For educational and authorized testing only. Unauthorized use is illegal. 📖 Vulnerability Overview CVE-2026-53921 is a critical stack buffer overflow in OpenWrt’s odhcpd daemon – the default DHCPv6/DHCPv4/RA server. 🔍 How it works The vulnerability exists...

CVE-2023-38545

usage root@kitploit: git clone https://github.com/imfht/CVE-2023-38545 cd CVE-2023-38545/curl-7.74.0 && ./configure --with-openssl make -j 4 python3 socks.py & export ALLPROXY=socks5h://127.0.0.1:9050 ./curl-7.74.0/src/curl $python3 -c "print'A'10000, end=''" -vvvv proof for details please see:...

CVE-2025-15467

CVE-2025-15467: OpenSSL CMS AuthEnvelopedData Stack Buffer Overflow Overview CVE-2025-15467 is a critical stack buffer overflow vulnerability in OpenSSL's CMS Cryptographic Message Syntax parsing code. The vulnerability exists in the evpciphergetasn1aeadparams function when processing AES-GCM...

CVE-2026-41089

CVE-2026-41089 — Exploit de Desbordamiento de Búfer en la Pila de Windows Netlogon CLDAP RCE CVE-ID: CVE-2026-41089 CVSS: 9.8 Crítico CWE: CWE-121 Desbordamiento de Búfer basado en la Pila Vector de ataque: UDP/389 CLDAP SearchRequest Impacto: Ejecución remota de código RCE / Denegación de servic...

netgear_r6700v3_circled

Explotando un desbordamiento de búfer en la pila en el NETGEAR R6700v3 CVE-2022-27646 con la ayuda de la Ejecución Simbólica Introducción Este repositorio tiene como objetivo demostrar algunas funcionalidades de Morion, una herramienta de prueba de concepto PoC para experimentar con ejecución...

katana

Katana A BootROM exploit for Qualcomm devices released within 2016 til 2019. Brief Explanation of the Exploit With the MSM8998 Nazgul SoC, the command 0x13 SAHARARESETSTATEMACHINEID was added. The command called into bootsaharaentry, which is supposed to reinitialize Sahara. The flaw is that each...

CVE-2025-40634

CVE-2025-40634 The TP-Link Archer AX50 router is vulnerable to a stack-based buffer overflow on its firmware version 1.0.14 Build 20240108 rel.426554555, leading to Remote Code Execution both in the LAN and in the WAN side. This vulnerability has the same root cause as CVE-2020-10881, found by th...

Tivoli-Madness

Tivoli-Madness Advisory for: CVE-2020-28054: An Authorization Bypass vulnerability affecting JamoDat – TSMManager Collector v. = 6.5.0.21 A Stack Based Buffer Overflow affecting IBM Tivoli Storage Manager Command Line Administrative Interface Version 5, Release 2, Level 0.1. Unfortunately, after ...

CVE-2017-14980

🐞 CVE-2017-14980: Sync Breeze Enterprise 10.0.28 - Stack-Based Buffer Overflow Stack-based buffer overflow in Sync Breeze Enterprise 10.0.28 reachable through the /login handler, demonstrating how unchecked input length can corrupt stack memory. 📑 Table of Contents Why this repository exists Why...

CVE-2003-0264

🐞 CVE-2003-0264: SLMail 5.5 - Desbordamiento de búfer basado en pila Desbordamiento de búfer basado en pila clásico en SLMail 5.5 que muestra cómo los primeros servidores de correo podían ser comprometidos mediante comandos SMTP y POP3 sobredimensionados. 📑 Tabla de contenidos Por qué existe este...

CVE-2023-46012

CVE-2023-46012 LINKSYS AC1900 EA7500v3 IGD UPnP Stack Buffer Overflow Remote Code Execution Vulnerability This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of LINKSYS EA7500 routers. Authentication is not required to exploit this vulnerabilit...

CVE-2022-35737

CVE-2022-35737 Desbordamiento de enteros en la función sqlite3strvappendf de SQLite3. CVSS 6.7 AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H CVE-2022-35737 fue introducido en SQLite versión 1.0.12 y corregido en la versión 3.39.2, disponible el 21 de julio de 2022. Es explotable en sistemas de 64 bits, y l...

cve-2015-7547

PoC attack server for CVE-2015-7547 vulnerability in glibc DNS resolver To test on local machine with a vulnerable glibc version: root@kitploit: user@localhost:/ echo 'nameserver 127.0.0.127' | sudo tee /etc/resolv.conf user@localhost:/ echo 'nameserver 127.0.0.127' | sudo tee -a /etc/resolv.conf...

cve-2015-7547-public

Servidor de ataque PoC para la vulnerabilidad CVE-2015-7547 en el solucionador DNS de glibc Para probar en la máquina local con una versión vulnerable de glibc: root@kitploit: user@localhost:/$ echo 'nameserver 127.0.0.127' | sudo tee /etc/resolv.conf user@localhost:/$ echo 'nameserver 127.0.0.12...