CVE-2025-15467

CVE-2025-15467 Stack buffer overflow in OpenSSL CMS AuthEnvelopedData parsing. Vulnerability A stack buffer overflow exists in evpciphergetasn1aeadparams when parsing AEAD cipher parameters e.g., AES-GCM in CMS AuthEnvelopedData content. An oversized IV overflows a 16-byte stack buffer, allowing...

cve-2015-7547

PoC attack server for CVE-2015-7547 vulnerability in glibc DNS resolver To test on local machine with a vulnerable glibc version: root@kitploit: user@localhost:/ echo 'nameserver 127.0.0.127' | sudo tee /etc/resolv.conf user@localhost:/ echo 'nameserver 127.0.0.127' | sudo tee -a /etc/resolv.conf...

libmsm_acdb_exploit

Original code is written by @gorohkun https://www.codeaurora.org/projects/security-advisories/stack-based-buffer-overflow-acdb-audio-driver-cve-2013-2597...

CVE-2023-38545

usage root@kitploit: git clone https://github.com/imfht/CVE-2023-38545 cd CVE-2023-38545/curl-7.74.0 && ./configure --with-openssl make -j 4 python3 socks.py & export ALLPROXY=socks5h://127.0.0.1:9050 ./curl-7.74.0/src/curl $python3 -c "print'A'10000, end=''" -vvvv proof for details please see:...

CVE-2026-41089

CVE-2026-41089 — Windows Netlogon CLDAP Stack Buffer Overflow RCE Exploit CVE-ID: CVE-2026-41089 CVSS: 9.8 Critical CWE: CWE-121 Stack-based Buffer Overflow Attack Vector: UDP/389 CLDAP SearchRequest Impact: Remote Code Execution RCE / Denial of Service DoS Affected Versions: Windows Server 2012 ...

nginx-1.4.0

nginx-1.4.0 For the analysis of CVE-2013-2028 exploit: exp-nginx.rb binary for rop build: nginx...

TORQUE-Resource-Manager-2.5.x-2.5.13-stack-based-buffer-overflow-exploit-CVE-2014-8729-CVE-2014-878

TORQUE-Resource-Manager-2.5.x-2.5.13-stack-based-buffer-overflow-exploit-CVE-2014-8729-CVE-2014-878 Exploit Title: TORQUE Resource Manager 2.5.x-2.5.13 stack based buffer overflow Date: 10 Nov 2014 Exploit Author: @inso - Moussajee Thomas, @socks - Laurenceau Gary Vulnerability discovered by:...

CVE-2025-40634

CVE-2025-40634 The TP-Link Archer AX50 router is vulnerable to a stack-based buffer overflow on its firmware version 1.0.14 Build 20240108 rel.426554555, leading to Remote Code Execution both in the LAN and in the WAN side. This vulnerability has the same root cause as CVE-2020-10881, found by th...

CVE-2023-0179-PoC

Needle CVE-2023-0179 exploit This repository contains the exploit for my recently discovered vulnerability in the nftables subsystem that was assigned CVE-2023-0179, affecting all Linux versions from 5.5 to 6.2-rc3, although the exploit was tested on 6.1.6. The vulnerability details and writeup c...

CVE-2023-46012

CVE-2023-46012 LINKSYS AC1900 EA7500v3 IGD UPnP Stack Buffer Overflow Remote Code Execution Vulnerability This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of LINKSYS EA7500 routers. Authentication is not required to exploit this vulnerabilit...

bandiview-7.05-vuln-PoC

bandiview-7.05-vuln-PoC This repository contains a PoC for vulnerabilities uncovered in Bandiview 7.05 using fuzzing CVE-2024-45870 JXR File Parsing DoS Vulnerability CVE-2024-45871 PSD File Parsing DoS Vulnerability CVE-2024-45872 PSD File Parsing Stack Buffer Overflow Details Software: BandiVie...

CVE-2015-7547

CVE-2015-7547 glibc getaddrinfo stack-based buffer overflow...

CTFs

CTF Writeups Hey there, I'm Sean and I enjoy doing CTF problems in my spare time. My current position has me doing a lot of binary exploitation and software reverse engineering so I tend to focus on those categories. Most writeups that I see online suck and I hope these do a better job explaining...

CVE-2025-22457

PoC for CVE-2025-22457 A remote unauthenticated stack based buffer overflow affecting Ivanti Connect Secure, Pulse Connect Secure, Ivanti Policy Secure, and ZTA Gateways Overview This is a proof of concept exploit to demonstrate exploitation of CVE-2025-22457. For a complete technical analysis of...

CVE-2006-6184

CVE-2006-6184 This is a python-based standalone exploit for CVE-2006-6184. This exploit triggers a stack-based buffer overflow in Allied Telesyn TFTP Server AT-TFTP 1.9, and possibly earlier, allowing remote attackers to cause a denial of service or execute arbitrary code. Quick Start 0. let...

CVE-2026-90558

sngrep through 1.8.4 is affected by stack buffer overflow vulnerabilities in SIP attribute formatting routines. When header values (e.g., Call-ID, X-Call-ID, or other fields) exceed the 255-byte buffer limit , the overflow can cause crashes or enable arbitrary code execution during packet parsing...

CVE-2026-90558

sngrep through 1.8.4 contains stack buffer overflow vulnerabilities in SIP attribute formatting routines when header values exceed the 255-byte buffer limit. Attackers can craft malicious SIP packets with oversized Call-ID, X-Call-ID, or other header fields to overflow stack buffers and cause...

Dnstracer-1.9-Fix

Dnstracer-1.9-Fix dnstracer dnstracer determines where a given Domain Name Server DNS gets its information from for a given hostname, and follows the chain of DNS servers back to the authoritative answer. Problem Stack-based buffer overflow in dnstracer through 1.9 allows attackers to execute...

CVE-2025-23266

CVE-2025-23266 Автор: Mark Mallia Целевая платформа: Ubuntu 22.04, FastAPI v2.4.3 → исправлено до v2.5.1 2025‑10‑02 1 – В двух словах: в чём суть атаки Процедура parserequest в FastAPI копирует HTTP-заголовки запроса в небольшой буфер, расположенный в стеке вызывающей стороны. Если злоумышленник...

CVE-2026-11105-Stack-Buffer-Overflow-in-Custom-Base64-Decoder

CVE-2026-11105 – 사용자 지정 Base64 디코더의 스택 버퍼 오버플로우 프로그램 코드 C root@kitploit: // base64vuln.c - Vulnerable Base64 decoder include include include int base64decodeconst char in, sizet inlen, char out, sizet outlen static const char table =...