EUVD-2026-80033

Netcore NR255-V version 1.5.130703 contains a stack-based buffer overflow in ntoolstcpdumpstartset.cgi caused by an unsized sprintf call when processing form values. An attacker can submit crafted input to this cgi endpoint to overflow the stack buffer and potentially execute arbitrary code...

CVE-2026-76869

Netcore NR255-V version 1.5.130703 contains a stack-based buffer overflow in the reboot_timer_set.cgi endpoint, caused by improper sscanf token parsing . An attacker with authenticated access can submit crafted input to corrupt stack memory, potentially leading to code execution or service disrup...

CVE-2026-76861

Netcore NR255-V version 1.5.130703 contains a stack-based buffer overflow in the ntools_tcpdump_start_set.cgi endpoint, caused by an unsized sprintf call when processing form values. An attacker with low privileges can submit crafted input to this CGI to overflow the stack buffer, potentially ach...

CVE-2026-19774

A flaw was found in BlueZ. This vulnerability, a stack-based buffer overflow in the Advanced Audio Distribution Profile A2DP stack, allows a network-adjacent attacker to execute arbitrary code. By pairing a malicious Bluetooth device with the target system, an attacker can exploit improper...

CVE-2026-76689

CVE-2026-76689 affects HPE Networking EdgeConnect SD-WAN Gateways , where a stack-based buffer overflow exists in the configuration processing logic. An authenticated remote attacker with administrative privileges can exploit the vulnerability by supplying specially crafted configuration data tha...

CVE-2026-19774

BlueZ A2DP Stack-based Buffer Overflow allows remote code execution as root on affected installations of the Linux Bluetooth protocol stack. The flaw resides in the handling of stream endpoints , where user-supplied data is copied to a fixed-length stack-based buffer without proper length validat...

windows-x86-shellcode-poc

Windows x86 バッファオーバーフロー PoC 入門 これは、32ビットWindows向けのスタックベースのバッファオーバーフローエクスプロイトに関する、シンプルで自己完結型のチュートリアルです。外部のガイドは不要です。必要なものはすべてここにあります。 このリポジトリの内容 vulnerable.c: 安全でない gets 関数を使用するシンプルなプログラム。 messageBox.asm: オーバーフロー後に実行される小さなアセンブリペイロード。 exploit.c: オーバーフローがどのようにトリガーされるかの例。...

pentest-writeups

pentest-writeups Writeup de Kioptrix Level 1 - CVE-2003-0201 Samba trans2open Kioptrix Level 1 — Writeup de Pruebas de Penetración Autor: Amirbek Raxmatullayev @americo444 Fecha: 2026-06-17 Plataforma: VulnHub Dificultad: Principiante Objetivo: Obtener acceso root 1. Configuración del Entorno...

CVE-2003-0264_EXPLOIT

CVE-2003-0264EXPLOIT Seattle Lab Mail SLmail 5.5 中的缓冲区溢出 - POP3 基于栈的简单缓冲区溢出（逐步讲解） 1 对应用程序进行模糊测试 首先，我们将使用一个简单的 Spike 脚本对应用程序进行模糊测试 同时，我们也会让 SLmail 附加到 Immunity Debugger 上并运行 更多关于 Spike::https://resources.infosecinstitute.com/topic/intro-to-fuzzing/ 这里是一个名为 spikefuzz.spk 的简单 Spike 脚本...

CVE-2026-82592

D-Link 路由器 DIR-825M - /boafrm/formDiskFormat 中的缓冲区溢出 漏洞详情 详细信息 字段| 值 ---|--- 厂商| D-Link 产品| D-Link DIR-825M（以及共享同一固件代码库的其他型号） 受影响版本| 固件 v1.1.8 漏洞类型| 基于栈的缓冲区溢出（CWE-121）、命令注入（CWE-78） 厂商主页| https://www.dlink.com/ 漏洞描述 在对路由器固件进行安全审查时，在 /boafrm/formDiskFormat 端点中发现了一个严重漏洞。 该漏洞位于处理分区格式化的 sub46725C...

CVE-2019-9766

CVE-2019-9766 利用 Free MP3 CD Ripper2.6 版本存在的缓冲区溢出漏洞，构造特殊的 MP3 文件，攻击者在使用播放器进行播放时，音频文件蜜饵利用缓冲区溢出漏洞执行任意代码。 复现 攻击机：kali201903 192.168.198.142 受害机：windows10 21H1 192.168.198.137 在受害机上安装好 Free MP3 CD Ripper 2.6，在 kali 机上利用 MSF 生成反向连接 shellcode： root@kitploit: msfvenom -p windows/meterpreter/reversetcp...

CVE-2026-41089-Netlogon-RCE

🚨 CVE-2026-41089: RCE Crítico en Windows Netlogon Ejecución Remota de Código No Autenticada en Controladores de Dominio de Active Directory 🧠 Visión General Conceptual Publico este desglose técnico de CVE-2026-41089 , una vulnerabilidad excepcionalmente crítica que reside en lo más profundo del...

CVE-2016-2233

CVE-2016-2233 CVE-2016-2233 是一个基于栈的缓冲区溢出漏洞，涉及广泛使用的 IRC 软件 Hexchat。我们构建了一个 IRC 服务器，并对其发起攻击，使所有连接到该服务器的客户端崩溃。我们在 Ubuntu 12.04 上使用 Python 进行攻击利用。我们制作了一个补丁来修复该漏洞，并通过多种测试证明其确实有效。 如何安装 Hexchat 系统环境：Ubuntu 12.04 seed Python 版本：2.7.12 要设置依赖关系，应执行以下命令： root@kitploit: sudo apt-get install gnome-common sudo...

Blackash-CVE-2025-0282

Blackash-CVE-2025-0282 Descripción Un desbordamiento de búfer basado en pila en Ivanti Connect Secure anterior a la versión 22.7R2.5, Ivanti Policy Secure anterior a la versión 22.7R1.2 y las puertas de enlace Ivanti Neurons para ZTA anteriores a la versión 22.7R2.3 permite a un atacante remoto n...

CVE-2026-91090

A vulnerability was determined in GPAC up to f1219cde. The affected element is the function gfnodeactivateex of the file scenegraph/basescenegraph.c. This manipulation causes stack-based buffer overflow. It is possible to launch the attack on the local host. The exploit has been publicly disclose...

CVE-2026-91090

GPAC (up to commit f1219cde) contains a stack-based buffer overflow in the function gf_node_activate_ex within scenegraph/base_scenegraph.c. The attack requires local access with low privileges and user interaction, yielding low integrity and availability impact (CVSS 3.1: 3.9 LOW ). A proof-of-c...

CVE-2026-91003

A flaw has been found in D-Link DI-8300 16.07. The affected element is the function rzglasp of the file /rzgl.asp of the component CGI Service. This manipulation of the argument redircturl causes stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit has been...

CVE-2026-91003 D-Link DI-8300 CGI Service rzgl.asp rzgl_asp stack-based overflow

A flaw has been found in D-Link DI-8300 16.07. The affected element is the function rzglasp of the file /rzgl.asp of the component CGI Service. This manipulation of the argument redircturl causes stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit has been...

CVE-2026-91003

CVE-2026-91003 affects the D-Link DI-8300 (version 16.07) in its CGI Service component. The vulnerability resides in the function rzgl_asp within the file /rzgl.asp , where manipulation of the redirct_url argument leads to a stack-based buffer overflow . Remote exploitation is possible, and the C...

CVE-2026-91001 D-Link DI-8400 DDNS Configuration ddns.asp ddns_asp stack-based overflow

A security flaw has been discovered in D-Link DI-8400 16.07. This affects the function ddnsasp of the file /ddns.asp of the component DDNS Configuration. Performing a manipulation of the argument serv/user/host/wild/mx/bmx/cust/ip results in stack-based buffer overflow. The attack can be initiate...