CVE-2026-105285

A security vulnerability has been detected in Totolink A3002MU 1.0.0-B20230403.1455. This affects an unknown function of the file /boafrm/formIpQoS of the component QoS Rule Handler. The manipulation of the argument addQos/comment/entryname leads to stack-based buffer overflow. Remote exploitatio...

EUVD-2026-92383

A security vulnerability has been detected in Totolink A3002MU 1.0.0-B20230403.1455. This affects an unknown function of the file /boafrm/formIpQoS of the component QoS Rule Handler. The manipulation of the argument addQos/comment/entryname leads to stack-based buffer overflow. Remote exploitatio...

CVE-2026-41089-Netlogon-RCE

🚨 CVE-2026-41089：Windows Netlogon 严重远程代码执行漏洞 在 Active Directory 域控制器上实现未认证远程代码执行 🧠 概念概述 我正在发布对 CVE-2026-41089 的技术剖析，这是一个深藏于 Windows Netlogon 服务内部的极其严重的漏洞。我的分析表明，该缺陷根源于一个严重的基于栈的缓冲区溢出 （CWE-121）。通过向存在漏洞的域控制器发送经特殊构造的畸形网络请求，未认证攻击者即可引发内存破坏，并在系统级无缝执行任意代码。 🎯 核心影响理念 “掌控 Netlogon 者，即掌控整个王国。” 由于该漏洞无需任何用户交互...

CVE-2003-0264_EXPLOIT

CVE-2003-0264EXPLOIT Seattle Lab Mail SLmail 5.5 中的缓冲区溢出 - POP3 基于栈的简单缓冲区溢出（逐步讲解） 1 对应用程序进行模糊测试 首先，我们将使用一个简单的 Spike 脚本对应用程序进行模糊测试 同时，我们也会让 SLmail 附加到 Immunity Debugger 上并运行 更多关于 Spike::https://resources.infosecinstitute.com/topic/intro-to-fuzzing/ 这里是一个名为 spikefuzz.spk 的简单 Spike 脚本...

Blackash-CVE-2025-0282

Blackash-CVE-2025-0282 描述 Ivanti Connect Secure 22.7R2.5之前版本、Ivanti Policy Secure 22.7R1.2之前版本以及Ivanti Neurons for ZTA gateways 22.7R2.3之前版本中存在一个基于栈的缓冲区溢出漏洞，允许远程未认证攻击者实现远程代码执行。 指标 CNA: ivanti 基础评分: 9.0 严重 ⚫ 向量: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H 上传网页外壳 使用该工具将网页外壳上传到目标系统： python3...

CVE-2007-1567

🐞 CVE-2007-1567: War FTP Daemon 1.65 - 基于栈的缓冲区溢出 经典的基于栈的缓冲区溢出漏洞，存在于 War FTP Daemon 1.65 中，通过畸形的 FTP 命令演示了老式的远程代码执行技术。 📑 目录 为何存在此仓库 此漏洞为何有趣 背景与受影响软件 关于漏洞 触发崩溃 利用方法 🎓 为何存在此仓库 此仓库是我在讲授内存损坏利用时所使用材料的一部分（除了我的日常工作外，我还在不同的网络安全课程中授课，帮助培养下一代的逆向工程师）。 CVE-2007-1567 是我在介绍完基本的 EIP...

CVE-2025-5548

🚀 CVE-2025-5548 - FreeFloat FTP Server 1.0 漏洞利用 专业漏洞分析与完整的远程缓冲区溢出利用 🎯 项目亮点 完整的真实案例研究 ：CVE-2025-5548（FreeFloat FTP Server 1.0 中通过 NOOP 命令触发的远程基于栈的缓冲区溢出） 手动工具安装 + 自动化脚本（Windows 和 Linux） 在 Windows 11 虚拟机上完整记录的实验环境 逐步漏洞利用 ：模糊测试 → 偏移量 → 坏字符 → JMP ESP → 可用的反向 shell 📂 仓库结构 文件夹| 内容 ---|--- Environment|...

CVE-2021-27965

CVE-2021-27965 针对 CVE-2021-27965 的概念验证（基于栈的缓冲区溢出） 注意：我可能不会再更新这个（仍有完成它的可能）。目前我能够干净地覆盖指令指针，但我相信这足以证明我拥有至少利用一个简单但真实的内核设备驱动程序所需的技能。我将研究另一个 CVE-2021-27965 漏洞利用，以寻找修复此问题的技巧。 为什么我没有完成它？我必须使用特定的令牌窃取 shellcode 来防止崩溃，这将要求我重写大部分漏洞利用代码（而我不想这样做）。...

CVE-2022-34913

CVE-2022-34913 描述 md2roff 1.7 存在基于栈的缓冲区溢出漏洞，可通过包含大量连续待处理字符的 Markdown 文件触发。 复现 要复现该漏洞，我们需要下载存在漏洞的 md2roff 版本（1.7 版）： git clone https://github.com/nereusx/md2roff.git cd md2roff git checkout 7fc373d25c91422454f081c8a717222d77fd7add make 项目编译完成后，我们可以先创建一个包含大量 ASCII 字符缓冲区的恶意 markdown 文件： python3 -c...

CVE-2026-63292

⚠️ CVE-2026-63292 — Vulnerabilidad de seguridad en Apache HTTP Server 🔐 --- 🔎 Descripción general CVE-2026-63292 es una vulnerabilidad de desbordamiento de búfer basado en pila que afecta al módulo modvhostalias de Apache HTTP Server. El problema puede desencadenarse bajo configuraciones...

Linux Distros Unpatched Vulnerability : CVE-2026-66837

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Stack-based Buffer Overflow, Integer Overflow or Wraparound vulnerability in Apache Thrift php bindings. This issue affects Apache Thrift: before 0.25.0. Users...

CVE-2026-66837

A flaw was found in Apache Thrift. An integer overflow within the PHP bindings leads to a stack-based buffer overflow when processing specially crafted data. A remote, unauthenticated attacker could exploit this flaw to crash the service, leading to a Denial of Service DoS...

CVE-2026-104611

A vulnerability was detected in Tenda AC9 15.03.02.13. Affected is an unknown function of the file /goform/fastsettinginternetset of the component POST Request Handler. Performing a manipulation of the argument netWanType results in stack-based buffer overflow. The attack is possible to be carrie...

CVE-2026-104610

A security vulnerability has been detected in Tenda HG7, HG9 and HG10 300001138enxpon. This impacts the function boaGetVar of the file /boaform/formLoopBack of the component Boa Web Server. Such manipulation of the argument Ethtype leads to stack-based buffer overflow. The attack can be executed...

CVE-2026-66837 Apache Thrift: PHP accelerator sizes a stack buffer from a wire-controlled string length

Stack-based Buffer Overflow, Integer Overflow or Wraparound vulnerability in Apache Thrift php bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

EUVD-2026-91586

Stack-based Buffer Overflow, Integer Overflow or Wraparound vulnerability in Apache Thrift php bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

CVE-2026-66837

Stack-based Buffer Overflow, Integer Overflow or Wraparound vulnerability in Apache Thrift php bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

CVE-2026-66837

A flaw exists in the Apache Thrift PHP bindings (versions before 0.25.0 ) where an integer overflow allows a wire-controlled string length to improperly size a stack buffer. This leads to a stack-based buffer overflow when processing specially crafted data. A remote, unauthenticated attacker can ...

EUVD-2026-91579

A vulnerability was detected in Tenda AC9 15.03.02.13. Affected is an unknown function of the file /goform/fastsettinginternetset of the component POST Request Handler. Performing a manipulation of the argument netWanType results in stack-based buffer overflow. The attack is possible to be carrie...

CVE-2026-104611

A stack-based buffer overflow vulnerability exists in the Tenda AC9 (version 15.03.02.13). The flaw is located within an unknown function in the /goform/fast_setting_internet_set file of the POST Request Handler component. By manipulating the netWanType argument, an attacker can trigger the overf...