4172 matches found
CVE-2024-4323
🇮🇱 BringThemHome NeverAgainIsNow 🇮🇱 テロ組織ハマスによって人質に取られたすべての市民の安全な帰還を求めます。すべての人質が解放され、無事に帰宅するまで私たちは休みません。あなたも彼らを家に連れ戻す手助けができます。https://stories.bringthemhomenow.net/ CVE-2024-4323 概要 Fluent Bit の HTTP サーバ実装における handletracerequest および parsetracerequest 関数が、深刻な脆弱性 CVE-2024-4323...
CVE-2025-14847-MongoDB
CVE-2025-14847-MongoDB メモリ開示研究ツール 概要 このリポジトリは、MongoDBのBSON展開実装で発見された重大な脆弱性CVE-2025-14847の背後にあるメモリ安全概念を実証するための教育研究ツールを含んでいます。このツールは、展開中の不適切な境界チェックがどのようにメモリ開示につながるかをシミュレートします。 実証される主要概念： BSONプロトコルの解析と検証 メモリ境界チェックの失敗 安全な展開実装と安全でない展開実装 エラーメッセージのサニタイズ...
CVE-2003-0264-SLmail-5.5
CVE-2003-0264 - Seattle Lab Mail 5.5 POP3 バッファオーバーフロー 参照 https://vulners.com/cve/CVE-2003-0264 脆弱性 SLMail は POP3 パスワードの送信時に境界チェックを行いません。 そのため、SLMail サーバーに対して長大で不正な形式の POP3 PASS を送信することにより、任意のコードを実行できます。...
CVE-2026-6730 Multiple Vulnerabilities in IBM Concert Software
IBM Concert 1.0.0 through 3.0.0 is vulnerable to a buffer overflow, caused by improper bounds checking. A local user could overflow the buffer and execute arbitrary code on the system...
CVE-2025-53367-POC
djvulibremmrexploit このプロジェクトは、DjVuLibre において既知のヒープ領域外書き込み脆弱性を引き起こす最小限の C++ 実装を提供します。このコードは脆弱性を悪用するものではなく、問題を調査・理解できるように誤った実行経路を再現するだけです。 この脆弱性は、MMR エンコードされた画像チャンクのパーサーに起因します。処理中に MMRDecoder::scanruns 関数は、水平ランをラインバッファにデコードする際に十分な境界チェックを行いません。連続する長さ 0 の水平ランを使用することで、バッファオーバーフローを引き起こし、領域外書き込み OOB-wri...
heartbleed-vulnerability-exploitation
heartbleed-vulnerability-exploitation 説明 Heartbleed脆弱性（CVE-2014-0160）のハンズオン調査。 概要 このラボは、OpenSSLのTLSハートビート拡張機能の実装における重大な欠陥であるHeartbleed脆弱性のハンズオン調査を記録したものです。目的は、プロトコルレベルで脆弱性がどのように機能するかを理解し、制御された環境でそれを悪用して影響を観察することであり、SOC分析（脆弱性評価と影響分析）に直接関連するスキルを実践することでした。 目的...
CVE-2026-81945 PLANET IGS-5225-8P2T4S V1/V2 Admin Stack-Based Buffer Overflow via Web Server
PLANET IGS-5225-8P2T4S industrial managed switch V1 and V2 firmware versions before 1.2412b260707 and 2.2412b260519 contain a stack-based buffer overflow in the web server. Insufficient bounds checking on data copied into a stack buffer allows a remote administrator to cause a denial of service o...
CVE-2026-81546
The Affinity by Canva application before 3.3.0 September 2026 release did not perform adequate bounds checking when parsing Affinity document files leading to a stack-based buffer overflow. A threat actor could craft a Affinity document that when opened by a user in Affinity could result in...
CVE-2026-81546
The Affinity by Canva application before 3.3.0 September 2026 release did not perform adequate bounds checking when parsing Affinity document files leading to a stack-based buffer overflow. A threat actor could craft a Affinity document that when opened by a user in Affinity could result in...
CVE-2026-86876
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, visionOS 27, watchOS 27. A sandboxed process may be able to circumvent sandbox restrictions...
CVE-2026-86870
A heap buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27, watchOS 27. Processing a maliciously crafted file may lead to unexpected app termination...
CVE-2026-84611
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted 3D model may lead to memo...
CVE-2026-84619
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to cause unexpected system termination or write kernel memory...
CVE-2026-84596
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted font may result in the disclosure of process memory...
CVE-2026-84572
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to cause unexpected system termination or read kernel memory...
CVE-2026-84571
A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted image may lead to unexpected app termination...
CVE-2026-84565
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Processing a maliciously crafted disk image may lead to unexpected app termination...
CVE-2026-84546
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted 3D model may lead to memo...
CVE-2026-84523
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination ...