jq-els-backport-cve-2025-48060

jq-els-backport-cve-2025-48060 Backported the upstream fix for CVE-2025-48060 heap buffer overflow in jvstringempty to jq 1.6. Backport CVE-2025-48060 – Backported upstream commit c6e0416 “Fix heap buffer overflow when formatting an empty string” from a newer jq version to jq-1.6, adapting intern...

CVE-2017-7269

CVE-2017-7269 - IIS 6.0 WebDAV Buffer Overflow A Rust implementation of the POC for CVE-2017-7269, targeting the WebDAV service in Microsoft Internet Information Services IIS 6.0. Vulnerability Overview CVE-2017-7269 is a critical stack-based buffer overflow vulnerability found in the WebDAV...

CVE-2025-43504

When Good /bins Go Bad: A Remote Pre-Authentication Overflow in LLDB's debugserver Introduction Growing up, I always enjoyed digging through the DVD bins at my local Walmart. I noticed a lot of the same movies were left on top, but if you actually dug in, you'd find more interesting and niche...

EUVD-2026-108169

A buffer overflow vulnerability in the Brotli decoder c/dec/decode.c in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially...

CVE-2026-111497

A buffer overflow vulnerability in the Brotli decoder c/dec/decode.c in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially...

Baron-Samedit-Heap-Buffer-Overflow-CVE-2021-3156

Baron-Samedit-Heap-Buffer-Overflow-CVE-2021-3156 Version Vulnarable To The Exploit The Baron Samedit vulnerability CVE-2021-3156 affects sudo legacy versions 1.8.2 through 1.8.31p2 and stable versions 1.9.0 through 1.9.5p1. This heap-based buffer overflow flaw was introduced in July 2011 via comm...

CVE-2026-42945

NGINX Rift RCE Proof of concept for CVE-2026-42945 , a critical heap buffer overflow in NGINX's ngxhttprewritemodule introduced in 2008. The bug enables unauthenticated remote code execution against servers using rewrite and set directives. This vulnerability — along with three other memory...

CVE-2011-4862

CVE-2011-4862 Final Project for Security and Privacy CS 600.443 | Fall 2018 I originally tried to use diff to make a patch. I patched it the way I thought it would be, before looking at the real patch. encrypt.patch is this original patch that I made with teh diff. However, when we tried applying...

CVE-2024-28515

CVE-2024-28515 Description Buffer Overflow vulnerability in CSAPPLab CSAPP Lab3 15-213 Fall 20xx allows a remote attacker to execute arbitrary code via the lab3 of csapp,lab3/buflab-update.pl component. Additional Information CNVD has completed verification of this vulnerability, but it has not...

MSTeams---Vulnerability---Remediation

🛡️ Remediation of CVE-2025-53783: Microsoft Teams RCE 📝 Project Overview This project demonstrates a Vulnerability Management Workflow. Using an Azure VM, I identified a high-severity "Remote Code Execution" RCE flaw in Microsoft Teams, verified its existence through PowerShell, and deployed a...

CVE-2024-4323

🇮🇱 BringThemHome NeverAgainIsNow 🇮🇱 We demand the safe return of all citizens who have been taken hostage by the terrorist group Hamas. We will not rest until every hostage is released and returns home safely. You can help bring them back home.https://stories.bringthemhomenow.net/ CVE-2024-4323...

CVE-2022-48474_CVE-2022-48475

CVE-2022-48474 & CVE-2022-48475 PoC & exploits for CVE-2022-48474 & CVE-2022-48475 "Control de Ciber" is a Cybercafe management software. Multiple Denial-of-Service DoS vulnerabilities in versions prior to 1.650. An unauthenticated remote attacker can send a carefully crafted request that lead to...

CVE-2026-14266

CVE-2026-14266 Poc: 7-Zip XZ Heap Buffer Overflow PoC Generator Proof of Concept generator for reproducing the XZ heap buffer overflow vulnerability in 7-Zip. The script creates a specially crafted .xz archive designed to reproduce the crash condition in the vulnerable multi-threaded XZ...

ros2_CVE-2024-28231

This repo includes a vulnerable Docker image of ros2 iron based on ubuntu 22 and a matching exploit. We exploit the vulnerability in fastrtps version 2.10.3, enabling denial of service of a remote subscriber via heap buffer overflow. Vulnerable base image Fast RTPS version 2.10.3 and dependencies...

CVE-2026-22013-Hardware-Wallet-USB-Descriptor-Buffer-Overflow

CVE-2026-22013 – Hardware Wallet USB Descriptor Buffer Overflow Program Code C firmware sim // hwwalletusb.c - USB descriptor parsing with fixed buffer include void handleusbsetupchar data, int len char descriptor32; if len 0 && data0 == 0x06 // GETDESCRIPTOR // Copy descriptor payload without...

nginx-rce-cve-2026-42945

5. CVE-2026-42945 - Critical NGINX RCE CVSS 9.2 Classification Category: 0-Day / Remote Code Execution CVE: CVE-2026-42945 CVSS: 9.2 Critical Date Discovered: May 12, 2026 Date Patched: May 2026 F5 quarterly security release Source: GitHub DepthFirstDisclosures/Nginx-Rift Vulnerability Details A...

CVE-2026-39259

SmallerC scanf s Stack.md SmallerC - scanf %s Stack Buffer Overflow Project: https://github.com/alexfru/SmallerC SmallerC's scanf implementation does not enforce an upper bound on string reads when %s or % is used without an explicit field width in the format string The runtime will continue...

redis-cve-2025-62507

Exploit Scripts — CVE-2025-62507 Directory Structure scripts/ ├── exploitx86.py x86-64 ROP exploit ├── exploitarm64.py ARM64 AArch64 ROP exploit └── gdbwithsymbols.sh GDB debugging helper script Vulnerability Summary Item| Description ---|--- CVE| CVE-2025-62507 Vulnerability Type| Stack Buffer...

DEBIAN-CVE-2026-92183

GIMP APNG File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page...

wongpress

Real Case Exploitation of Buffer Overflow & Format String Vulnerabilities to Gain RCE in Ubuntu Server Related CVEs CVE-2024-2961 : Buffer overflow vulnerability in Glibc iconv function CVE-2024-29510 : Format string vulnerability in Ghostscript PostScript language interpreter 1. Problem...