ROOT-OS-DEBIAN-13-CVE-2026-56372 CVE-2026-56372 in imagemagick - Patched by Root

Root has patched CVE-2026-56372 in the imagemagick package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-61861 CVE-2026-61861 in imagemagick - Patched by Root

Root has patched CVE-2026-61861 in the imagemagick package for Root:Debian:13. Multiple fixed versions available...

FreeRDP: FreeRDP: Remote code execution or denial of service via audio input integer overflow

A flaw was found in FreeRDP, an open-source implementation of the Remote Desktop Protocol RDP. This vulnerability, an integer overflow in the audio input redirection channel, allows a remote attacker to supply a malicious FramesPerPacket value. This can lead to a heap-based buffer overflow,...

ROOT-OS-DEBIAN-13-CVE-2026-5450 CVE-2026-5450 in glibc - Patched by Root

Root has patched CVE-2026-5450 in the glibc package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-5928 CVE-2026-5928 in glibc - Patched by Root

Root has patched CVE-2026-5928 in the glibc package for Root:Debian:13. Multiple fixed versions available...

ioctlance

IOCTLance Description Presented at CODE BLUE 2023, this project titled Enhanced Vulnerability Hunting in WDM Drivers with Symbolic Execution and Taint Analysis introduces IOCTLance, a tool that enhances its capacity to detect various vulnerability types in Windows Driver Model WDM drivers. In a...

ROOT-OS-DEBIAN-13-CVE-2026-56409 CVE-2026-56409 in expat - Patched by Root

Root has patched CVE-2026-56409 in the expat package for Root:Debian:13. Multiple fixed versions available...

FreeRDP: FreeRDP: Remote code execution or denial of service via audio input integer overflow

A flaw was found in FreeRDP, an open-source implementation of the Remote Desktop Protocol RDP. This vulnerability, an integer overflow in the audio input redirection channel, allows a remote attacker to supply a malicious FramesPerPacket value. This can lead to a heap-based buffer overflow,...

wongpress

Ubuntu Server でバッファオーバーフローとフォーマット文字列の脆弱性を悪用してRCEを達成する実事例 関連するCVE CVE-2024-2961 : Glibcのiconv関数におけるバッファオーバーフローの脆弱性 CVE-2024-29510 : Ghostscript（PostScript言語インタープリタ）におけるフォーマット文字列の脆弱性 1. 問題の背景 近日公開 。 2. 攻撃シナリオ 近日公開 。 3. セットアップ プロジェクト構成 近日公開 。 4. エクスプロイト 近日公開 。 5. 参考文献 近日公開 。...

FreeRDP: FreeRDP: Remote code execution or denial of service via audio input integer overflow

A flaw was found in FreeRDP, an open-source implementation of the Remote Desktop Protocol RDP. This vulnerability, an integer overflow in the audio input redirection channel, allows a remote attacker to supply a malicious FramesPerPacket value. This can lead to a heap-based buffer overflow,...

Important: Red Hat Security Advisory: freerdp security update

An update for freerdp is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available fo...

FreeRDP: FreeRDP: Remote code execution or denial of service via heap-based buffer overflow

A heap-based buffer overflow in FreeRDP's cryptorsacommon allows an unauthenticated remote attacker to trigger a denial of service or potential remote code execution. By sending a crafted ciphertext during RDP Standard Security key establishment, the attacker can force a data write before the siz...

fgt-cve-2023-27997-exploit

fgt-cve-2023-27997-exploit FortiGate SSL‑VPN CVE‑2023‑27997 취약점 PoC 익스플로잇 스크립트 ROP 체인 포함 목차 설명 영향받는 버전 설치 사용법 예제 출력 기술 세부사항 경고 참고 자료 설명 fgt-cve-2023-27997-exploit.py는 Fortinet FortiGate 장치에서 발견된 중요 취약점 CVE‑2023‑27997 에 대한 Proof‑of‑Concept PoC 익스플로잇 스크립트입니다. 이 취약점은 FortiOS SSL‑VPN 인터페이스에서 인증 없이 원격...

Moderate: Red Hat Security Advisory: qemu-kvm security, bug fix, and enhancement update

An update for qemu-kvm is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling

A flaw was found in QEMU's virtio-blk device. The issue arises because the device does not properly validate the size of input descriptors before writing data. A malicious guest with high privileges could exploit this vulnerability by submitting a malformed virtio-blk SCSI request, leading to an...

CVE-2026-42945-Reverse-Shell-POC

CVE-2026-42945 NGINX Rift リバースシェル付き RCE PoC CVE-2026-42945 のリモートコード実行 RCE 概念実証 PoC です。これは NGINX の ngxhttprewritemodule におけるヒープバッファオーバーフローです。このフォークは、公開されているトリガー PoC を拡張し、組み込みのリバースシェルリスナーと、CTF や隔離されたラボ環境向けの設定可能な悪用パラメータを追加しています。 脆弱性概要 CVE ID: CVE-2026-42945 別名: NGINX Rift 影響を受けるコンポーネント:...

windows-x86-shellcode-poc

Windows x86 Buffer Overflow PoC for Beginners 이것은 32비트 Windows용 스택 기반 버퍼 오버플로우 익스플로잇에 대한 간단하고 독립적인 튜토리얼입니다. 외부 가이드가 필요하지 않습니다—필요한 모든 것이 여기에 있습니다. 이 저장소는 무엇인가요? vulnerable.c: 안전하지 않은 gets 함수를 사용하는 간단한 프로그램. messageBox.asm: 오버플로우 후 실행될 작은 어셈블리 페이로드. exploit.c: 오버플로우가 어떻게 트리거될 수 있는지 보여주는 예제. 이 프로젝트는...

pentest-writeups

pentest-writeups Kioptrix Level 1 渗透测试报告 - CVE-2003-0201 Samba trans2open Kioptrix Level 1 — 渗透测试报告 作者： Amirbek Raxmatullayev @americo444 日期： 2026-06-17 平台： VulnHub 难度： 入门 目标： 获取 root 权限 1. 环境搭建 组件| 详情 ---|--- 宿主机操作系统| Ubuntu 26.04 虚拟机管理程序| QEMU/KVM 目标| Kioptrix Level 1 VMDK 攻击机 IP| 192.168.56.1...

CVE-2021-3156-Baron-Samedit

CVE-2021-3156 – Baron Samedit sudo 中的堆缓冲区溢出 | 利用与缓解分析 概述 CVE-2021-3156，即 Baron Samedit ，是 sudo 程序中的一个堆缓冲区溢出漏洞。它允许任何无特权的本地用户无需身份验证即可在存在漏洞的系统上获得 root 权限 。 本项目记录了该漏洞的完整利用与缓解过程，是卢森堡大学 软件漏洞：利用与缓解 课程的一部分。 漏洞详情 属性| 详情 ---|--- CVE ID| CVE-2021-3156 别名| Baron Samedit 类型| 堆缓冲区溢出 组件| sudo（sudoedit 模式） 影响|...

thm-ice-icecast-rce-privesc

TryHackMe — Ice: Icecast 2.0.1 RCE と Windows 権限昇格 プラットフォーム: TryHackMe ターゲットOS: Windows 7 / Windows Server 2008 R2 難易度: 簡単 カテゴリ: バッファオーバーフロー RCE, ローカル権限昇格 概要 このレポートは、TryHackMe 上の Ice マシンの完全な侵害プロセスを、初期偵察から SYSTEM レベルの権限昇格までを文書化しています。ターゲットは、古い Icecast 2.0.1 ストリーミングメディアサーバーを公開しており、細工された HTTP...