ioctlance

IOCTLance Description Presented at CODE BLUE 2023, this project titled Enhanced Vulnerability Hunting in WDM Drivers with Symbolic Execution and Taint Analysis introduces IOCTLance, a tool that enhances its capacity to detect various vulnerability types in Windows Driver Model WDM drivers. In a...

ROOT-OS-DEBIAN-13-CVE-2026-56409 CVE-2026-56409 in expat - Patched by Root

Root has patched CVE-2026-56409 in the expat package for Root:Debian:13. Multiple fixed versions available...

FreeRDP: FreeRDP: Remote code execution or denial of service via audio input integer overflow

A flaw was found in FreeRDP, an open-source implementation of the Remote Desktop Protocol RDP. This vulnerability, an integer overflow in the audio input redirection channel, allows a remote attacker to supply a malicious FramesPerPacket value. This can lead to a heap-based buffer overflow,...

wongpress

Exploração Real de Vulnerabilidades de Buffer Overflow e Format String para Obter RCE em Servidor Ubuntu CVEs Relacionados CVE-2024-2961 : Vulnerabilidade de buffer overflow na função iconv do Glibc CVE-2024-29510 : Vulnerabilidade de format string no Ghostscript interpretador da linguagem...

FreeRDP: FreeRDP: Remote code execution or denial of service via audio input integer overflow

A flaw was found in FreeRDP, an open-source implementation of the Remote Desktop Protocol RDP. This vulnerability, an integer overflow in the audio input redirection channel, allows a remote attacker to supply a malicious FramesPerPacket value. This can lead to a heap-based buffer overflow,...

Important: Red Hat Security Advisory: freerdp security update

An update for freerdp is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available fo...

FreeRDP: FreeRDP: Remote code execution or denial of service via heap-based buffer overflow

A heap-based buffer overflow in FreeRDP's cryptorsacommon allows an unauthenticated remote attacker to trigger a denial of service or potential remote code execution. By sending a crafted ciphertext during RDP Standard Security key establishment, the attacker can force a data write before the siz...

CVE-2026-31024

CVE-2026-31024 Report di vulnerabilità: Buffer Overflow basato su stack e divulgazione di informazioni in Steghide Field| Value ---|--- Applicazione target| Steghide Binario Linux Versione interessata| 0.5.1 Confermata; versioni precedenti probabilmente interessate Tipo di vulnerabilità| Buffer...

fgt-cve-2023-27997-exploit

fgt-cve-2023-27997-exploit Script de Exploit PoC com ROP Chain para FortiGate SSL‑VPN CVE‑2023‑27997 Conteúdo Descrição Versões Afetadas Instalação Uso Exemplo de Saída Detalhes Técnicos Avisos Referências Descrição fgt-cve-2023-27997-exploit.py é um script de exploit Proof‑of‑Concept PoC escrito...

Moderate: Red Hat Security Advisory: qemu-kvm security, bug fix, and enhancement update

An update for qemu-kvm is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling

A flaw was found in QEMU's virtio-blk device. The issue arises because the device does not properly validate the size of input descriptors before writing data. A malicious guest with high privileges could exploit this vulnerability by submitting a malformed virtio-blk SCSI request, leading to an...

CVE-2026-42945-Reverse-Shell-POC

CVE-2026-42945 NGINX Rift PoC di RCE con Reverse Shell Proof-of-concept di esecuzione remota di codice per CVE-2026-42945 , un overflow del buffer heap nel ngxhttprewritemodule di NGINX. Questo fork estende il PoC di trigger pubblico con un listener di reverse shell integrato e parametri di...

windows-x86-shellcode-poc

Preuve de concept de débordement de tampon Windows x86 pour débutants Ceci est un tutoriel simple et autonome sur les exploits de débordement de tampon basé sur la pile pour Windows 32 bits. Aucun guide externe requis — tout ce dont vous avez besoin est ici. Qu'est-ce que ce dépôt ? vulnerable.c ...

pentest-writeups

pentest-writeups Kioptrix Level 1 writeup - CVE-2003-0201 Samba trans2open Kioptrix Level 1 — Writeup di Penetration Testing Autore: Amirbek Raxmatullayev @americo444 Data: 2026-06-17 Piattaforma: VulnHub Difficoltà: Principiante Obiettivo: Ottenere accesso root 1. Configurazione dell'Ambiente...

SOC-L1-OSINT-Investigation-MikroTik-CVE-2018-1156

SOC L1 Bedrohungsuntersuchung: Mehrere exponierte Dienste von MikroTik RouterOS Analyst: Jonatan Alexander Guerrero Gomez | Rollen-Ziel: SOC L1 / Jr. Cybersecurity Analyst Status: Untersuchung abgeschlossen | Schweregrad: Hoch Zusammenfassung Proaktive Bedrohungssuche, die ein öffentlich...

CVE-2021-3156-Baron-Samedit

CVE-2021-3156 – Baron Samedit Buffer Overflow basato su heap in sudo | Analisi dello sfruttamento e mitigazione Panoramica CVE-2021-3156, noto come Baron Samedit , è una vulnerabilità di buffer overflow basato su heap nel programma sudo. Consente a qualsiasi utente locale non privilegiato di...

thm-ice-icecast-rce-privesc

TryHackMe — Ice: Icecast 2.0.1 RCE & Windows-Privilegieneskalation Plattform: TryHackMe Ziel-Betriebssystem: Windows 7 / Windows Server 2008 R2 Schwierigkeit: Einfach Kategorie: Buffer Overflow RCE, lokale Privilegieneskalation Zusammenfassung Dieser Bericht dokumentiert die vollständige...

CVE-2026-14266

CVE-2026-14266 — Overflow del buffer heap nel decoder XZ di 7-Zip Gravità critica | CVSS: 8.8 Alta | CWE-122: Buffer overflow basato su heap Versioni interessate: 7-Zip ≤ 26.01 | Corretto: 7-Zip 26.02 2026-06-25 Scoperto e analizzato da: Li Yuxuan liyuxuan504-byte e team Sintesi Esecutiva Nelle...

nGixshell

nGixShell è uno scanner per CVE di nginx e un framework di exploit RCE. Include una proof-of-concept funzionante per CVE-2026-42945 — un heap buffer overflow critico in ngxhttprewritemodule — e uno scanner che copre 53 CVE di nginx con probe HTTP automatizzati, fingerprinting, rilevamento/bypass...

thm-cybersec-portfolio

TryHackMe Notizen — Cybersicherheits-Portfolio Persönliche Notizen und Zusammenfassungen abgeschlossener TryHackMe-Räume. Erstellt als Studienreferenz und Portfolio für IT-Sicherheitsrollen. Abgeschlossene Räume | Raum| Thema ---|---|--- 01| Linux Privilege Escalation|...