CVE-2026-31024

CVE-2026-31024 Report di vulnerabilità: Buffer Overflow basato su stack e divulgazione di informazioni in Steghide Field| Value ---|--- Applicazione target| Steghide Binario Linux Versione interessata| 0.5.1 Confermata; versioni precedenti probabilmente interessate Tipo di vulnerabilità| Buffer...

fgt-cve-2023-27997-exploit

fgt-cve-2023-27997-exploit Script de Exploit PoC com ROP Chain para FortiGate SSL‑VPN CVE‑2023‑27997 Conteúdo Descrição Versões Afetadas Instalação Uso Exemplo de Saída Detalhes Técnicos Avisos Referências Descrição fgt-cve-2023-27997-exploit.py é um script de exploit Proof‑of‑Concept PoC escrito...

qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling

A flaw was found in QEMU's virtio-blk device. The issue arises because the device does not properly validate the size of input descriptors before writing data. A malicious guest with high privileges could exploit this vulnerability by submitting a malformed virtio-blk SCSI request, leading to an...

Moderate: Red Hat Security Advisory: qemu-kvm security, bug fix, and enhancement update

An update for qemu-kvm is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

CVE-2026-42945-Reverse-Shell-POC

CVE-2026-42945 NGINX Rift PoC di RCE con Reverse Shell Proof-of-concept di esecuzione remota di codice per CVE-2026-42945 , un overflow del buffer heap nel ngxhttprewritemodule di NGINX. Questo fork estende il PoC di trigger pubblico con un listener di reverse shell integrato e parametri di...

windows-x86-shellcode-poc

Preuve de concept de débordement de tampon Windows x86 pour débutants Ceci est un tutoriel simple et autonome sur les exploits de débordement de tampon basé sur la pile pour Windows 32 bits. Aucun guide externe requis — tout ce dont vous avez besoin est ici. Qu'est-ce que ce dépôt ? vulnerable.c ...

pentest-writeups

pentest-writeups Kioptrix Level 1 writeup - CVE-2003-0201 Samba trans2open Kioptrix Level 1 — Writeup di Penetration Testing Autore: Amirbek Raxmatullayev @americo444 Data: 2026-06-17 Piattaforma: VulnHub Difficoltà: Principiante Obiettivo: Ottenere accesso root 1. Configurazione dell'Ambiente...

SOC-L1-OSINT-Investigation-MikroTik-CVE-2018-1156

SOC L1 Bedrohungsuntersuchung: Mehrere exponierte Dienste von MikroTik RouterOS Analyst: Jonatan Alexander Guerrero Gomez | Rollen-Ziel: SOC L1 / Jr. Cybersecurity Analyst Status: Untersuchung abgeschlossen | Schweregrad: Hoch Zusammenfassung Proaktive Bedrohungssuche, die ein öffentlich...

CVE-2021-3156-Baron-Samedit

CVE-2021-3156 – Baron Samedit Buffer Overflow basato su heap in sudo | Analisi dello sfruttamento e mitigazione Panoramica CVE-2021-3156, noto come Baron Samedit , è una vulnerabilità di buffer overflow basato su heap nel programma sudo. Consente a qualsiasi utente locale non privilegiato di...

thm-ice-icecast-rce-privesc

TryHackMe — Ice: Icecast 2.0.1 RCE & Windows-Privilegieneskalation Plattform: TryHackMe Ziel-Betriebssystem: Windows 7 / Windows Server 2008 R2 Schwierigkeit: Einfach Kategorie: Buffer Overflow RCE, lokale Privilegieneskalation Zusammenfassung Dieser Bericht dokumentiert die vollständige...

CVE-2026-14266

CVE-2026-14266 — Overflow del buffer heap nel decoder XZ di 7-Zip Gravità critica | CVSS: 8.8 Alta | CWE-122: Buffer overflow basato su heap Versioni interessate: 7-Zip ≤ 26.01 | Corretto: 7-Zip 26.02 2026-06-25 Scoperto e analizzato da: Li Yuxuan liyuxuan504-byte e team Sintesi Esecutiva Nelle...

nGixshell

nGixShell è uno scanner per CVE di nginx e un framework di exploit RCE. Include una proof-of-concept funzionante per CVE-2026-42945 — un heap buffer overflow critico in ngxhttprewritemodule — e uno scanner che copre 53 CVE di nginx con probe HTTP automatizzati, fingerprinting, rilevamento/bypass...

thm-cybersec-portfolio

TryHackMe Notizen — Cybersicherheits-Portfolio Persönliche Notizen und Zusammenfassungen abgeschlossener TryHackMe-Räume. Erstellt als Studienreferenz und Portfolio für IT-Sicherheitsrollen. Abgeschlossene Räume | Raum| Thema ---|---|--- 01| Linux Privilege Escalation|...

CVE-2026-78169

A vulnerability was detected in UTT HiPER 1250GW up to 3.2.7-210907-180535. This impacts the function strcpy of the file /goform/aspRemoteApConfTempSend of the component HTTP Request Handler. Performing a manipulation of the argument Profile results in stack-based buffer overflow. The attack is...

CVE-2026-78170

A flaw has been found in UTT HiPER 1200GW up to 2.5.3-170306. Affected is the function strcpy of the file /goform/formConfigFastDirectionW. Executing a manipulation of the argument ssid can lead to buffer overflow. The attack may be performed from remote. The exploit has been published and may be...

CVE-2026-78170

UTT HiPER 1200GW (up to version 2.5.3-170306) is affected by a remote buffer overflow in the strcpy function within /goform/formConfigFastDirectionW. An authenticated attacker (low privileges) can exploit this by manipulating the ssid argument, potentially achieving full compromise of confidentia...

EUVD-2026-64692

A flaw has been found in UTT HiPER 1200GW up to 2.5.3-170306. Affected is the function strcpy of the file /goform/formConfigFastDirectionW. Executing a manipulation of the argument ssid can lead to buffer overflow. The attack may be performed from remote. The exploit has been published and may be...

CVE-2026-78170 UTT HiPER 1200GW formConfigFastDirectionW strcpy buffer overflow

A flaw has been found in UTT HiPER 1200GW up to 2.5.3-170306. Affected is the function strcpy of the file /goform/formConfigFastDirectionW. Executing a manipulation of the argument ssid can lead to buffer overflow. The attack may be performed from remote. The exploit has been published and may be...

libtiff: libtiff: Heap-based buffer overflow via crafted PixarLog-compressed TIFF image

A flaw was found in libtiff. A remote attacker could exploit this vulnerability by providing a specially crafted PixarLog-compressed TIFF image. This issue occurs when decoding Pixarlog codec images with the PIXARLOGDATAFMT8BITABGR output format and a specific stride value, leading to a heap-base...

EUVD-2026-64691

A vulnerability was detected in UTT HiPER 1250GW up to 3.2.7-210907-180535. This impacts the function strcpy of the file /goform/aspRemoteApConfTempSend of the component HTTP Request Handler. Performing a manipulation of the argument Profile results in stack-based buffer overflow. The attack is...