CVE-2022-27666

CVE-2022-27666 Linux 커널의 IPsec ESP6 구현에서의 힙 버퍼 오버플로 linux 5.13.19. 설정 루트 사용자 가정 1. 커널 빌드 VM 내부 의존성 설치: apt update && apt install -y \ build-essential bc bison flex \ libssl-dev libelf-dev libncurses-dev \ dwarves pahole gcc make wget xz-utils git python3 libfuse3-dev 다운로드 및 압축 해제: cd /home/ubuntu...

-Win10-x64-CloudMe-Sync-1.10.9-Buffer-Overflow-SEH-DEP-Bypass

-Win10-x64-CloudMe-Sync-1.10.9-Buffer-Overflow-SEH-DEP-Bypass 私のバージョン - Win10 x64 CloudMe-Sync-1.10.9-Buffer-Overflow-SEH-DEP-Bypass...

CVE-2003-0264_EXPLOIT

CVE-2003-0264EXPLOIT Seattle Lab Mail SLmail 5.5 - POP3 におけるバッファオーバーフロー シンプルなスタックベースのバッファオーバーフロー ステップバイステップ 1 アプリケーションのファズ 最初のステップでは、シンプルな Spike スクリプトを使用してアプリケーションをファズします。 その間、SLmail は Immunity Debugger にアタッチ（および実行）された状態にします。 Spike の詳細:https://resources.infosecinstitute.com/topic/intro-to-fuzzing...

Important: Red Hat Security Advisory: librabbitmq security update

An update for librabbitmq is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fr...

rabbitmq-c: rabbitmq-c: Heap buffer overflow leading to denial of service

A flaw was found in rabbitmq-c. A malicious AMQP Advanced Message Queuing Protocol server or an on-path attacker can send an undersized frame size during the login handshake. This can lead to a heap buffer overflow, causing memory corruption and potentially a denial of service. Code execution is...

Important: Red Hat Security Advisory: gimp security update

An update for gimp is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

gimp: gimp: heap-based buffer overflow in ICO loader via integer overflow in embedded PNG dimensions

A flaw was found in GIMP's ICO file loader. When processing an ICO file containing an embedded PNG image, an integer overflow can occur during the calculation of the required buffer size. This leads to an undersized buffer being allocated, causing a heap-based buffer overflow when the decoded pix...

gimp: integer overflow when generating a thumbnail preview for a PSD file

A flaw was found in the file-psd plugin in GIMP. When generating a thumbnail preview for a specially crafted PSD Photoshop Document image file, an integer overflow occurs during the multiplication of values from an embedded JPEG header. This leads to an undersized heap allocation, resulting in a...

cve-2022-46395-qemu

CVE-2022-46395 QEMU r36p0 ラボ このリポジトリは、Arm Mali r36p0 ドライバ系列に対する CVE-2022-46395 のポータブルトリガ条件を再現するための QEMU/no-Mali ラボです。 このラボはローカルでの脆弱性研究と回帰テストを目的としています。元のエクスプロイトに含まれていた Pixel 固有の権限昇格ペイロードは含まれていません。LABQEMU モードでは、ソフトイベント/ユーザバッファの競合ウィンドウに到達したことを示した後、PoC は停止します。 リポジトリ構成 poc/: QEMU に適合させた CVE-2022-46395...

CVE-2026-53921

🚨 CVE-2026-53921 - odhcpd OpenWrt odhcpd における重大なスタックベースバッファオーバーフロー リモートから認証なしで悪用可能なスタックベースバッファオーバーフローであり、root権限 によるリモートコード実行 RCE を許す可能性があります。 📖 概要 項目| 値 ---|--- CVE ID| CVE-2026-53921 重大度| 🔴 重大 CVSS v3.1| 9.8 CWE| CWE-121 スタックベースバッファオーバーフロー 攻撃ベクトル| ネットワーク 認証| なし ユーザー操作| なし 影響を受けるコンポーネント| odhcpd...

CVE-2025-69720

CVE-2025-69720: ncurses infocmp -i 스택 버퍼 오버플로우 CWE-121 제보자: Yixuan Cao Shenzhen University, [email protected] 환경 호스트: openEuler 22.03 LTS Linux aarch64 도구 체인: 시스템 clang 12.0.1 + AddressSanitizer 소스: ncurses-6.4 및 ncurses-6.5 패치 20251213 이전 요약 infocmp -i는 analyzestring progs/infocmp.c을 호출하여...

samsung-exynos-sms-stack-overflow-cve-2025-54328-critical-zero-click-baseband-rce

CVE-2025-54328 — Samsung Exynos SMS RP-DATA スタックバッファオーバーフロー CVE-2025-54328 の概念実証（PoC）です。Samsung Exynos ベースバンドファームウェアの SMS RP-DATA パーサにおける CVSS 10.0 のクリティカルなスタックベースのバッファオーバーフローです。 記事 詳細解説: Samsung Exynos SMS スタックオーバーフロー: CVE-2025-54328 — クリティカルな Zero-Click ベースバンド RCE PoC python3 poccve202554328.py...

CVE-2019-18634

CVE-2019-18634 CVE-2019-18634는 pwfeedback이 sudoers 파일에서 활성화된 경우 Sudo 버전 buf if writefd, "\b \b", 3 == -1 break; --cp; left = bufsiz; continue; // ... cp++ = c; // ... 기본적으로 sudo-term-kill 문자가 있을 때 쓰기 작업이 실패하면 버퍼 포인터는 감소하지 않지만 쓸 수 있는 문자 수는 재설정되어,...

CVE-2019-1663-Binary-Analysis

CVE-2019-1663의 바이너리 분석 저자: Corentin Wolff 취약점의 기원 취약점의 출처 이 취약점은 0x0002BF64 함수에서 비롯되며, strcpy 함수를 잘못 사용하여 버퍼 오버플로우 공격에 취약하게 만듭니다. 명확성을 위해 이 함수는 Login으로 이름이 변경되었습니다. 아래는 문제를 보여주는 코드 조각입니다. undefined4 Loginchar param1, char param2, char param3, int param4 ... 이 조각에서 strcpy 함수가 부적절하게 사용되어 버퍼 오버플로우...

kernel: dm-verity: fix buffer overflow in FEC calculation

A flaw was found in the dm-verity component of the Linux kernel. A buffer overflow occurs during Forward Error Correction FEC calculation, allowing an attacker to write past the end of an allocated buffer. This out-of-bounds write can corrupt the syndrome buffer, potentially leading to system...

CVE-2025-5548

CVE-2025-5548 脆弱性の技術調査 はじめに 本稿では、FreeFloat FTP Server v1.0 に存在するスタックバッファオーバーフロー に関連する脆弱性 CVE-2025-5548 を分析する。このラボの主な目的は、脆弱なアプリケーションが操作された入力に対してどのように動作するかを理解し、管理された環境において、検証の欠落がプログラムの実行フローにどのように影響を及ぼすかを観察することである。 このリポジトリの開発は最終結果を示すだけにとどまらず、環境の準備、ツールの選定、障害の観察、メモリ分析、脆弱性の実際の影響の検証といった調査プロセス全体をまとめたものであ...

CVE-2026-20539: Buffer Over-read

In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-20540: Buffer Over-read

In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation...

The vulnerability of the biometric service in Windows operating systems allows a perpetrator to elevate their privileges.

The vulnerability of the biometric service in Windows operating systems lies in the fact that the operation occurs outside the buffer in memory. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the Adobe Bridge file manager relates to the issue of writing operations beyond the buffer boundaries in memory, allowing an attacker to execute arbitrary code.

The vulnerability of the Adobe Bridge file manager is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...