Important: Red Hat Security Advisory: freerdp security update

An update for freerdp is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

FreeRDP: FreeRDP: Remote code execution via heap buffer overflow in Server Redirection PDU

A flaw was found in FreeRDP. A malicious Remote Desktop Protocol RDP server can exploit a heap-based buffer overflow vulnerability in the negosendnegotiationrequest function. By sending a specially crafted Server Redirection PDU message with an attacker-controlled LoadBalanceInfo field, the serve...

CVE-2022-27666

CVE-2022-27666 Linux 커널의 IPsec ESP6 구현에서의 힙 버퍼 오버플로 linux 5.13.19. 설정 루트 사용자 가정 1. 커널 빌드 VM 내부 의존성 설치: apt update && apt install -y \ build-essential bc bison flex \ libssl-dev libelf-dev libncurses-dev \ dwarves pahole gcc make wget xz-utils git python3 libfuse3-dev 다운로드 및 압축 해제: cd /home/ubuntu...

-Win10-x64-CloudMe-Sync-1.10.9-Buffer-Overflow-SEH-DEP-Bypass

-Win10-x64-CloudMe-Sync-1.10.9-Buffer-Overflow-SEH-DEP-Bypass 내 버전 - Win10 x64 CloudMe-Sync-1.10.9-Buffer-Overflow-SEH-DEP-Bypass...

CVE-2003-0264_EXPLOIT

CVE-2003-0264익스플로잇 Seattle Lab Mail SLmail 5.5 - POP3의 버퍼 오버플로우 Simple STACK BAsed BUffer Overflow Step By Step 1 애플리케이션 퍼징 In the very First Step we will Fuzz The Application With a Simple Spike Script meanwhile we wil also have SLmail attachedand running to immunity Debugger Spike에 대한 자세한...

Important: Red Hat Security Advisory: librabbitmq security update

An update for librabbitmq is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fr...

rabbitmq-c: rabbitmq-c: Heap buffer overflow leading to denial of service

A flaw was found in rabbitmq-c. A malicious AMQP Advanced Message Queuing Protocol server or an on-path attacker can send an undersized frame size during the login handshake. This can lead to a heap buffer overflow, causing memory corruption and potentially a denial of service. Code execution is...

gimp: integer overflow when generating a thumbnail preview for a PSD file

A flaw was found in the file-psd plugin in GIMP. When generating a thumbnail preview for a specially crafted PSD Photoshop Document image file, an integer overflow occurs during the multiplication of values from an embedded JPEG header. This leads to an undersized heap allocation, resulting in a...

gimp: gimp: heap-based buffer overflow in ICO loader via integer overflow in embedded PNG dimensions

A flaw was found in GIMP's ICO file loader. When processing an ICO file containing an embedded PNG image, an integer overflow can occur during the calculation of the required buffer size. This leads to an undersized buffer being allocated, causing a heap-based buffer overflow when the decoded pix...

Important: Red Hat Security Advisory: gimp security update

An update for gimp is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

cve-2022-46395-qemu

CVE-2022-46395 QEMU r36p0 Lab 이 저장소는 Arm Mali r36p0 드라이버 계열에 대한 CVE-2022-46395의 휴대용 트리거 조건을 재현하기 위한 QEMU/no-Mali 실험 환경을 포함합니다. 이 실험 환경은 로컬 취약점 연구 및 회귀 테스트를 목적으로 합니다. 원본 익스플로잇의 Pixel 특화 권한 상승 페이로드는 포함하지 않습니다. LABQEMU 모드에서는 PoC가 소프트 이벤트/사용자 버퍼 레이스 윈도우에 도달했음을 입증한 후 중단됩니다. 저장소 구조 poc/: QEMU에 맞게 조정된...

CVE-2026-53921

🚨 CVE-2026-53921 - odhcpd OpenWrt odhcpd의 치명적인 스택 기반 버퍼 오버플로 원격의 인증되지 않은 스택 기반 버퍼 오버플로로, 루트 권한 으로의 잠재적 원격 코드 실행RCE을 허용합니다. 📖 개요 속성| 값 ---|--- CVE ID| CVE-2026-53921 심각도| 🔴 치명적 CVSS v3.1| 9.8 CWE| CWE-121 스택 기반 버퍼 오버플로 공격 벡터| 네트워크 인증| 없음 사용자 상호작용| 없음 영향받는 구성 요소| odhcpd DHCPv6 서버 영향| 원격 코드 실행 / 서비스...

CVE-2025-69720

CVE-2025-69720: ncurses infocmp -i スタックバッファオーバーフロー CWE-121 報告者: Yixuan Cao Shenzhen University, [email protected] 環境 ホスト: openEuler 22.03 LTS Linux aarch64 ツールチェーン: system clang 12.0.1 + AddressSanitizer ソース: ncurses-6.4 and ncurses-6.5 パッチ20251213より前 概要 infocmp -i は analyzestring...

samsung-exynos-sms-stack-overflow-cve-2025-54328-critical-zero-click-baseband-rce

CVE-2025-54328 — Samsung Exynos SMS RP-DATA 스택 버퍼 오버플로우 CVE-2025-54328에 대한 개념 증명PoC입니다. Samsung Exynos 베이스밴드 펌웨어의 SMS RP-DATA 파서에서 발생하는 CVSS 10.0 Critical 스택 기반 버퍼 오버플로우입니다. 관련 글 전체 분석 글: Samsung Exynos SMS 스택 오버플로우: CVE-2025-54328 — Critical Zero-Click 베이스밴드 RCE PoC python3 poccve202554328.py...

CVE-2019-18634

CVE-2019-18634 CVE-2019-18634 は、sudoers ファイルで pwfeedback が有効になっている場合に、バージョン 1.8.25 より前の Sudo に影響する脆弱性です。この脆弱性により、攻撃者は BSS-Based Buffer Overflow を利用して root への権限昇格が可能になります。このバッファオーバーフローでは、データ構造が書き換えられ、プログラムがあたかも root として実行されているかのように認識し、パスワードを要求しなくなり、root 権限が与えられます。 脆弱性の発見...

CVE-2019-1663-Binary-Analysis

CVE-2019-1663의 바이너리 분석 저자: Corentin Wolff 취약점의 기원 취약점의 출처 이 취약점은 0x0002BF64 함수에서 비롯되며, strcpy 함수를 잘못 사용하여 버퍼 오버플로우 공격에 취약하게 만듭니다. 명확성을 위해 이 함수는 Login으로 이름이 변경되었습니다. 아래는 문제를 보여주는 코드 조각입니다. undefined4 Loginchar param1, char param2, char param3, int param4 ... 이 조각에서 strcpy 함수가 부적절하게 사용되어 버퍼 오버플로우...

kernel: dm-verity: fix buffer overflow in FEC calculation

A flaw was found in the dm-verity component of the Linux kernel. A buffer overflow occurs during Forward Error Correction FEC calculation, allowing an attacker to write past the end of an allocated buffer. This out-of-bounds write can corrupt the syndrome buffer, potentially leading to system...

CVE-2025-5548

CVE-2025-5548 脆弱性の技術調査 はじめに 本稿では、FreeFloat FTP Server v1.0 に存在するスタックバッファオーバーフロー に関連する脆弱性 CVE-2025-5548 を分析する。このラボの主な目的は、脆弱なアプリケーションが操作された入力に対してどのように動作するかを理解し、管理された環境において、検証の欠落がプログラムの実行フローにどのように影響を及ぼすかを観察することである。 このリポジトリの開発は最終結果を示すだけにとどまらず、環境の準備、ツールの選定、障害の観察、メモリ分析、脆弱性の実際の影響の検証といった調査プロセス全体をまとめたものであ...

The vulnerability of the sub_4156B0() function in TOTOLINK N150RT router microprogramming software allows a intruder to trigger a service failure or execute arbitrary code.

The vulnerability of the sub4156B0 function in TOTOLINK N150RT router microprogramming systems is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to cause service failures or execute arbitrary code...

The vulnerability of the Adobe Substance 3D Modeler software lies in the possibility of an operation going beyond the buffer boundaries in memory, allowing a hacker to execute arbitrary code.

The vulnerability of the Adobe Substance 3D Modeler software-related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...