POC-CVE-2026-0300-exploit

CVE-2026-0300 — PAN-OS User-ID Authentication Portal バッファオーバーフローエクスプロイト 重大 CVSS 9.3 — Palo Alto Networks PAN-OS Captive Portal における未認証のリモートコード実行 目次 概要 脆弱性の詳細 影響を受けるバージョン アーキテクチャ図 プロジェクト構成 インストール スキャナの使用方法 — ステップバイステップ エクスプロイトの使用方法 — ステップバイステップ ペイロード設計 緩和策 免責事項 概要 CVE-2026-0300 は、Palo Alto Network...

CVE-2017-14980

🐞 CVE-2017-14980: Sync Breeze Enterprise 10.0.28 - Stack-Based Buffer Overflow Stack-based buffer overflow in Sync Breeze Enterprise 10.0.28 reachable through the /login handler, demonstrating how unchecked input length can corrupt stack memory. 📑 Table of Contents Why this repository exists Why...

CVE-2003-0264

🐞 CVE-2003-0264: SLMail 5.5 - Stack-Based Buffer Overflow Classic stack-based buffer overflow in SLMail 5.5 showing how early mail servers could be compromised through oversized SMTP and POP3 commands. 📑 Table of Contents Why this repository exists Why this vulnerability is interesting Context an...

CVE-2021-3156

Project Title Exploit generator for CVE-2021-3156 sudo Installation 1. Install dependencies ./install.sh 2. Run exploit generator: ./run.sh 3. If the system's sudo version is vulnerable, an exploit is generated for the installed version 4. The exploit is generated in exploit.c and the binary...

CVE-2026-63292

A flaw was found in httpd's modvhostalias module. A remote attacker can exploit a stack-based buffer overflow by sending a crafted HTTP request with an excessively large Host header to a server using specific virtual hosting configurations. This issue can lead to arbitrary code execution or cause...

CVE-2026-56153

A flaw was found in httpd's modcharsetlite module. A heap-based buffer overflow an out-of-bounds memory write occurs in the finishpartialchar function when handling character set conversions. A remote attacker can exploit this flaw by sending specially crafted requests, leading to memory...

EUVD-2009-5119

Green Dam Youth Escort version 3.17 is vulnerable to a stack-based buffer overflow when processing overly long URLs. The flaw resides in the URL filtering component, which fails to properly validate input length before copying user-supplied data into a fixed-size buffer. A remote attacker can...

CVE-2025-5548

💣 Exploit Development - 버퍼 오버플로우 이 저장소는 초기 분석부터 실행 흐름 제어까지 구조화된 방법론을 따라 버퍼 오버플로우 유형의 취약점을 악용하는 전체 프로세스를 문서화합니다. 🎯 목표 이 단계의 목표는 취약한 프로그램의 실행 흐름을 리디렉션하고 임의 코드 실행을 위한 기반을 마련하는 기능적 익스플로잇을 개발하는 것입니다. 🧭 악용 방법론 다음은 프로세스 중 수행된 단계를 자세히 설명합니다. 🔍 1단계 - 바이너리 정적 분석 IDA Free 리버스 엔지니어링 도구를 사용한 바이너리 분석을 통해 다음을...

CVE-2025-23247

CVE-2025-23247 Epic Collab with @reubensammut : as alaways : wip for CVE-2025-23247 . ATM just crash PoC which shows we control buffer and offset, so we got aaw. Bug from https://talosintelligence.com/vulnerabilityreports/TALOS-2025-2151 checksec ./cuobjdump '/home/vlad/cuobjdump' Arch:...

Scalar-Venom-Attack

This paper analyzes cryptographic vulnerabilities discovered in modern cryptographic key management infrastructure, with a particular focus on critical flaws in the architecture of hardware security modules HSMs when handling elliptic curve private keys. The study focuses on a class of attacks th...

CVE-2025-5548

🛡️ CVE-2025-5548 – FreeFloat FTP Server Buffer Overflow Exploit 📌 Overview This repository documents the discovery and exploitation of a stack-based buffer overflow vulnerability in the FreeFloat FTP Server application. The vulnerability resides in the handling of the USER command, where unsafe...

FreeRDP: FreeRDP: Remote code execution or client crash via malicious TS Gateway

A flaw was found in FreeRDP. FreeRDP clients using TS Gateway are vulnerable to a heap-buffer-overflow. A malicious gateway can send a specially crafted response fragment, causing the client to write beyond its allocated buffer. This can lead to a client crash, resulting in a Denial of Service Do...

Apache HTTP Server 2.4.68 mod_vhost_alias Stack Overflow

Apache HTTP Server versions through 2.4.68 contain a stack-based buffer overflow in modvhostalias when VirtualDocumentRoot uses a hostname format specifier and LimitRequestFieldSize is raised above the default. The supplied tool performs a non-intrusive version check using the Server header...

Linux Distros Unpatched Vulnerability : CVE-2026-103680

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in tnef. A heap-based buffer overflow can occur in the findfreenumber function when generating numbered backup suffixes for duplicate filenames...

openSUSE 16: cross-aarch64-glibc-devel / cross-ppc64le-glibc-devel / etc (openSUSE-SU-2026:21968-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21968-1 advisory. - CVE-2026-6368: invalid free via wordexp WRDEAPPEND rollback bsc1274726. - CVE-2026-6791: stack overflow in wordexp tilde expansion bsc1274723....

openSUSE 16 Security Update : chromium (openSUSE-SU-2026:21987-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21987-1 advisory. Changes in chromium: - Chromium 154.0.8037.57 boo1282334: CVE-2026-95350: Buffer overflow in ANGLE CVE-2026-95357: Out of bounds write in GPU...

ROS-20261002-73-0070

The vulnerability of regular expression functions in the PostgreSQL database management system is related to buffer overflows in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2026-103227

A weakness has been identified in GPAC up to 26.07.0. Affected by this issue is the function gfdashresolveurl of the file src/mediatools/dashclient.c of the component DASH Client. This manipulation causes buffer overflow. The attack is possible to be carried out remotely. Upgrading to version...

PT-2026-104299

Name of the Vulnerable Software and Affected Versions Tenda HG7 affected versions not specified Tenda HG9 affected versions not specified Tenda HG10 300001138 en xpon affected versions not specified Description A stack-based buffer overflow occurs in the Boa Web Server component due to improper...

openSUSE 16 Security Update : aria2 (openSUSE-SU-2026:21997-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21997-1 advisory. Changes in aria2: - CVE-2026-75421: stack buffer underflow in IOFile::getLine when a line begins with a NUL byte boo1276754 - Fix build with Nettle 4.0...