EUVD-2026-95107

msgpack5 is a msgpack v5 implementation for node.js and the browser. Prior to 6.1.0, decoding a negative signed 64-bit integer modifies the corresponding bytes in the caller-provided input buffer while computing the value. Applications that retain or reuse encoded input for integrity checks,...

CVE-2009-4049

CVE-2009-4049 Heap-based buffer overflow in aswRdr.sys aka the TDI RDR driver in avast! Home and Professional 4.8.1356.0 allows local users to cause a denial of service memory corruption or possibly gain privileges via crafted arguments to IOCTL 0x80002024. While part of the reason as to why I di...

vucsa

Vulnerable Client-Server Application VuCSA Vulnerable client-server application VuCSA is made for learning/presenting how to perform penetration tests of non-http client-server applications. It is written in Java with JavaFX graphical user interface. Currently, the vulnerable application contains...

CVE-2022-0847-DirtyPipe-Exploits

CVE-2022-0847-DirtyPipe-Exploits This repository offers a comprehensive collection of exploits and documentation specifically designed for penetration testers and red team professionals. It serves as a valuable resource for those aiming to exploit the Linux Dirty Pipe vulnerability effectively...

CVE-2022-48474_CVE-2022-48475

CVE-2022-48474 & CVE-2022-48475 PoC & exploits for CVE-2022-48474 & CVE-2022-48475 "Control de Ciber" is a Cybercafe management software. Multiple Denial-of-Service DoS vulnerabilities in versions prior to 1.650. An unauthenticated remote attacker can send a carefully crafted request that lead to...

CVE-2024-4323

🇮🇱 BringThemHome NeverAgainIsNow 🇮🇱 We demand the safe return of all citizens who have been taken hostage by the terrorist group Hamas. We will not rest until every hostage is released and returns home safely. You can help bring them back home.https://stories.bringthemhomenow.net/ CVE-2024-4323...

CVE-2026-41089-PoC

CVE-2026-41089 — LongLogon クラッシャーPoC Windows Server 2025のNetlogonサービスにおける認証前のスタックバッファオーバーフロー。ネットワーク上の任意のホストから送信された単一のCLDAPパケットUDP/389で十分である。lsass.exeがSTATUSSTACKBUFFEROVERRUN 0xc0000409で停止し、ドメインコントローラーが再起動する。 コンポーネント: netlogon.dll、NlGetLocalPingResponse / BuildSamLogonResponse ベクター:...

SpookySSL-Scanner

SpookySSL-Scanner SpookySSL CVE-2022-3602 SSLv3 Scanner for Windows, Linux, macOS Turkish Zafiyet Nasıl Oluşuyor? Öncelikle sorun byte boyutunu belirlerken ortaya çıkıyor. Bayt boyutunu belirlerken farkındaysanız NULL yani boş/sıfır değer tanımlanmamış yani bayt uzunluğu sıfır olarak...

CVE-2021-38297

Exploiting CVE-2021-38297: Vulnerability in GO Wasm Buffer Overflow Overview of the Vulnerability WebAssembly WASM serves as a binary instruction format executable in most modern web browsers. It acts as a compilation target for various high-level languages like C, C++, Rust, and GO, allowing cod...

CVE-2026-41089

CVE-2026-41089 ██████╗██╗ ██╗███████╗ ██╗ ██╗ ██╗ ██████╗ ██████╗ ██╔════╝██║ ██║██╔════╝ ██║ ██║███║██╔═████╗██╔═████╗ ██║ ██║ ██║█████╗ ███████║╚██║██║██╔██║██║██╔██║ ██║ ╚██╗ ██╔╝██╔══╝ ██╔══██║ ██║████╔╝██║████╔╝██║ ╚██████╗ ╚████╔╝ ███████╗ ██║ ██║ ██║╚██████╔╝╚██████╔╝ ╚═════╝ ╚═══╝ ╚══════...

CVE-2026-14669

CVE-2026-14669 - PostgreSQL tochar Timezone Abbreviation Heap Buffer Overflow PostgreSQL tochar 函数在处理时区格式化时存在堆缓冲区溢出漏洞。攻击者通过设置超长 POSIX 时区缩写，可触发 25 字节固定缓冲区的越界写入，配合信息泄漏与 ROP 链实现远程代码执行。 漏洞信息 CVE 编号 : CVE-2026-14669 CVSS 评分 : 8.8 高危 漏洞类型 : 堆缓冲区溢出 → 远程代码执行 影响组件 : PostgreSQL tochartimestamptz 函数 发现团队 :...

nginx-rift-check

nginx-rift-check 发现存在 CVE-2026-42945 漏洞的配置，该漏洞是 nginx 的 ngxhttprewritemodule 中的堆缓冲区溢出。 仅运行受影响的 nginx 版本（0.6.27 到 1.30.0）并不足以被利用。配置必须包含一对特定的指令，而这对指令很罕见：两次对真实世界配置的独立扫描分别在 1465 个配置中发现 0 个可利用配置、在 35633 个中发现 1 个。本脚本会告诉你，你处于这条线的哪一侧。 它查找什么 一个 rewrite，其替换内容包含一个? 且后面带有参数，随后在同一个 location 中读取一个未命名捕获组 （$1 到...

Apache-Lua-Buffer-Overflow-Exploit-CVE-2021-44790

🔥 CVE-2021-44790 - Apache modlua 버퍼 오버플로우 익스플로잇 📋 개요 Apache modlua Buffer Overflow Exploitation 은 Apache HTTP Server 2.4.x modlua 모듈의 치명적인 버퍼 오버플로우 취약점인 CVE-2021-44790 을 위한 고급 엔터프라이즈급 익스플로잇 플랫폼입니다. 이 프레임워크는 포괄적인 핑거프린팅, 지능형 스크립트 발견, 다단계 스캐닝 및 95% 이상의 신뢰도 탐지 와 함께 전문적인 보고 기능을 제공합니다. ⚡ 주요 기능 기능| 설명...

CVE-2026-22013-Hardware-Wallet-USB-Descriptor-Buffer-Overflow

CVE-2026-22013 – ハードウェアウォレット USB ディスクリプタのバッファオーバーフロー プログラムコード（C ファームウェアシミュレーション） // hwwalletusb.c - USB descriptor parsing with fixed buffer include void handleusbsetupchar data, int len char descriptor32; if len 0 && data0 == 0x06 // GETDESCRIPTOR // Copy descriptor payload without bounds check...

openbsd_ov1

OpenBSD TCP/IP 오버플로우 최신 OpenBSD 7.2에서 테스트함 세부 사항: int ipdooptionsstruct mbuf m, struct ifnet ifp ... for ; cnt 0; cnt -= optlen, cp += optlen opt = cpIPOPTOPTVAL; if opt == IPOPTEOL break; if opt == IPOPTNOP optlen = 1; else if cnt cnt code = &cpIPOPTOLEN - uchar ip; goto bad; switch opt case...

netbsd_hfs

NetBSD hfs ローカルオーバーフロー バグの詳細: sizet hfslibreadanodeoffsetsvoid inbytes, uint16t outoffsetarray void ptr; if inbytes == NULL || outoffsetarray == NULL return 0; ptr = inbytes; / The offset for record 0 which is the very last offset in the node is always equal to 14, the size of the node descriptor...

CVE-2026-106177

A kernel buffer overflow vulnerability in HP Sure Click versions prior to 4.4.33 may allow local privilege escalation or arbitrary code execution. HP has released version 4.4.33 to address this vulnerability...

Important: Red Hat Security Advisory: cjose security update

An update for cjose is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

cjose: cjose: Heap buffer overflow in AES Key Wrap decryption leads to denial of service

A flaw was found in cjose, a C library for Javascript Object Signing and Encryption JOSE. A remote, unauthenticated attacker can exploit a heap buffer overflow vulnerability in the AES Key Wrap decryption process. By submitting a crafted Javascript Web Encryption JWE to an application, the attack...

CVE-2024-6387

CVE-2024-6387 CVE-2024-6387 is a hypothetical example, but let's assume it is a real-world vulnerability in the OpenSSH server implementation. This vulnerability could involve a buffer overflow or memory corruption issue that allows remote attackers to execute arbitrary code on the server. Here’s...