SpookySSL-Scanner

SpookySSL-Scanner SpookySSL CVE-2022-3602 SSLv3 Scanner for Windows, Linux, macOS Turkish Zafiyet Nasıl Oluşuyor? Öncelikle sorun byte boyutunu belirlerken ortaya çıkıyor. Bayt boyutunu belirlerken farkındaysanız NULL yani boş/sıfır değer tanımlanmamış yani bayt uzunluğu sıfır olarak...

CVE-2021-38297

Exploiting CVE-2021-38297: Vulnerability in GO Wasm Buffer Overflow Overview of the Vulnerability WebAssembly WASM serves as a binary instruction format executable in most modern web browsers. It acts as a compilation target for various high-level languages like C, C++, Rust, and GO, allowing cod...

CVE-2026-41089

CVE-2026-41089 ██████╗██╗ ██╗███████╗ ██╗ ██╗ ██╗ ██████╗ ██████╗ ██╔════╝██║ ██║██╔════╝ ██║ ██║███║██╔═████╗██╔═████╗ ██║ ██║ ██║█████╗ ███████║╚██║██║██╔██║██║██╔██║ ██║ ╚██╗ ██╔╝██╔══╝ ██╔══██║ ██║████╔╝██║████╔╝██║ ╚██████╗ ╚████╔╝ ███████╗ ██║ ██║ ██║╚██████╔╝╚██████╔╝ ╚═════╝ ╚═══╝ ╚══════...

CVE-2026-14669

CVE-2026-14669 - PostgreSQL tochar Timezone Abbreviation Heap Buffer Overflow PostgreSQL tochar function has a heap buffer overflow vulnerability when handling timezone formatting. By setting an overly long POSIX timezone abbreviation, an attacker can trigger an out-of-bounds write to a fixed...

nginx-rift-check

nginx-rift-check Finds configurations vulnerable to CVE-2026-42945 , the heap buffer overflow in nginx's ngxhttprewritemodule. Running an affected nginx version 0.6.27 through 1.30.0 is not enough to be exploitable. The configuration has to contain a specific pair of directives, and that pair is...

Apache-Lua-Buffer-Overflow-Exploit-CVE-2021-44790

🔥 CVE-2021-44790 - Apache modlua Buffer Overflow Exploitation 📋 Overview Apache modlua Buffer Overflow Exploitation is an advanced, enterprise-grade exploitation platform for CVE-2021-44790 - a critical buffer overflow vulnerability in the Apache HTTP Server 2.4.x modlua module. This framework...

CVE-2026-22013-Hardware-Wallet-USB-Descriptor-Buffer-Overflow

CVE-2026-22013 – Hardware Wallet USB Descriptor Buffer Overflow Program Code C firmware sim // hwwalletusb.c - USB descriptor parsing with fixed buffer include void handleusbsetupchar data, int len char descriptor32; if len 0 && data0 == 0x06 // GETDESCRIPTOR // Copy descriptor payload without...

openbsd_ov1

OpenBSD TCP/IP overflow Tested with latest OpenBSD 7.2 Details: int ipdooptionsstruct mbuf m, struct ifnet ifp ... for ; cnt 0; cnt -= optlen, cp += optlen opt = cpIPOPTOPTVAL; if opt == IPOPTEOL break; if opt == IPOPTNOP optlen = 1; else if cnt cnt code = &cpIPOPTOLEN - uchar ip; goto bad; switc...

netbsd_hfs

NetBSD hfs local overflow Bug details: sizet hfslibreadanodeoffsetsvoid inbytes, uint16t outoffsetarray void ptr; if inbytes == NULL || outoffsetarray == NULL return 0; ptr = inbytes; / The offset for record 0 which is the very last offset in the node is always equal to 14, the size of the node...

CVE-2026-106177

A kernel buffer overflow vulnerability in HP Sure Click versions prior to 4.4.33 may allow local privilege escalation or arbitrary code execution. HP has released version 4.4.33 to address this vulnerability...

Important: Red Hat Security Advisory: cjose security update

An update for cjose is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

cjose: cjose: Heap buffer overflow in AES Key Wrap decryption leads to denial of service

A flaw was found in cjose, a C library for Javascript Object Signing and Encryption JOSE. A remote, unauthenticated attacker can exploit a heap buffer overflow vulnerability in the AES Key Wrap decryption process. By submitting a crafted Javascript Web Encryption JWE to an application, the attack...

CVE-2024-6387

CVE-2024-6387 CVE-2024-6387 is a hypothetical example, but let's assume it is a real-world vulnerability in the OpenSSH server implementation. This vulnerability could involve a buffer overflow or memory corruption issue that allows remote attackers to execute arbitrary code on the server. Here’s...

LooneyPwner

LooneyPwner Herramienta de explotación para CVE-2023-4911, dirigida a la vulnerabilidad 'Looney Tunables' de glibc en varias distribuciones de Linux. LooneyPwner es una herramienta de explotación de prueba de concepto PoC que apunta a la vulnerabilidad crítica de desbordamiento de búfer, apodada...

cve-collector

CVE-Collector Simple Latest CVE Collector Written in Python There are various methods for collecting the latest CVE Common Vulnerabilities and Exposures information. This code was created to provide guidance on how to collect, what information to include, and how to code when creating a CVE...

CVE-2019-11932

CVE-2019-11932 The address of system and the gadget must be replaced by the actual address found by an information disclosure vulnerability. After replacing address of system and gadget. Run the code to generate the corrupted GIF file: notroot@osboxes:/Desktop/gif$ make...

Low: Red Hat Security Advisory: libxml2 security update

An update for libxml2 is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available...

libxml2: Stack Buffer Overflow in xmllint Interactive Shell Command Handling

A flaw was found in the interactive shell of the xmllint command-line tool, used for parsing XML files. When a user inputs an overly long command, the program does not check the input size properly, which can cause it to crash. This issue might allow attackers to run harmful code in rare...

inetutils-CVE-2019-0053-Patched-PKGBUILD

inetutils hasn't been updated in 5 years, and neither has the official Arch package. A patch has been released that addresses CVE-2019-0053 buffer overflow exploit from the use of sprintf instead of snprintf, but there's no official release in sight. Honestly, there's a lot more wrong with using...

netgear_r6700v3_circled

Exploiting a Stack Buffer Overflow on the NETGEAR R6700v3 CVE-2022-27646 with the Help of Symbolic Execution Introduction This repository is intended to demonstrate some functionalities of Morion, a proof-of-concept PoC tool to experiment with symbolic execution on real-world ARMv7 binaries. We...