nginx-rift-check

nginx-rift-check Encuentra configuraciones vulnerables a CVE-2026-42945 , el desbordamiento de búfer en el heap del ngxhttprewritemodule de nginx. Ejecutar una versión afectada de nginx de 0.6.27 a 1.30.0 no es suficiente para ser explotable. La configuración debe contener un par específico de...

Apache-Lua-Buffer-Overflow-Exploit-CVE-2021-44790

🔥 CVE-2021-44790 - Explotación de desbordamiento de búfer en Apache modlua 📋 Resumen Apache modlua Buffer Overflow Exploitation es una plataforma de explotación avanzada de nivel empresarial para CVE-2021-44790 , una vulnerabilidad crítica de desbordamiento de búfer en el módulo modlua de Apache...

CVE-2026-22013-Hardware-Wallet-USB-Descriptor-Buffer-Overflow

CVE-2026-22013 – Desbordamiento de búfer del descriptor USB en billetera de hardware Código del programa simulación de firmware en C // hwwalletusb.c - USB descriptor parsing with fixed buffer include void handleusbsetupchar data, int len char descriptor32; if len 0 && data0 == 0x06 //...

openbsd_ov1

Desbordamiento TCP/IP en OpenBSD Probado con la última versión de OpenBSD 7.2 Detalles: int ipdooptionsstruct mbuf m, struct ifnet ifp ... for ; cnt 0; cnt -= optlen, cp += optlen opt = cpIPOPTOPTVAL; if opt == IPOPTEOL break; if opt == IPOPTNOP optlen = 1; else if cnt cnt code = &cpIPOPTOLEN -...

netbsd_hfs

Desbordamiento local de hfs en NetBSD Detalles del bug: sizet hfslibreadanodeoffsetsvoid inbytes, uint16t outoffsetarray void ptr; if inbytes == NULL || outoffsetarray == NULL return 0; ptr = inbytes; / The offset for record 0 which is the very last offset in the node is always equal to 14, the...

CVE-2026-106177

A kernel buffer overflow vulnerability in HP Sure Click versions prior to 4.4.33 may allow local privilege escalation or arbitrary code execution. HP has released version 4.4.33 to address this vulnerability...

cjose: cjose: Heap buffer overflow in AES Key Wrap decryption leads to denial of service

A flaw was found in cjose, a C library for Javascript Object Signing and Encryption JOSE. A remote, unauthenticated attacker can exploit a heap buffer overflow vulnerability in the AES Key Wrap decryption process. By submitting a crafted Javascript Web Encryption JWE to an application, the attack...

Important: Red Hat Security Advisory: cjose security update

An update for cjose is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

CVE-2024-6387

CVE-2024-6387 CVE-2024-6387 es un ejemplo hipotético, pero supongamos que se trata de una vulnerabilidad real en la implementación del servidor OpenSSH. Esta vulnerabilidad podría implicar un desbordamiento de búfer o un problema de corrupción de memoria que permite a atacantes remotos ejecutar...

LooneyPwner

LooneyPwner 针对CVE-2023-4911的利用工具，瞄准各种Linux发行版中的'Looney Tunables' glibc漏洞。 LooneyPwner 是一个针对GNU C库glibc中发现的严重缓冲区溢出漏洞（昵称"Looney Tunables"）的概念验证PoC利用工具。该漏洞官方编号为CVE-2023-4911，存在于各种Linux发行版中，带来重大风险，包括未经授权的数据访问和系统更改。 漏洞背景 上周，GNU...

cve-collector

CVE-Collector Simple Latest CVE Collector Written in Python There are various methods for collecting the latest CVE Common Vulnerabilities and Exposures information. This code was created to provide guidance on how to collect, what information to include, and how to code when creating a CVE...

CVE-2019-11932

CVE-2019-11932 La dirección de system y el gadget deben ser reemplazadas por la dirección real encontrada mediante una vulnerabilidad de divulgación de información. Después de reemplazar la dirección de system y del gadget, ejecuta el código para generar el archivo GIF corrupto:...

Low: Red Hat Security Advisory: libxml2 security update

An update for libxml2 is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available...

libxml2: Stack Buffer Overflow in xmllint Interactive Shell Command Handling

A flaw was found in the interactive shell of the xmllint command-line tool, used for parsing XML files. When a user inputs an overly long command, the program does not check the input size properly, which can cause it to crash. This issue might allow attackers to run harmful code in rare...

inetutils-CVE-2019-0053-Patched-PKGBUILD

inetutils no se ha actualizado en 5 años, y tampoco el paquete oficial de Arch. Se ha lanzado un parche que aborda CVE-2019-0053 un exploit de desbordamiento de búfer por el uso de sprintf en lugar de snprintf, pero no hay un lanzamiento oficial a la vista. Honestamente, hay muchos más problemas...

netgear_r6700v3_circled

Explotando un desbordamiento de búfer en la pila en el NETGEAR R6700v3 CVE-2022-27646 con la ayuda de la Ejecución Simbólica Introducción Este repositorio tiene como objetivo demostrar algunas funcionalidades de Morion, una herramienta de prueba de concepto PoC para experimentar con ejecución...

Low: Red Hat Security Advisory: libxml2 security update

An update for libxml2 is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CV...

libxml2: Stack Buffer Overflow in xmllint Interactive Shell Command Handling

A flaw was found in the interactive shell of the xmllint command-line tool, used for parsing XML files. When a user inputs an overly long command, the program does not check the input size properly, which can cause it to crash. This issue might allow attackers to run harmful code in rare...

Security Bulletin: Multiple vulnerabilities affect the Sniffer component as part of IBM Guardium Data Protection

Summary Multiple vulnerabilities have been addressed in the Sniffer component as part of IBM Guardium Data Protection Vulnerability Details CVEID:CVE-2026-75875 DESCRIPTION: IBM Guardium Data Protection could allow a remote attacker to execute arbitrary code due to path traversal. CWE:CWE-22:...

libxml2: Stack Buffer Overflow in xmllint Interactive Shell Command Handling

A flaw was found in the interactive shell of the xmllint command-line tool, used for parsing XML files. When a user inputs an overly long command, the program does not check the input size properly, which can cause it to crash. This issue might allow attackers to run harmful code in rare...