CVE-2024-27815

CVE-2024-27815 تجاوز سعة المخزن المؤقت في نواة XNU. أُدخل في xnu-10002.1.13، وعُولج في xnu-10063.121.3. الشرح: https://jprx.io/cve-2024-27815 gcc TURPENTINE.c -o TURPENTINE ./TURPENTINE الهاش $ sha256sum TURPENTINE.c f7160a6ad7d52f32d64b86cf3006c98a217954d80c3fc71a8f27595e227d0fa0 TURPENTINE.c تم...

CVE-2025-15467

CVE-2025-15467 Stack buffer overflow in OpenSSL CMS AuthEnvelopedData parsing. Vulnerability A stack buffer overflow exists in evpciphergetasn1aeadparams when parsing AEAD cipher parameters e.g., AES-GCM in CMS AuthEnvelopedData content. An oversized IV overflows a 16-byte stack buffer, allowing...

CVE-2025-55763

CVE-2025-55763 تجاوز سعة المخزن المؤقت في محلل URI الخاص بـ CivetWeb 1.16 أحدث إصدار حتى الآن. الكود الضعيف يحدث الانهيار هنا في src/civetweb.c أثناء آخر strcat المحدد. الإصلاح انظر طلب السحب. إثبات المفهوم يعمل الإثبات على تعطيل الخادم عن طريق تجاوز سعة الكومة heap overflow، ومع ذلك من الممكن...

CVE-2020-0796

CVE-2020-0796 CVE-2020-0796 Python POC: تجاوز سعة المخزن المؤقت https://github.com/eerykitty/CVE-2020-0796-PoC...

mongobleed

mongobleed CVE-2025-14847 استغلال ثغرة تسريب ذاكرة الكومة في MongoDB عبر قراءة زائدة في مخزن OPCOMPRESSED. الاستخدام $ bundle exec ruby mongobleed.rb --help Usage: mongobleed.rb options --host HOST Target host default: localhost --port PORT Target port default: 27017 --min-offset MIN Min doc leng...

SNMPocalypse-Cisco-Bug-Lets-Hackers-Crash-or-Command-Devices

SNMPocalypse-सिस्को-बग-हैकर्स-को-डिवाइस-क्रैश-या-कमांड-करने-देता-है CVE-2023-20352 Cisco IOS/IOS XE के SNMP इंजन में एक गंभीर स्टैक ओवरफ्लो दोष है। केवल तैयार किए गए SNMP पैकेटों से, दूरस्थ हमलावर सिस्टम को क्रैश कर सकते हैं या रूट नियंत्रण हथिया सकते हैं। सभी SNMP संस्करण असुरक्षित हैं - अभी पैच...

CVE-2026-42945_NginxRift

🚀 NGINX Rift PoC Automation — CVE-2026-42945 مشغّل أتمتة PoC لاستغلال RCE في حاويةnginx-rift · التحقق من الهدف ← استغلال بأمر واحد ← شل عكسي تفاعلي أمر واحد ينسّق مسار الاستغلال بالكامل — بدءًا من فحص الحاوية وحتى الوصول إلى شل. ⚠️ تحذير أخلاقي وقانوني هذه الأداة مخصصة فقط لاختبارات الأمان المشروع...

fgt-cve-2023-27997-exploit

fgt-cve-2023-27997-exploit سكربت إثبات المفهوم PoC لاستغلال ثغرة CVE‑2023‑27997 في FortiGate SSL‑VPN مع سلسلة ROP المحتويات الوصف الإصدارات المتأثرة التثبيت الاستخدام مثال على الإخراج التفاصيل التقنية تحذيرات المصادر الوصف fgt-cve-2023-27997-exploit.py هو سكربت إثبات مفهوم PoC لاستغلال الثغرة...

CVE-2021-3156-Baron-Samedit

CVE-2021-3156 - "Baron Samedit" Lab & Exploit This repository provides a self-contained, educational environment to understand and exploit CVE-2021-3156 , a heap-based buffer overflow in sudo that allows any unprivileged user to gain root privileges on vulnerable systems sudo versions prior to...

CVE-2015-8522.RCE

CVE-2015-8522 The Tivoli FastBack Server 6.1.4 application is vulnerable to a stack-based buffer overflow allowing threat-actors to gain Arbitrary Code Execution ACE via a remote TCP-connection. The PoC provided in this repository leverages this vulnerability to both execute CMD.exe on the target...

FreeRDP: FreeRDP: Denial of Service due to buffer over-read in RPC gateway

A flaw was found in FreeRDP. A remote attacker can exploit a buffer over-read vulnerability within the RPC Remote Procedure Call gateway transport parser by sending a malicious BINDACK Protocol Data Unit PDU with a truncated result entry. This can lead to a process abort, resulting in a Denial of...

FreeRDP: FreeRDP: Heap buffer overflow via oversized LB_LOAD_BALANCE_INFO routing token can lead to heap corruption.

A flaw was found in FreeRDP. A malicious RDP Remote Desktop Protocol server or a man-in-the-middle attacker could exploit a heap buffer overflow vulnerability during connection negotiation, prior to authentication. By sending a specially crafted Server Redirection PDU Protocol Data Unit with an...

FreeRDP: FreeRDP: Remote code execution via heap buffer overflow in Server Redirection PDU

A flaw was found in FreeRDP. A malicious Remote Desktop Protocol RDP server can exploit a heap-based buffer overflow vulnerability in the negosendnegotiationrequest function. By sending a specially crafted Server Redirection PDU message with an attacker-controlled LoadBalanceInfo field, the serve...

Important: Red Hat Security Advisory: freerdp security update

An update for freerdp is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

nginx-cve-2026-42945-check

NGINX CVE-2026-42945 Local Checker Language: 中文 | English This repository provides two standalone local scripts for checking whether a Linux or Windows server has Nginx, OpenResty, or Tengine instances that may be exposed to CVE-2026-42945 related risk. The scripts are read-only. They do not run ...

kernel: ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data()

A flaw was found in the Linux kernel's IPv6 In-situ Operations, Administration, and Maintenance IOAM functionality. A remote attacker can send a specially crafted packet that manipulates the nodelen field while processing trace data. This manipulation leads to a heap buffer overflow, causing...

Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update

An update for kernel is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

RLSA-2026:77369 Important: mod_auth_openidc:2.3 security update

The modauthopenidc is an OpenID Connect authentication module for Apache HTTP Server. It enables an Apache HTTP Server to operate as an OpenID Connect Relying Party and/or OAuth 2.0 Resource Server. Security Fixes: modauthopenidc: modauthopenidc: Denial of Service via malformed state cookie parsi...

mod_auth_openidc:2.3 security update

An update is available for module.modauthopenidc, module.cjose, cjose, modauthopenidc. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The modauthopenidc is an...

CVE-2026-42945

CVE-2026-42945: NGINX Rift हीप बफर ओवरफ्लो भेद्यता अवलोकन CVE-2026-42945, NGINX सर्वर में एक गंभीर हीप बफर ओवरफ्लो भेद्यता है, जिसे "NGINX Rift" कहा जाता है। यह भेद्यता NGINX के rewrite और set निर्देशों की प्रोसेसिंग लॉजिक में मौजूद है। जब विशिष्ट कॉन्फ़िगरेशन शर्तें पूरी होती हैं, तो हमलावर...