EUVD-2026-94837

Heap-based buffer overflow in the legacy Blowfish decryption routine BlowFishEncryptor::DecryptFromString in Progressive Robot hMailServer 6.0.0 through 6.3.3 on Windows allows a local interactive user with no hMailServer credentials to write bytes of their choosing past the end of a 255-byte hea...

CVE-2026-103010

Progressive Robot hMailServer versions 6.0.0 through 6.3.3 on Windows are vulnerable to a heap-based buffer overflow in the legacy Blowfish decryption routine (BlowFishEncryptor::DecryptFromString ). A local interactive user without credentials can exploit this by passing a long hexadecimal strin...

CVE-2026-103010 Heap-based Buffer Overflow in hMailServer

Heap-based buffer overflow in the legacy Blowfish decryption routine BlowFishEncryptor::DecryptFromString in Progressive Robot hMailServer 6.0.0 through 6.3.3 on Windows allows a local interactive user with no hMailServer credentials to write bytes of their choosing past the end of a 255-byte hea...

CVE-2025-15467

CVE-2025-15467 OpenSSL CMS AuthEnvelopedData 解析におけるスタックバッファオーバーフロー 脆弱性 evpciphergetasn1aeadparams が CMS AuthEnvelopedData コンテンツ内の AEAD 暗号パラメータ（例: AES-GCM）を解析する際に、スタックバッファオーバーフローが存在します。過大なサイズの IV が 16 バイトのスタックバッファをオーバーフローさせ、サービス拒否および潜在的なリモートコード実行を引き起こす可能性があります。 影響を受けるバージョン ブランチ| 影響あり| 修正済み...

CVE-2025-55763

CVE-2025-55763 CivetWeb 1.16（目前为最新版本）的 URI 解析器中存在缓冲区溢出漏洞。 易受攻击的代码 崩溃发生在此处 src/civetweb.c中最后一个被标记的 strcat 调用期间。 修复 参见拉取请求。 PoC 该 PoC 通过堆溢出使服务器崩溃，不过通过为此漏洞精心构造利用代码，有可能实现远程代码执行。 cat httprequestcrashinput.txt | nc 127.0.0.1 8080...

mongobleed

mongobleed CVE-2025-14847 OPCOMPRESSED 버퍼 오버리드를 통한 MongoDB 힙 메모리 노출 익스플로잇. 사용법 $ bundle exec ruby mongobleed.rb --help Usage: mongobleed.rb options --host HOST Target host default: localhost --port PORT Target port default: 27017 --min-offset MIN Min doc length default: 20 --max-offset MAX Max do...

SNMPocalypse-Cisco-Bug-Lets-Hackers-Crash-or-Command-Devices

SNMPocalypse-Cisco-Bug-Lets-Hackers-Crash-or-Command-Devices CVE-2023-20352は、Cisco IOS/IOS XEのSNMPエンジンにおける深刻なスタックオーバーフローの脆弱性です。巧妙に細工されたSNMPパケットを送信するだけで、リモートの攻撃者はシステムをクラッシュさせたり、root制御を乗っ取ったりできます。すべてのSNMPバージョンが影響を受けます。今すぐパッチを適用しないと、完全な侵害のリスクがあります。 Mark Malllia 著 SNMP入門 Simple Network Management...

CVE-2026-42945_NginxRift

🚀 NGINX Rift PoC Automation — CVE-2026-42945 nginx-rift コンテナのRCEエクスプロイト用 PoC Automation Driver · ターゲット検証 → シングルコマンドエクスプロイト → 対話型リバースシェル 1つのコマンドが、コンテナ確認からシェル取得までのエクスプロイト全体の流れをオーケストレーションします。 ⚠️ 倫理的・法的警告 このツールは正当かつ許可を得たセキュリティテスト専用 です —...

CVE-2021-3156-Baron-Samedit

CVE-2021-3156 - "Baron Samedit" 실습 및 익스플로잇 이 저장소는 CVE-2021-3156 을 이해하고 익스플로잇하기 위한 자체 포함된 교육 환경을 제공합니다. 이 취약점은 sudo의 힙 기반 버퍼 오버플로로, 취약한 시스템sudo 버전 1.9.5p2 이전에서 권한이 없는 사용자가 루트 권한을 얻을 수 있게 합니다. 이 자료는 권한이 부여된 보안 교육 및 연구 목적으로만 사용됩니다. 귀하가 소유하지 않은 시스템에 대한 무단/비윤리적 사용은 불법입니다. 저장소 내용 Dockerfile - 취약한 sudo...

CVE-2015-8522.RCE

CVE-2015-8522 IBM Tivoli FastBack Server 6.1.4 애플리케이션은 스택 기반 버퍼 오버플로우 취약점이 존재하여, 위협 행위자가 원격 TCP 연결을 통해 임의 코드 실행ACE을 달성할 수 있습니다. 이 저장소에서 제공하는 PoC는 이 취약점을 활용하여 대상에서 CMD.exe를 실행하고, 들어오는 연결을 처리하여 리버스 셸을 구축합니다. !NOTE 이 PoC는 이전에 공개된 PoC를 기반으로 하며, ASLR 우회 기능이 추가되었고, 일반적인 소프트웨어 공학 패러다임을 따르는 개선된 아키텍처로...

FreeRDP: FreeRDP: Heap buffer overflow via oversized LB_LOAD_BALANCE_INFO routing token can lead to heap corruption.

A flaw was found in FreeRDP. A malicious RDP Remote Desktop Protocol server or a man-in-the-middle attacker could exploit a heap buffer overflow vulnerability during connection negotiation, prior to authentication. By sending a specially crafted Server Redirection PDU Protocol Data Unit with an...

FreeRDP: FreeRDP: Remote code execution via heap buffer overflow in Server Redirection PDU

A flaw was found in FreeRDP. A malicious Remote Desktop Protocol RDP server can exploit a heap-based buffer overflow vulnerability in the negosendnegotiationrequest function. By sending a specially crafted Server Redirection PDU message with an attacker-controlled LoadBalanceInfo field, the serve...

FreeRDP: FreeRDP: Denial of Service due to buffer over-read in RPC gateway

A flaw was found in FreeRDP. A remote attacker can exploit a buffer over-read vulnerability within the RPC Remote Procedure Call gateway transport parser by sending a malicious BINDACK Protocol Data Unit PDU with a truncated result entry. This can lead to a process abort, resulting in a Denial of...

Important: Red Hat Security Advisory: freerdp security update

An update for freerdp is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

nginx-cve-2026-42945-check

NGINX CVE-2026-42945 로컬 점검 스크립트 언어: 중국어 | 영어 이 리포지토리는 Linux / Windows 서버에서 Nginx, OpenResty, Tengine에 CVE-2026-42945 관련 위험이 있는지 로컬에서 진단하기 위한 두 개의 단독 점검 스크립트를 제공합니다. 스크립트는 읽기 전용 수집과 로컬 판단만 수행하며, 취약점 PoC를 실행하지 않고, 공격 요청을 보내지 않으며, 설정을 수정하지 않고, 서비스를 재시작하지 않으며, 소프트웨어를 업그레이드하지 않습니다. 취약점 배경...

Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update

An update for kernel is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

kernel: ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data()

A flaw was found in the Linux kernel's IPv6 In-situ Operations, Administration, and Maintenance IOAM functionality. A remote attacker can send a specially crafted packet that manipulates the nodelen field while processing trace data. This manipulation leads to a heap buffer overflow, causing...

RLSA-2026:77369 Important: mod_auth_openidc:2.3 security update

The modauthopenidc is an OpenID Connect authentication module for Apache HTTP Server. It enables an Apache HTTP Server to operate as an OpenID Connect Relying Party and/or OAuth 2.0 Resource Server. Security Fixes: modauthopenidc: modauthopenidc: Denial of Service via malformed state cookie parsi...

mod_auth_openidc:2.3 security update

An update is available for module.modauthopenidc, module.cjose, cjose, modauthopenidc. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The modauthopenidc is an...

CVE-2026-42945

CVE-2026-42945: NGINX Rift ヒープバッファオーバーフロー脆弱性 概要 CVE-2026-42945 は、NGINX サーバーにおける深刻なヒープバッファオーバーフローの脆弱性であり、「NGINX Rift」と呼ばれています。この脆弱性は NGINX の rewrite および set ディレクティブの処理ロジックに存在し、特定の設定条件が満たされた場合、攻撃者は悪意のあるリクエストを構築してヒープオーバーフローを引き起こし、サービス拒否（DoS）や潜在的なリモートコード実行（RCE）を引き起こす可能性があります。 脆弱性の種類 : ヒープバッファオーバーフロー...