CVE-2026-0006-openapv-poc

CVE-2026-0006: libopenapv Android APV コーデック のヒープバッファオーバーフロー Mobile Hacking Lab によるパッチ解析と再現 CVSS 9.8 Critical | 実際に悪用済み | 2026年3月パッチ適用 注記: この脆弱性は私たちが発見したものではありません。CVE-2026-0006の発見と責任ある報告のすべての功績は、元の研究者に帰属します。このリポジトリには、セキュリティコミュニティがこのバグクラスと悪用手法を理解するのに役立つよう、私たちが独立して行ったパッチ解析、再現、教育用解説 が含まれています。 概要...

python-codext

CodExt 어떤 것이든 인코딩/디코딩하세요. CodExt는 Python2-3 호환 라이브러리로, 네이티브 codecs 라이브러리를 확장하여 새로운 사용자 정의 인코딩 및 문자 매핑 추가 120개 이상의 새로운 코덱 을 제공하며, 이름은 CODecs EXTension 에서 유래했습니다. 또한 여러 인코딩 계층을 디코딩하기 위한 추측 모드 와 편의를 위한 CLI 도구 를 제공합니다.sh $ pip install codext root@kitploit: 새 코덱을 기여하고 싶으신가요? | 새 매크로를 기여하고 싶으신가요?...

external_aac_android-4.2.2_r1_CVE-2023-21282

이 저장소에는 README가 없습니다...

Envoy-CPU-Exhaustion-Vulnerability-PoC

Envoy CPU 고갈 취약점 PoC 이 저장소는 CONTINUATION 프레임의 플러드로 인한 Envoy의 CPU 고갈 취약점을 시연하는 개념 증명PoC Python 스크립트를 포함합니다. 저자: blackmagic 2024 설명 Envoy는 현대 클라우드 네이티브 애플리케이션을 위해 설계된 클라우드 네이티브 오픈소스 엣지 및 서비스 프록시입니다. 그러나 1.29.3, 1.28.2, 1.27.4, 1.26.8 이전 버전은 CONTINUATION 프레임의 플러드로 인해 CPU 고갈에 취약합니다. Envoy의 HTTP/2 코덱은...

gdcm-security-poc

GDCM findings 1-6: 再現パッケージ GDCM における6件のパーサー/コーデック欠陥を、v3.2.6 上でサニタイザー障害または有界な伝播チェックとして再現したもの。各自動トリガーには、脆弱なシグナルを発生させないほぼ有効なコントロールが付属する。Finding 1 には計装された制御フロープリミティブも含まれる。 メンテナーおよび脆弱性コーディネーターのレビューを目的とする。何かを実行する前に SAFETY.md を読むこと。 固定ターゲット manifest/targets.env:...

CVE-2019-2107

CVE-2019-2107 CVE-2019-2107 CVE-2019-2107 - выглядит пугающе. До сих пор помню уязвимости Stagefright и PNG.... С CVE-2019-2107 декодер/кодек работает под пользователем mediacodec, и с помощью специально "созданного" видео с включенными тайлами - pspps-i1tilesenabledflag можно, возможно, выполнит...

platform_external_libvpx_v1.4.0_CVE-2023-5217

README - 2015년 3월 23일 WebM VP8/VP9 코덱 SDK에 오신 것을 환영합니다! 애플리케이션/라이브러리 컴파일: 사용된 빌드 시스템은 autotools와 유사합니다. 일반적으로 빌드는 원하는 빌드 옵션으로 "구성한 후" GNU make를 사용하여 애플리케이션을 빌드하는 것으로 구성됩니다. 1. 전제 조건 root@kitploit: 모든 x86 대상에는 Yasm1 어셈블러가 설치되어 있어야 합니다. root@kitploit: 모든 Windows 빌드에는 Cygwin2이 설치되어 있어야 합니다. 문서를 빌드하려...

netty: io.netty/netty-codec-http: Netty: Denial of Service via memory exhaustion in SPDY-to-HTTP codec

A flaw was found in Netty. A remote attacker can exploit a vulnerability in the SpdyHttpDecoder handler of Netty's SPDY-to-HTTP codec. When processing a client-initiated SYNSTREAM frame, the decoder fails to release allocated memory if the stream is reset or content limits are exceeded. This...

activemq-stomp: Apache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ Stomp: Unbounded header buffer in STOMP NIO codec

Memory Allocation with Excessive Size Value vulnerability in Apache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ Stomp. An unauthenticated client that opens a STOMP NIO connection can send header bytes that never terminate which makes the broker buffer them without limit, exhausting the JVM hea...

io.netty/netty-codec-http: Netty: Memory exhaustion in netty-codec-http (decompression bomb)

A flaw was found in the Netty netty-codec-http component. A remote attacker can send HTTP requests containing highly compressed data. The HTTP decoder in netty-codec-http fails to properly limit the decompression of this content, causing the system to consume excessive memory. This can lead to...

netty: io.netty/netty-codec-mqtt: Netty: Denial of Service due to excessive resource consumption from crafted MQTT 5 header

A flaw was found in Netty, an asynchronous event-driven network application framework. A remote attacker can exploit this vulnerability by sending a crafted MQTT 5 header with an oversized Properties section. This causes Netty to repeatedly parse and buffer the large Properties section in memory...

craw

CRAW: Codec Robust Audio Watermarking CRAW のソースコードです。STFTマグニチュード領域への埋め込みに基づく堅牢な音声透かし手法です。エンコーダはバイナリメッセージを音声クリップのマグニチュードスペクトログラムに埋め込み（位相はクリーン信号から保持）、デコーダは幅広い信号処理、ニューラルコーデック、ノイズ除去、ボコーダ攻撃下でメッセージを復元します。 このリポジトリは TimbreWatermarking NDSS 2024 のフォークであり、以下の機能が拡張されています: 堅牢な歪み層 — トレーニング中の微分可能な攻撃シミュレーション...

platform_external_libvpx_v1.8.0_CVE-2023-5217

README - 31 января 2019 Добро пожаловать в SDK кодеков WebM VP8/VP9! КОМПИЛЯЦИЯ ПРИЛОЖЕНИЙ/БИБЛИОТЕК: Используемая система сборки аналогична autotools. Сборка обычно состоит из "настройки" с желаемыми опциями сборки, а затем использования GNU make для сборки приложения. 1. Предварительные...

io.netty/netty-codec-http: Netty: Memory exhaustion in netty-codec-http (decompression bomb)

A flaw was found in the Netty netty-codec-http component. A remote attacker can send HTTP requests containing highly compressed data. The HTTP decoder in netty-codec-http fails to properly limit the decompression of this content, causing the system to consume excessive memory. This can lead to...

io.netty/netty-codec-haproxy: Netty codec-haproxy: Denial of Service via crafted PROXY protocol v2 message

A flaw was found in Netty's codec-haproxy module. A remote attacker could exploit a vulnerability in the HAProxyMessageDecoder by sending a specially crafted PROXY protocol v2 message. This leads to unbounded buffer accumulation, causing a denial of service DoS due to memory exhaustion...

netty-codec-http2: netty-codec-http2: Denial of Service due to resource leak

A flaw was found in netty-codec-http2. A remote attacker could send specially crafted frames that cause a resource leak within the DelegatingDecompressorFrameListener class. This resource leak could lead to an Out Of Memory Error OOME, potentially causing a Denial of Service DoS by taking down th...

netty-codec-haproxy: Netty HAProxy PROXY protocol v2 codec: Denial of Service via memory leak from crafted PROXY protocol headers

A flaw was found in the Netty HAProxy PROXY protocol v2 codec. A remote attacker can exploit this vulnerability by sending a specially crafted HAProxy PROXY protocol v2 header with nested PP2TYPESSL type-length-value TLV records. This can lead to a memory leak, causing the underlying cumulation...

netty-codec-haproxy: Netty-codec-haproxy: Denial of Service via malformed HAProxy message

A flaw was found in netty-codec-haproxy, a component of the Netty network application framework. A remote attacker can exploit this vulnerability by sending a specially crafted HAProxy message with a malformed PP2TYPESSL TLV Type-Length-Value header. This can lead to an IndexOutOfBoundsException...

activemq-stomp: Apache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ Stomp: Unbounded header buffer in STOMP NIO codec

Memory Allocation with Excessive Size Value vulnerability in Apache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ Stomp. An unauthenticated client that opens a STOMP NIO connection can send header bytes that never terminate which makes the broker buffer them without limit, exhausting the JVM hea...

netty: io.netty/netty-codec-http: Netty: Denial of Service via SPDY header decompression amplification

A flaw was found in Netty, a network application framework. A remote attacker could exploit a vulnerability in the SPDY header decoding process. By sending a specially crafted, small compressed header block, the attacker can cause it to expand significantly during decompression, leading to...