CVE-2023-4863

レベル1: craft.c - bad.webp root@kitploit: 存在確認: docker 813b6b757038 /webp cd CVE-2023-4863 make -f makefile.unix -B 致命的エラー: jpeglib.h: No such file or directory apt-get update apt-get install libjpeg-dev 致命的エラー: png.h: No such file or directory apt-get install libpng-dev 致命的エラー: tiffio.h: No such...

CVE-2021-20294-POC

CVE-2021-20294-POC 2023年1月21日、Altin tin-z、github.com/tin-z Poc ダウンロードしてコンパイルします root@kitploit: wget https://ftp.gnu.org/gnu/binutils/binutils-2.35.tar.gz && tar -xzvf binutils-2.35.tar.gz cd binutils-2.35 && ./configure && make && cd .. gcc -shared -fPIC poc.c -o poc.so -Wl,--version-script=poc.v...

practice-22-23

プロジェクト 実行方法: ./script.sh GitHub リポジトリ - https://github.com/LaCinquette/practice-22-23 実施手順 1. 脆弱性を探すため、FFmpegプロジェクトを選択しました。その中で、要件に一致するコミットを見つけました。具体的には: CWE-476 （ヌルポインタの参照外し）のタイプに一致 2. 以下の内容のDockerfileを作成しました: 1. ベースイメージとしてUbuntu 22.04を選択 2...

Exim-CVE-2019-15846

Exim CVE-2019-15846 CVE-2019-15846 を悪用するための PoC マテリアル。この PoC を解説したブログ記事は 以下のサイトで公開されています: Synacktiv Blog。 この PoC は、exim のヒープオーバーフローを悪用するために使用されるスプールファイルの生成を支援します。 2 つのサンプルスプールファイルは 1i7Jgy-0002dD-Pb-D と 1i7Jgy-0002dD-Pb-H にあります。 特別に細工されたスプールヘッダーファイルは exgen.py で生成できます。...

CVE-2026-76712

A vulnerability exists in the Analytics and Location Engine ALE that may allow for unauthorized access, information disclosure, or denial of service. An unauthenticated remote attacker could exploit the vulnerable system by sending specially crafted input or intercepting network communications...

CVE-2026-76712

A vulnerability exists in the HPE Networking Analytics and Location Engine (ALE) that may allow an unauthenticated remote attacker to gain unauthorized access , cause information disclosure , or trigger a denial of service . The vulnerability can be exploited by sending specially crafted input or...

CVE20265172poc

CVE20265172poc CVE-2026-5172: 細工されたリソースレコードを処理する extractaddresses のバッファオーバーフロー PoC トポロジーはこちら https://medium.com/@yanyuyingshu/reproduction-journal-dnsmasq-ecs-validation-and-buffer-overflow-flaws-e0fe0f66f60c 手順 1. vi /etc/dnsmasq.conf port=5353 listen-address=xxx.xxx.xxx.x bind-interfaces...

Cisco Identity Services Engine Multiple Vulnerabilities (cisco-sa-ise-mult-vul-ymSsTLCc)

According to its self-reported version, Cisco ISE is affected by multiple vulnerabilities. - A vulnerability in the SXP REST API of Cisco ISE could allow an authenticated, remote attacker to conduct SQL injection attacks. CVE-2026-20284 - A vulnerability in the SXP REST API of Cisco ISE could all...

github.com/go-git/go-billy: Billy: Denial of Service via crafted input due to insufficient validation

A flaw was found in Billy, an interface filesystem abstraction for Go. This vulnerability allows a remote attacker to cause a Denial of Service DoS by providing crafted or malformed input. The issue arises from insufficient validation and missing safety mechanisms when processing untrusted...

CVE-2026-76869

Netcore NR255-V version 1.5.130703 contains a stack-based buffer overflow in the reboot_timer_set.cgi endpoint, caused by improper sscanf token parsing . An attacker with authenticated access can submit crafted input to corrupt stack memory, potentially leading to code execution or service disrup...

CVE-2026-92239

A maliciously constructed IMAP line could cause an out-of-bounds buffer read. This vulnerability was fixed in Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3...

CVE-2026-76689

A vulnerability exists in the configuration processing logic of the affected component where malformed input is improperly processed. An authenticated remote attacker with administrative privileges could exploit this vulnerability by providing specially crafted configuration data. Successful...

CVE-2026-92239

A maliciously constructed IMAP line in Mozilla Thunderbird could cause an out-of-bounds buffer read . This vulnerability impacts versions prior to 156 , 140.16 , and 153.3 . Remediation is available in Thunderbird versions 156 , 140.16 , and 153.3 . Specific distribution packages, such as Debian ...

CVE-2026-80489

Converting crafted EUCJISX0213 input to UCS-4 or the internal wide character encoding, for example with iconv, in the GNU C Library version 2.3 to 2.44 may result in the converter making no progress, causing the calling application to hang. Some EUCJISX0213 sequences decode to two code points. If...

CVE-2026-77117

Converting crafted SHIFTJISX0213 input to UCS-4 or the internal wide character encoding, for example with iconv, in the GNU C Library version 2.3 to 2.44 may result in the converter making no progress, causing the calling application to hang. Some SHIFTJISX0213 sequences decode to two code points...

CVE-2026-90947

A flaw was found in GIMP. When processing a specially crafted lighting preset file, the Lighting Effects filter does not properly validate the number of light sources. This can lead to an out-of-bounds write, corrupting memory. An attacker could exploit this by convincing a user to open a malicio...

Astra Linux – Vulnerability in imagemagick

In the functions CatromWeights, MeshInterpolate, InterpolatePixelChannel, InterpolatePixelChannels, and InterpolatePixelInfo, which are all part of /MagickCore/pixel.c, there were multiple unconstrained pixel offset calculations that were used with the floor function. These calculations resulted ...

Astra Linux – Vulnerability found in Linux 5.15, Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: erofs: The issue of generating a order = MAXORDER warning due to an intentionally crafted negative isize has been fixed. As reported by syzbot 1, the root cause is that the isize field is a signed type, and a negative isize value...

Astra Linux – Vulnerability in openjpeg2

A flaw was discovered in OpenJPEG’s encoder. This flaw allows an attacker to provide specially crafted x,y offset inputs to OpenJPEG during encoding. The greatest threat of this vulnerability is to confidentiality, integrity, and system availability...

Astra Linux – Vulnerability in binutils

There is a flaw in binutils /opcodes/tic4x-dis.c. An attacker who can submit a crafted input file for processing by binutils could cause the use of uninitialized memory. The greatest threat is to the availability of the application, with a lower threat to data confidentiality. This flaw affects...