4157 matches found
CVE-2023-4863
nivel 1: craft.c - bad.webp root@kitploit: exist: docker 813b6b757038 /webp cd CVE-2023-4863 make -f makefile.unix -B fatal error: jpeglib.h: No such file or directory apt-get update apt-get install libjpeg-dev fatal error: png.h: No such file or directory apt-get install libpng-dev fatal error:...
CVE-2021-20294-POC
CVE-2021-20294-POC 2023年1月21日, Altin tin-z, github.com/tin-z PoC 下载并编译 root@kitploit: wget https://ftp.gnu.org/gnu/binutils/binutils-2.35.tar.gz && tar -xzvf binutils-2.35.tar.gz cd binutils-2.35 && ./configure && make && cd .. gcc -shared -fPIC poc.c -o poc.so -Wl,--version-script=poc.ver 运行PoC...
CVE20265172poc
CVE20265172poc CVE-2026-5172: 针对精心构造的资源记录，extractaddresses 函数中存在缓冲区溢出漏洞的 PoC 拓扑结构请参阅此处 https://medium.com/@yanyuyingshu/reproduction-journal-dnsmasq-ecs-validation-and-buffer-overflow-flaws-e0fe0f66f60c 步骤 1. vi /etc/dnsmasq.conf port=5353 listen-address=xxx.xxx.xxx.x bind-interfaces no-resol...
AZL-99738 CVE-2026-6244 affecting package libpcap 1.10.6-1
libpcap BPF interpreter for the 'div k' and 'mod k' ALU instructions does not check whether the immediate value is zero. In particular uncommon use cases a crafted filter program can cause a division by zero...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: ffmpeg (UTSA-2026-106212)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-106212 advisory. An improper resource deallocation and closure vulnerability in the tools/zmqsend.c component of FFmpeg v8.0.1 allows attackers to cause a Denial of Service DoS via...
ALSA-2026:63022 Important: grafana security update
Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Security Fixes: net/mail: golang: net/mail: Denial of Service via pathological email address parsing CVE-2026-42499 net/mail: golang: Go net/mail: Denial of Service via crafted email inpu...
kernel: fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath
A flaw was found in the Linux kernel's CIFS Common Internet File System client. When the cifssanitizeprepath function processes specially crafted input, such as an empty string or a string containing only delimiters, it can attempt to read data beyond its allocated memory buffer. This out-of-boun...
kernel: fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath
A flaw was found in the Linux kernel's CIFS Common Internet File System client. When the cifssanitizeprepath function processes specially crafted input, such as an empty string or a string containing only delimiters, it can attempt to read data beyond its allocated memory buffer. This out-of-boun...
practice-22-23
Proyecto Para ejecutar: ./script.sh Repositorio en GitHub - https://github.com/LaCinquette/practice-22-23 Desarrollo 1. Para buscar la vulnerabilidad elegí el proyecto FFmpeg. Encontré en él un commit que cumplía los requisitos, a saber: Correspondía al tipo CWE-476 - desreferencia de puntero nul...
CVE-2026-18024
A flaw was found in PostgreSQL. A buffer over-read vulnerability in the ascii SQL function allows a user to disclose up to 3 bytes of memory after the end of a specific allocation by providing a specially crafted text value. This could lead to limited information disclosure. Mitigation To mitigat...
Exim-CVE-2019-15846
Exim CVE-2019-15846 用于利用 CVE-2019-15846 的 PoC 材料。解释该 PoC 的博客文章可在 Synacktiv Blog 上查看。 该 PoC 帮助生成用于利用 exim 中堆溢出的 spool 文件。 在 1i7Jgy-0002dD-Pb-D 和 1i7Jgy-0002dD-Pb-H 中提供了两个示例 spool 文件。 可以使用 exgen.py 生成特制的 spool 头文件。...
CVE-2026-84233
A flaw was found in rpm. A local attacker could supply a specially cra...
UBUNTU-CVE-2026-84233
A flaw was found in rpm. A local attacker could supply a specially cra...
CVE-2026-84640
A maliciously constructed mail header could lead to a one byte read past the end of a buffer. This vulnerability was fixed in Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2...
CVE-2026-73751
An authenticated user with low-privileged access could submit crafted input through the web-based management interface to execute arbitrary commands on the underlying operating system...
CVE-2026-73750 Authenticated Buffer Overflow Vulnerabilities in AOS-CX API Endpoint Leads to Possible Code Execution
Vulnerabilities exist in the authentication module that may improperly process malformed or truncated input. An authenticated remote attacker could exploit these vulnerabilities by providing specially crafted input from a compromised or hostile authentication server. Successful exploitation could...
EUVD-2026-40267
decode-uri-component: Denial of service via exponential decoding of malformed percent-encoded input...
CVE-2026-71514
A flaw was found in NLTK. This path traversal vulnerability in the CrubadanCorpusReader component allows an attacker, who controls a corpus package, to disclose file contents outside the intended corpus directory. This occurs because a specially crafted input can bypass security checks, leading t...
Unity Linux 20.1070a Security Update: grafana (UTSA-2026-104992)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104992 advisory. Billy is an interface filesystem abstraction for Go. Prior to versions 5.9.0 and 6.0.0-alpha.1, multiple components may improperly handle crafted or malformed input,...