3770 matches found
CVE-2024-38077-MadLicense-exploit
CVE-2024-38077 MadLicense - 完整利用框架 📚 演示技术文档 本文档解释框架的每个组件 、为什么存在 以及如何在现代 Windows 上利用堆缓冲区溢出 。 🎯 什么是 CVE-2024-38077？ 漏洞 Windows 远程桌面授权服务 lserver.exe 在 CDataCoding::DecodeData 函数中存在堆缓冲区溢出 。 ┌─────────────────────────────────────────────────────────────┐ │ 漏洞：大小计算错误 │...
CVE-2026-100523 Cotonti through 1.0.0 Open Redirect via message.php redirect parameter
Cotonti through 1.0.0 contains an open redirect vulnerability in message.php that base64-decodes the redirect parameter without domain validation. Unauthenticated attackers can craft malicious links with encoded external URLs to redirect users to arbitrary sites via meta refresh tags for phishing...
DEBIAN-CVE-2026-92842
The convert.base64-encode, convert.quoted-printable-encode and convert.quoted-printable-decode stream filters accept a line-break-chars option whose length is tracked separately from the string itself. The filter constructors duplicate the value with pestrdup, which stops at the first NUL byte,...
AZL-104898 CVE-2026-92842 affecting package php 8.3.33-1
The convert.base64-encode, convert.quoted-printable-encode and convert.quoted-printable-decode stream filters accept a line-break-chars option whose length is tracked separately from the string itself. The filter constructors duplicate the value with pestrdup, which stops at the first NUL byte,...
CVE-2026-92842
The convert.base64-encode, convert.quoted-printable-encode and convert.quoted-printable-decode stream filters accept a line-break-chars option whose length is tracked separately from the string itself. The filter constructors duplicate the value with pestrdup, which stops at the first NUL byte,...
CVE-2026-92842
The convert.base64-encode, convert.quoted-printable-encode and convert.quoted-printable-decode stream filters accept a line-break-chars option whose length is tracked separately from the string itself. The filter constructors duplicate the value with pestrdup, which stops at the first NUL byte,...
EUVD-2026-87351
The convert.base64-encode, convert.quoted-printable-encode and convert.quoted-printable-decode stream filters accept a line-break-chars option whose length is tracked separately from the string itself. The filter constructors duplicate the value with pestrdup, which stops at the first NUL byte,...
CVE-2026-92842
The PHP language is vulnerable to an out-of-bounds read and information leak in the convert.base64-encode, convert.quoted-printable-encode, and convert.quoted-printable-decode stream filters. The root cause is that the line-break-chars option's length is tracked independently of the string itself...
CVE-2026-92842 OOB read / info leak in convert.* stream filters when line-break-chars contains NUL
The convert.base64-encode, convert.quoted-printable-encode and convert.quoted-printable-decode stream filters accept a line-break-chars option whose length is tracked separately from the string itself. The filter constructors duplicate the value with pestrdup, which stops at the first NUL byte,...
CVE-2026-92842
The convert.base64-encode, convert.quoted-printable-encode and convert.quoted-printable-decode stream filters accept a line-break-chars option whose length is tracked separately from the string itself. The filter constructors duplicate the value with pestrdup, which stops at the first NUL byte,...
CVE-2025-54322
CVE-2025-54322 - XSpeeder SXZOS Pre-Auth RCE Scanner A multi-threaded vulnerability scanner for CVE-2025-54322, an unauthenticated remote code execution vulnerability in XSpeeder SXZOS firmware affecting 70,000+ hosts globally. 📋 Table of Contents About the Vulnerability Features Installation Usa...
volatility
This project is archived. See Volatility 3 for modern investigations: https://github.com/volatilityfoundation/volatility3 ============================================================================ Volatility Framework - Volatile memory extraction utility framework The Volatility Framework is a...
CVE-2026-92842: Heap-based Buffer Overflow
The convert.base64-encode, convert.quoted-printable-encode and convert.quoted-printable-decode stream filters accept a line-break-chars option whose length is tracked separately from the string itself. The filter constructors duplicate the value with pestrdup, which stops at the first NUL byte,...
binviz
binviz Visualizador y herramienta de triaje de binarios: vistas interactivas vinculadas entropía, histogramas, superficies de imagen/dot-plot, grafos de flujo de control sobre un único modelo de espacio de direcciones compartido. pipx install binviz && binviz serve Qué hace Abre un archivo y cada...
CVE-2025-57926
Sink: Según el mecanismo del núcleo de WordPress, el XSS se previene en el contenido de las publicaciones, pero con este plugin, el contenido se codifica y luego se decodifica al renderizarse, creando involuntariamente una vulnerabilidad XSS." PoC: El payload codificado en base64 es...
CVE-2025-55752
CVE-2025-55752: Vulnerabilidad de Path Traversal en Apache Tomcat Entorno de reproducción basado en Docker para CVE-2025-55752, una vulnerabilidad de path traversal en Apache Tomcat 10.1.44. Descripción general CVE-2025-55752 es una vulnerabilidad de path traversal en RewriteValve de Apache Tomca...
gibbonlms-filewrite_rce
Gibbon LMS Escritura Arbitraria de Archivos / RCE Información de la Vulnerabilidad Escritura Arbitraria de Archivos en Gibbon LMS para RCE CVE-2023-45878 GibbonEdu Gibbon LMS versión 25.0.1 y anteriores permite la Escritura Arbitraria de Archivos porque rubricsvisualisesaveAjax.php no requiere...
CVE-2025-60751
CVE-2025-60751: GeographicLib 基于栈的缓冲区溢出 📌 本仓库包含漏洞 CVE-2025-60751 的分析和技术文档，这是一个位于 C++ 库 GeographicLib 中的基于栈的缓冲区溢出 漏洞。 📝 描述 该漏洞存在于 GeoConvert 组件中的 DMS::InternalDecode 函数内。 当库尝试处理格式错误或过长的 DMS （度、分、秒）坐标字符串时，会导致超出栈上分配缓冲区边界的写入 。 标识符 ：CVE-2025-60751 组件 ：GeoConvert / DMS::InternalDecode 类型 ：基于栈的缓冲区溢出...
EUVD-2026-38446
Plug: quadratic-time decoding of nested query/body parameters enables denial of service...
CVE-2026-84446
A flaw was found in libheif, a HEIF and AVIF file format decoder and encoder. A remote attacker could provide a crafted HEIF file containing malicious sequence timing and edit-list data. This could lead to non-terminating decode loops and unbounded memory allocation, resulting in severe CPU and...