CVE-2026-54984

CVE-2026-54984 Windows ICCファイル解析における領域外書き込み — リモートコード実行 Zero Day Initiativeを通じて ZDI-CAN-30441 として報告され、ZDI-26-543 として公開され、2026年8月の更新サイクルでMicrosoftによって修正されました。 こんにちは、Kağan Çapar です。この脆弱性をZero Day Initiativeに報告し、同機関は2026年6月2日にMicrosoftへ開示しました。2026年8月11日 — 8月のPatch Tuesday —...

hcxtools

hcxtools 캡처 파일에서 해시 파일로 패킷을 변환하여 Hashcat 또는 John the Ripper와 함께 사용할 수 있는 작은 도구 모음입니다. 이 도구들은 Hashcat 및 John the Ripper와 100% 호환되며, Hashcat의 공식 지원을 받습니다. 간단한 설명 hcxtools의 주요 목적은 해시를 분석하여 자신의 WiFi 네트워크 내 취약점을 탐지하는 것입니다. 따라서 덤프 파일을 WPA-PBKDF2-PMKID+EAPOL 해시 파일로 변환하면 사용자가 WLAN-KEY 또는 PMK가 암호화되지 않은 상태...

bandiview-7.05-vuln-PoC

bandiview-7.05-vuln-PoC このリポジトリには、ファジングによって発見された Bandiview 7.05 の脆弱性に関する PoC が含まれています。 CVE-2024-45870 JXRファイル解析のDoS脆弱性 CVE-2024-45871 PSDファイル解析のDoS脆弱性 CVE-2024-45872 PSDファイル解析のスタックバッファオーバーフロー 詳細 ソフトウェア: BandiView バージョン: v7.05 2024/7/15, BuildNo=26122 クレジット JaeHo Cho @Jaecho6053 SongHyun Bae...

CVE-2023-4590

CVE-2023-4590 Frhed フリーヘックスエディタ v1.6.0 のPoC - dgndrn 作成のバッファオーバーフロー SEH 使用方法 exploit.py を実行し、作成された payload.txt のすべての文字列をコピーして、Frhed.exe を開く際のパラメータとして使用します。 root@kitploit: Frhed.exe payload...

CVE-2025-70330

🧩 CVE-2025-70330: Easy Grade Pro 4.1 ファイル解析の脆弱性 リバースエンジニアリングによる脆弱性調査が最初の一歩から可能であることを初心者に示すために作られた教育用の例です。 📑 目次 このリポジトリが存在する理由 「最初のCVEに至る道」との関連 学習に古いソフトウェアが最適な理由 この例が重要な理由 脆弱性について 技術的分析 📂 特定の不正なファイルだけがアプリケーションをクラッシュさせる理由 概念実証（PoC） クラッシュの挙動 備考 🎓 このリポジトリが存在する理由...

CVE-2021-22204

CVE-2021-22204 - ExifTool 任意代码実行 CVE-2021-22204 の改良版 Proof-of-Concept です。これは ExifTool バージョン 7.44 から 12.23 における脆弱性で、悪意のある DjVu ファイルを処理する際に任意のコード実行を可能にします。 クレジット これは派生作品です。脆弱性および元のエクスプロイトは私のものではありません。 役割| 誰 ---|--- 脆弱性の発見者| William Bowling @wcbowling、GitLab バグ報奨金プログラムを通じて報告 — 2021年4月 オリジナル PoC 作成者|...

OESA-2026-4056 gstreamer1-plugins-good security update

GStreamer is a streaming media framework, based on graphs of filters which operate on media data. Applications using this library can do anything from real-time sound processing to playing videos, and just about anything else media-related. Its plugin-based architecture means that new data types ...

OESA-2026-4055 gstreamer1-plugins-good security update

GStreamer is a streaming media framework, based on graphs of filters which operate on media data. Applications using this library can do anything from real-time sound processing to playing videos, and just about anything else media-related. Its plugin-based architecture means that new data types ...

OESA-2026-4053 gstreamer1-plugins-good security update

GStreamer is a streaming media framework, based on graphs of filters which operate on media data. Applications using this library can do anything from real-time sound processing to playing videos, and just about anything else media-related. Its plugin-based architecture means that new data types ...

OESA-2026-4054 gstreamer1-plugins-good security update

GStreamer is a streaming media framework, based on graphs of filters which operate on media data. Applications using this library can do anything from real-time sound processing to playing videos, and just about anything else media-related. Its plugin-based architecture means that new data types ...

Important: Red Hat Security Advisory: gstreamer1-plugins-good security update

An update for gstreamer1-plugins-good is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, ...

gstreamer-plugins-good: GStreamer: Remote code execution via heap-based buffer overflow in PNG file parsing

A flaw was found in GStreamer. This vulnerability, a heap-based buffer overflow during PNG file parsing, allows a remote attacker to execute arbitrary code. Successful exploitation requires user interaction, such as opening a malicious PNG file or visiting a specially crafted web page. The issue...

gstreamer-plugins-good: GStreamer: Remote code execution via MRF file parsing

A flaw was found in GStreamer. This out-of-bounds write vulnerability occurs during the parsing of MRF files due to improper validation of user-supplied data. A remote attacker could exploit this by tricking a user into visiting a malicious page or opening a malicious file. Successful exploitatio...

gstreamer-plugins-good: GStreamer: Remote code execution via heap-based buffer overflow in PNG file parsing

A flaw was found in GStreamer. This vulnerability, a heap-based buffer overflow during PNG file parsing, allows a remote attacker to execute arbitrary code. Successful exploitation requires user interaction, such as opening a malicious PNG file or visiting a specially crafted web page. The issue...

Important: Red Hat Security Advisory: gstreamer1-plugins-good security update

An update for gstreamer1-plugins-good is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severit...

gstreamer-plugins-good: GStreamer: Remote code execution via MRF file parsing

A flaw was found in GStreamer. This out-of-bounds write vulnerability occurs during the parsing of MRF files due to improper validation of user-supplied data. A remote attacker could exploit this by tricking a user into visiting a malicious page or opening a malicious file. Successful exploitatio...

Important: Red Hat Security Advisory: gstreamer1-plugins-good security update

An update for gstreamer1-plugins-good is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severit...

gstreamer-plugins-good: GStreamer: Remote code execution via MRF file parsing

A flaw was found in GStreamer. This out-of-bounds write vulnerability occurs during the parsing of MRF files due to improper validation of user-supplied data. A remote attacker could exploit this by tricking a user into visiting a malicious page or opening a malicious file. Successful exploitatio...

gstreamer-plugins-good: GStreamer: Remote code execution via heap-based buffer overflow in PNG file parsing

A flaw was found in GStreamer. This vulnerability, a heap-based buffer overflow during PNG file parsing, allows a remote attacker to execute arbitrary code. Successful exploitation requires user interaction, such as opening a malicious PNG file or visiting a specially crafted web page. The issue...

Important: Red Hat Security Advisory: gstreamer1-plugins-good security update

An update for gstreamer1-plugins-good is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating,...