9942 matches found
RTOS-F-16-Exploit---CVE-2019-7711
Green Hills INTEGRITY RTOS F-16 Exploit - CVE-2019-7711 Full Format String Exploitation Chain Realistic Ground Maintenance Attack on F-16 Avionics š Description This repository contains a Proof of Concept PoC for CVE-2019-7711 ā a Format String vulnerability in the Interpeak IPCOMShell TELNET...
GLUFS
Getting Leaks Using Format String. .d8888b. 888 888 888 8888888888 .d8888b. d88P Y88b 888 888 888 888 d88P Y88b 888 888 888 888 888 888 Y88b. 888 888 888 888 8888888 "Y888b. 888 88888 888 888 888 888 "Y88b. 888 888 888 888 888 888 "888 Y88b d88P 888 Y88b. .d88P 888 Y88b d88P "Y8888P88 88888888...
CVE-2024-23113
CVE-2024-23113 The script is designed to detect CVE-2024-23113, which is a format string vulnerability in the FortiGate FGFM service FortiGate to FortiManager protocol running on TCP port 541. The vulnerability occurs because an attacker can control a format string, which could lead to Remote Cod...
Rainfall
Rainfall Rainfall is an iso challenge slightly more complex than Snow Crash. You will have to dive deep into reverse engineering, learn to reconstruct a code, and understand it to detect faults. Will you reach the last level? Description Rainfall is a project from the cybersecurity branch of 42,...
username-anarchy
Username Anarchy Version: 0.6 20 September 2024 Author: urbanadventurer Andrew Horton Homepage: https://www.morningstarsecurity.com/research/username-anarchy Source: https://github.com/urbanadventurer/username-anarchy/ License: MIT Description Tools for generating usernames when penetration...
CVE-2019-11287
CVE-2019-11287: DoS via Heap Overflow in RabbitMQ Web Management Plugin Pivotal RabbitMQ, versions 3.7.x prior to 3.7.21 and 3.8.x prior to 3.8.1, and RabbitMQ for Pivotal Platform, 1.16.x versions prior to 1.16.7 and 1.17.x versions prior to 1.17.4, contain a web management plugin that is...
CVE-2019-7711
š”ļø CVE-2019-7711: Green Hills INTEGRITY RTOS Information Leak š Repository for technical documentation and resources on the Format String vulnerability in the Telnet server of Green Hills INTEGRITY RTOS v5.0.4. š General Description The vulnerability affects the IPCOMShell Telnet server from...
EUVD-2026-118540
Improper handling of non-secure-world input in NSC veneer functions of NXP MCUXpresso SDK TrustZone-M examples trustzoneexamples, affecting versions through 26.06.00-lts and 26.09.00-pvw2, may allow a non-secure caller to supply unvalidated pointers or untrusted data, causing a timing side-channe...
CVE-2026-118785
The NXP MCUXpresso SDK TrustZone-M examples (trustzone_examples) are vulnerable to improper handling of non-secure-world input within NSC veneer functions . This vulnerability affects versions through 26.06.00-lts and 26.09.00-pvw2 . A non-secure caller can provide unvalidated pointers or untrust...
CVE-2024-23113
CVE-2024-23113 The script is designed to detect CVE-2024-23113, which is a format string vulnerability in the FortiGate FGFM service FortiGate to FortiManager protocol running on TCP port 541. The vulnerability occurs because an attacker can control a format string, which could lead to Remote Cod...
VulnCheck KEV: CVE-2021-42911
A Format String vulnerability exists in DrayTek Vigor 2960 = 1.5.1.3, DrayTek Vigor 3900 = 1.5.1.3, and DrayTek Vigor 300B = 1.5.1.3 in the mainfunction.cgi file via a crafted HTTP message containing malformed QUERY STRING, which could let a remote malicious user execute arbitrary code...
Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS : DMitry vulnerabilities (USN-8980-1)
The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8980-1 advisory. It was discovered that DMitry incorrectly handled long arguments, leading to a stack-based buffer overflo...
SUSE CVE-2026-120059
For an updatable cursor over a table without OIDs that has an auto-increment int4 column, psqlODBC places that column's name, as reported by the server, into a printf-style format string. It later expands that string with one argument while it builds the WHERE clause of its positioned SELECT,...
CVE-2026-120059
A flaw was found in postgresql-odbc. When processing updatable cursors, the driver improperly uses a server-provided column name as a format string when constructing query statements. A malicious database server or an attacker able to create a table with a specially crafted column name can cause...
DEBIAN-CVE-2026-120059
For an updatable cursor over a table without OIDs that has an auto-increment int4 column, psqlODBC places that column's name, as reported by the server, into a printf-style format string. It later expands that string with one argument while it builds the WHERE clause of its positioned SELECT,...
CVE-2026-120059
For an updatable cursor over a table without OIDs that has an auto-increment int4 column, psqlODBC places that column's name, as reported by the server, into a printf-style format string. It later expands that string with one argument while it builds the WHERE clause of its positioned SELECT,...
CVE-2026-120059
For an updatable cursor over a table without OIDs that has an auto-increment int4 column, psqlODBC places that column's name, as reported by the server, into a printf-style format string. It later expands that string with one argument while it builds the WHERE clause of its positioned SELECT,...
CVE-2026-120059 psqlODBC uses a server-supplied column name as a format string
For an updatable cursor over a table without OIDs that has an auto-increment int4 column, psqlODBC places that column's name, as reported by the server, into a printf-style format string. It later expands that string with one argument while it builds the WHERE clause of its positioned SELECT,...
CVE-2026-120059 psqlODBC uses a server-supplied column name as a format string
For an updatable cursor over a table without OIDs that has an auto-increment int4 column, psqlODBC places that column's name, as reported by the server, into a printf-style format string. It later expands that string with one argument while it builds the WHERE clause of its positioned SELECT,...
EUVD-2026-115372
For an updatable cursor over a table without OIDs that has an auto-increment int4 column, psqlODBC places that column's name, as reported by the server, into a printf-style format string. It later expands that string with one argument while it builds the WHERE clause of its positioned SELECT,...