Lucene search
+L

474 matches found

Kitploit
Kitploit
added 2026/08/25 5:17 p.m.2 views

CVE-2015-7547-master

Proporcionamos este código tal cual. Eres responsable de protegerte a ti mismo, tu propiedad y datos, y a otros de cualquier riesgo causado por este código. Este código puede provocar comportamientos inesperados e indeseables en tu máquina. Este código puede no detectar la vulnerabilidad en tu...

8.1CVSS8.1AI score0.91057EPSS
SaveExploits17
Kitploit
Kitploit
added 2026/08/25 4:18 p.m.1 views

CVE-2015-7547

このコードは現状のまま提供されています。お客様は、本コードによって生じるいかなるリスクからも、ご自身、ご自身の財産およびデータ、そして他者を保護する責任を負います。本 コードは、お客様のマシン上で予期しない望ましくない動作を引き起こす可能性があります。 本コードはお客様のシステム上の脆弱性を検出しない可能性があります。 このPOCはサーバーコードとクライアントコードの2つのコンポーネントで構成されていることに注意してください。 サーバーコードは脆弱性をトリガーするため、クライアントコードをクラッシュさせます。...

8.1CVSS8.1AI score0.91057EPSS
SaveExploits17
Kitploit
Kitploit
added 2026/08/25 4:19 a.m.1 views

CVE-2015-7547-proj-master

このコードは現状のまま提供されています。本コードによって生じるいかなるリスクからも、あなた自身、あなたの資産やデータ、そして他者を保護する責任はあなたにあります。本コードは、あなたのマシン上で予期せぬ望ましくない動作を引き起こす可能性があります。また、本コードがあなたのシステム上の脆弱性を検出しない可能性もあります。...

8.1CVSS8.1AI score0.91057EPSS
SaveExploits17
Kitploit
Kitploit
added 2026/08/25 4:17 a.m.1 views

CVE-glibc

CVE-glibc CVE-2015-0235 glibc の Get Host by Name 問題 コピー&ペーストして取得・確認する root@kitploit: wget https://github.com/alanmeyer/CVE-glibc/raw/master/get-GHOST.sh chmod +x get-GHOST.sh ./get-GHOST.sh 参考文献: https://googleonlinesecurity.blogspot.com/2016/02/cve-2015-7547-glibc-getaddrinfo-stack.html...

10CVSS6.8AI score0.94859EPSS
SaveExploits42
Kitploit
Kitploit
added 2026/08/25 2:42 a.m.2 views

CVE-2015-7547

CVE-2015-7547 glibc getaddrinfo 基于栈的缓冲区溢出...

8.1CVSS8.5AI score0.91057EPSS
SaveExploits17
Positive Technologies
Positive Technologies
added 2026/08/11 12:00 a.m.10 views

PT-2026-70100

Affected versions of cti-transmute contain an SSRF vulnerability in the /fetch misp event and /misp search events endpoints. The URL validation routine checked whether a supplied hostname was itself an IP literal and rejected private, loopback, link-local, or reserved IPs. However, ordinary domai...

8.7CVSS5.4AI score0.00301EPSS
SaveExploits0References2
OSV
OSV
added 2026/07/15 3:14 p.m.12 views

JLSEC-2026-764 In affected libpcap versions during the setup of a remote packet capture the internal function...

In affected libpcap versions during the setup of a remote packet capture the internal function sockinitaddress calls getaddrinfo and possibly freeaddrinfo, but does not clearly indicate to the caller function whether freeaddrinfo still remains to be called after the function returns. This makes i...

4.4CVSS6.8AI score0.00242EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2026/07/09 9:10 a.m.17 views

CVE-2026-33630

A flaw was found in c-ares. A use-after-free / double-free vulnerability exists in the query-completion handling path, where a query callback is invoked while the query is still linked in internal lookup structures. A remote attacker can exploit this via aresgetaddrinfo over TCP by sending crafte...

7.5CVSS6AI score
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/07/07 12:00 a.m.13 views

PT-2026-56309

Name of the Vulnerable Software and Affected Versions c-ares versions prior to 1.34.7 Description The software contains multiple issues. A use-after-free or double-free condition exists in query-completion handling, which can be remotely triggered via the ares getaddrinfo function over TCP...

5.3AI score
SaveExploits0References15
NVD
NVD
added 2026/07/03 8:16 p.m.21 views

CVE-2026-14607

A weakness has been identified in RT-Thread up to 5.0.2. This affects the function sysgetaddrinfo of the file components/lwp/lwpsyscall.c. Executing a manipulation of the argument aiaddr can lead to memory corruption. The attack can only be executed locally. The exploit has been made available to...

6.8CVSS0.00167EPSS
SaveExploits0References7
ATTACKERKB
ATTACKERKB
added 2026/07/03 7:45 p.m.12 views

CVE-2026-14607

A weakness has been identified in RT-Thread up to 5.0.2. This affects the function sysgetaddrinfo of the file components/lwp/lwpsyscall.c. Executing a manipulation of the argument aiaddr can lead to memory corruption. The attack can only be executed locally. The exploit has been made available to...

6.8CVSS5.4AI score0.00167EPSS
SaveExploits0References7
CVE
CVE
added 2026/07/03 7:45 p.m.35 views

CVE-2026-14607

CVE-2026-14607 affects RT-Thread up to 5.0.2, specifically the sys_getaddrinfo implementation in components/lwp/lwp_syscall.c. Manipulating the ai_addr argument can cause memory corruption; exploit public and local access required. A fix is being prepared in a pull request (RT-Thread/rt-thread#11...

6.8CVSS5.6AI score0.00167EPSS
SaveExploits0References7
OSV
OSV
added 2026/07/03 7:45 p.m.9 views

CVE-2026-14607 RT-Thread lwp_syscall.c sys_getaddrinfo memory corruption

A weakness has been identified in RT-Thread up to 5.0.2. This affects the function sysgetaddrinfo of the file components/lwp/lwpsyscall.c. Executing a manipulation of the argument aiaddr can lead to memory corruption. The attack can only be executed locally. The exploit has been made available to...

6.8CVSS5.6AI score
SaveExploits0References9
Positive Technologies
Positive Technologies
added 2026/07/03 12:00 a.m.27 views

PT-2026-55581

Name of the Vulnerable Software and Affected Versions RT-Thread versions prior to 5.0.3 Description A memory corruption issue exists in the sys getaddrinfo function within the components/lwp/lwp syscall.c file. A local attacker can trigger this by manipulating the ai addr argument. Recommendation...

6.8CVSS6.2AI score0.00167EPSS
SaveExploits0References11
NVD
NVD
added 2026/06/28 5:16 a.m.18 views

CVE-2026-10646

Zephyr's BSD-sockets getaddrinfo implementation subsys/net/lib/sockets/getaddrinfo.c passes a pointer to a stack-allocated state object struct getaddrinfostate aistate as the userdata of an asynchronous DNS resolver query. The socket layer waits on a semaphore with a timeout deliberately set...

7.4CVSS0.00447EPSS
SaveExploits1References2
CVE
CVE
added 2026/06/28 4:04 a.m.43 views

CVE-2026-10646

Zephyr's BSD-sockets getaddrinfo() (subsys/net/lib/sockets/getaddrinfo.c) has a use-after-return risk from a stack-allocated ai_state being kept as user_data during a DNS resolver retry. If a semaphore wait times out and the code retries without cancelling the previous query or resetting the sema...

7.4CVSS6.1AI score0.00447EPSS
SaveExploits1References2Affected Software1
Vulnrichment
Vulnrichment
added 2026/06/28 4:04 a.m.10 views

CVE-2026-10646 Use-after-return in `zsock_getaddrinfo()` when a timed-out DNS query is retried without cancellation

Zephyr's BSD-sockets getaddrinfo implementation subsys/net/lib/sockets/getaddrinfo.c passes a pointer to a stack-allocated state object struct getaddrinfostate aistate as the userdata of an asynchronous DNS resolver query. The socket layer waits on a semaphore with a timeout deliberately set...

7.4CVSS6.1AI score0.00447EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2026/06/28 4:04 a.m.25 views

CVE-2026-10646

Zephyr's BSD-sockets getaddrinfo implementation subsys/net/lib/sockets/getaddrinfo.c passes a pointer to a stack-allocated state object struct getaddrinfostate aistate as the userdata of an asynchronous DNS resolver query. The socket layer waits on a semaphore with a timeout deliberately set...

7.4CVSS6.1AI score0.00447EPSS
SaveExploits1References3Affected Software1
OSV
OSV
added 2026/06/28 4:04 a.m.10 views

CVE-2026-10646 Use-after-return in `zsock_getaddrinfo()` when a timed-out DNS query is retried without cancellation

Zephyr's BSD-sockets getaddrinfo implementation subsys/net/lib/sockets/getaddrinfo.c passes a pointer to a stack-allocated state object struct getaddrinfostate aistate as the userdata of an asynchronous DNS resolver query. The socket layer waits on a semaphore with a timeout deliberately set...

7.4CVSS6.1AI score
SaveExploits0References5
RedhatCVE
RedhatCVE
added 2026/06/05 7:15 p.m.14 views

CVE-2026-46727

An issue was discovered in Ruby 4 before 4.0.5. A race condition leading to a use-after-free in the pthread-based getaddrinfo timeout handler rbgetaddrinfo in ext/socket/raddrinfo.c allows a remote attacker who can delay DNS responses near the user-specified timeout to crash a Ruby process that...

8.1CVSS5.5AI score0.00478EPSS
SaveExploits0References1
Rows per page
Query Builder