Lucene search
+L

474 matches found

Kitploit
Kitploit
added 2026/08/25 5:17 p.m.2 views

CVE-2015-7547-master

이 코드는 있는 그대로 제공됩니다. 귀하께서는 이 코드로 인해 발생할 수 있는 모든 위험으로부터 자신, 재산, 데이터 및 타인을 보호할 책임이 있습니다. 이 코드는 귀하의 기기에서 예상치 못하거나 바람직하지 않은 동작을 유발할 수 있습니다. 이 코드는 귀하의 시스템에서 취약점을 탐지하지 못할 수도 있습니다. 이 POC는 서버 코드와 클라이언트 코드의 두 가지 구성 요소로 구성되어 있습니다. 서버 코드는 취약점을 트리거하여 클라이언트 코드를 충돌시킵니다. 또한 테스트 중에 이름 서버를 서버 코드를 가리키도록 설정해야 하며, 그렇...

8.1CVSS8.1AI score0.91057EPSS
SaveExploits17
Kitploit
Kitploit
added 2026/08/25 4:18 p.m.2 views

CVE-2015-7547

이 코드는 있는 그대로 제공됩니다. 귀하는 이 코드로 인해 발생하는 모든 위험으로부터 자신, 자신의 재산 및 데이터, 그리고 다른 사람들을 보호할 책임이 있습니다. 이 코드는 귀하의 컴퓨터에서 예상치 못한 바람직하지 않은 동작을 유발할 수 있습니다. 이 코드는 귀하의 시스템에서 취약점을 탐지하지 못할 수 있습니다. 이 POC는 서버 코드와 클라이언트 코드의 두 가지 구성 요소로 구성되어 있습니다. 서버 코드는 취약점을 트리거하므로 클라이언트 코드가 충돌합니다. 또한 nameserver가 서버 코드를 가리키도록 설정해야 하며,...

8.1CVSS8.1AI score0.91057EPSS
SaveExploits17
Kitploit
Kitploit
added 2026/08/25 4:19 a.m.1 views

CVE-2015-7547-proj-master

このコードは現状のまま提供されています。本コードによって生じるいかなるリスクからも、あなた自身、あなたの資産やデータ、そして他者を保護する責任はあなたにあります。本コードは、あなたのマシン上で予期せぬ望ましくない動作を引き起こす可能性があります。また、本コードがあなたのシステム上の脆弱性を検出しない可能性もあります。...

8.1CVSS8.1AI score0.91057EPSS
SaveExploits17
Kitploit
Kitploit
added 2026/08/25 4:17 a.m.1 views

CVE-glibc

CVE-glibc CVE-2015-0235 glibc Get Host by Name Issue 복사해서 붙여넣어 확인하기 root@kitploit: wget https://github.com/alanmeyer/CVE-glibc/raw/master/get-GHOST.sh chmod +x get-GHOST.sh ./get-GHOST.sh 참고 자료: https://googleonlinesecurity.blogspot.com/2016/02/cve-2015-7547-glibc-getaddrinfo-stack.html...

10CVSS6.8AI score0.94859EPSS
SaveExploits42
Kitploit
Kitploit
added 2026/08/25 2:42 a.m.2 views

CVE-2015-7547

CVE-2015-7547 glibc getaddrinfo 스택 기반 버퍼 오버플로우...

8.1CVSS8.5AI score0.91057EPSS
SaveExploits17
Positive Technologies
Positive Technologies
added 2026/08/11 12:00 a.m.10 views

PT-2026-70100

Affected versions of cti-transmute contain an SSRF vulnerability in the /fetch misp event and /misp search events endpoints. The URL validation routine checked whether a supplied hostname was itself an IP literal and rejected private, loopback, link-local, or reserved IPs. However, ordinary domai...

8.7CVSS5.4AI score0.00301EPSS
SaveExploits0References2
OSV
OSV
added 2026/07/15 3:14 p.m.12 views

JLSEC-2026-764 In affected libpcap versions during the setup of a remote packet capture the internal function...

In affected libpcap versions during the setup of a remote packet capture the internal function sockinitaddress calls getaddrinfo and possibly freeaddrinfo, but does not clearly indicate to the caller function whether freeaddrinfo still remains to be called after the function returns. This makes i...

4.4CVSS6.8AI score0.00242EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2026/07/09 9:10 a.m.17 views

CVE-2026-33630

A flaw was found in c-ares. A use-after-free / double-free vulnerability exists in the query-completion handling path, where a query callback is invoked while the query is still linked in internal lookup structures. A remote attacker can exploit this via aresgetaddrinfo over TCP by sending crafte...

7.5CVSS6AI score
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/07/07 12:00 a.m.13 views

PT-2026-56309

Name of the Vulnerable Software and Affected Versions c-ares versions prior to 1.34.7 Description The software contains multiple issues. A use-after-free or double-free condition exists in query-completion handling, which can be remotely triggered via the ares getaddrinfo function over TCP...

5.3AI score
SaveExploits0References15
NVD
NVD
added 2026/07/03 8:16 p.m.21 views

CVE-2026-14607

A weakness has been identified in RT-Thread up to 5.0.2. This affects the function sysgetaddrinfo of the file components/lwp/lwpsyscall.c. Executing a manipulation of the argument aiaddr can lead to memory corruption. The attack can only be executed locally. The exploit has been made available to...

6.8CVSS0.00167EPSS
SaveExploits0References7
ATTACKERKB
ATTACKERKB
added 2026/07/03 7:45 p.m.12 views

CVE-2026-14607

A weakness has been identified in RT-Thread up to 5.0.2. This affects the function sysgetaddrinfo of the file components/lwp/lwpsyscall.c. Executing a manipulation of the argument aiaddr can lead to memory corruption. The attack can only be executed locally. The exploit has been made available to...

6.8CVSS5.4AI score0.00167EPSS
SaveExploits0References7
CVE
CVE
added 2026/07/03 7:45 p.m.35 views

CVE-2026-14607

CVE-2026-14607 affects RT-Thread up to 5.0.2, specifically the sys_getaddrinfo implementation in components/lwp/lwp_syscall.c. Manipulating the ai_addr argument can cause memory corruption; exploit public and local access required. A fix is being prepared in a pull request (RT-Thread/rt-thread#11...

6.8CVSS5.6AI score0.00167EPSS
SaveExploits0References7
OSV
OSV
added 2026/07/03 7:45 p.m.9 views

CVE-2026-14607 RT-Thread lwp_syscall.c sys_getaddrinfo memory corruption

A weakness has been identified in RT-Thread up to 5.0.2. This affects the function sysgetaddrinfo of the file components/lwp/lwpsyscall.c. Executing a manipulation of the argument aiaddr can lead to memory corruption. The attack can only be executed locally. The exploit has been made available to...

6.8CVSS5.6AI score
SaveExploits0References9
Positive Technologies
Positive Technologies
added 2026/07/03 12:00 a.m.27 views

PT-2026-55581

Name of the Vulnerable Software and Affected Versions RT-Thread versions prior to 5.0.3 Description A memory corruption issue exists in the sys getaddrinfo function within the components/lwp/lwp syscall.c file. A local attacker can trigger this by manipulating the ai addr argument. Recommendation...

6.8CVSS6.2AI score0.00167EPSS
SaveExploits0References11
NVD
NVD
added 2026/06/28 5:16 a.m.18 views

CVE-2026-10646

Zephyr's BSD-sockets getaddrinfo implementation subsys/net/lib/sockets/getaddrinfo.c passes a pointer to a stack-allocated state object struct getaddrinfostate aistate as the userdata of an asynchronous DNS resolver query. The socket layer waits on a semaphore with a timeout deliberately set...

7.4CVSS0.00447EPSS
SaveExploits1References2
CVE
CVE
added 2026/06/28 4:04 a.m.43 views

CVE-2026-10646

Zephyr's BSD-sockets getaddrinfo() (subsys/net/lib/sockets/getaddrinfo.c) has a use-after-return risk from a stack-allocated ai_state being kept as user_data during a DNS resolver retry. If a semaphore wait times out and the code retries without cancelling the previous query or resetting the sema...

7.4CVSS6.1AI score0.00447EPSS
SaveExploits1References2Affected Software1
Vulnrichment
Vulnrichment
added 2026/06/28 4:04 a.m.10 views

CVE-2026-10646 Use-after-return in `zsock_getaddrinfo()` when a timed-out DNS query is retried without cancellation

Zephyr's BSD-sockets getaddrinfo implementation subsys/net/lib/sockets/getaddrinfo.c passes a pointer to a stack-allocated state object struct getaddrinfostate aistate as the userdata of an asynchronous DNS resolver query. The socket layer waits on a semaphore with a timeout deliberately set...

7.4CVSS6.1AI score0.00447EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2026/06/28 4:04 a.m.25 views

CVE-2026-10646

Zephyr's BSD-sockets getaddrinfo implementation subsys/net/lib/sockets/getaddrinfo.c passes a pointer to a stack-allocated state object struct getaddrinfostate aistate as the userdata of an asynchronous DNS resolver query. The socket layer waits on a semaphore with a timeout deliberately set...

7.4CVSS6.1AI score0.00447EPSS
SaveExploits1References3Affected Software1
OSV
OSV
added 2026/06/28 4:04 a.m.10 views

CVE-2026-10646 Use-after-return in `zsock_getaddrinfo()` when a timed-out DNS query is retried without cancellation

Zephyr's BSD-sockets getaddrinfo implementation subsys/net/lib/sockets/getaddrinfo.c passes a pointer to a stack-allocated state object struct getaddrinfostate aistate as the userdata of an asynchronous DNS resolver query. The socket layer waits on a semaphore with a timeout deliberately set...

7.4CVSS6.1AI score
SaveExploits0References5
RedhatCVE
RedhatCVE
added 2026/06/05 7:15 p.m.14 views

CVE-2026-46727

An issue was discovered in Ruby 4 before 4.0.5. A race condition leading to a use-after-free in the pthread-based getaddrinfo timeout handler rbgetaddrinfo in ext/socket/raddrinfo.c allows a remote attacker who can delay DNS responses near the user-specified timeout to crash a Ruby process that...

8.1CVSS5.5AI score0.00478EPSS
SaveExploits0References1
Rows per page
Query Builder