CVE-2015-7547-master

이 코드는 있는 그대로 제공됩니다. 귀하께서는 이 코드로 인해 발생할 수 있는 모든 위험으로부터 자신, 재산, 데이터 및 타인을 보호할 책임이 있습니다. 이 코드는 귀하의 기기에서 예상치 못하거나 바람직하지 않은 동작을 유발할 수 있습니다. 이 코드는 귀하의 시스템에서 취약점을 탐지하지 못할 수도 있습니다. 이 POC는 서버 코드와 클라이언트 코드의 두 가지 구성 요소로 구성되어 있습니다. 서버 코드는 취약점을 트리거하여 클라이언트 코드를 충돌시킵니다. 또한 테스트 중에 이름 서버를 서버 코드를 가리키도록 설정해야 하며, 그렇...

CVE-2015-7547

이 코드는 있는 그대로 제공됩니다. 귀하는 이 코드로 인해 발생하는 모든 위험으로부터 자신, 자신의 재산 및 데이터, 그리고 다른 사람들을 보호할 책임이 있습니다. 이 코드는 귀하의 컴퓨터에서 예상치 못한 바람직하지 않은 동작을 유발할 수 있습니다. 이 코드는 귀하의 시스템에서 취약점을 탐지하지 못할 수 있습니다. 이 POC는 서버 코드와 클라이언트 코드의 두 가지 구성 요소로 구성되어 있습니다. 서버 코드는 취약점을 트리거하므로 클라이언트 코드가 충돌합니다. 또한 nameserver가 서버 코드를 가리키도록 설정해야 하며,...

CVE-2015-7547-proj-master

このコードは現状のまま提供されています。本コードによって生じるいかなるリスクからも、あなた自身、あなたの資産やデータ、そして他者を保護する責任はあなたにあります。本コードは、あなたのマシン上で予期せぬ望ましくない動作を引き起こす可能性があります。また、本コードがあなたのシステム上の脆弱性を検出しない可能性もあります。...

CVE-glibc

CVE-glibc CVE-2015-0235 glibc Get Host by Name Issue 복사해서 붙여넣어 확인하기 root@kitploit: wget https://github.com/alanmeyer/CVE-glibc/raw/master/get-GHOST.sh chmod +x get-GHOST.sh ./get-GHOST.sh 참고 자료: https://googleonlinesecurity.blogspot.com/2016/02/cve-2015-7547-glibc-getaddrinfo-stack.html...

CVE-2015-7547

CVE-2015-7547 glibc getaddrinfo 스택 기반 버퍼 오버플로우...

PT-2026-70100

Affected versions of cti-transmute contain an SSRF vulnerability in the /fetch misp event and /misp search events endpoints. The URL validation routine checked whether a supplied hostname was itself an IP literal and rejected private, loopback, link-local, or reserved IPs. However, ordinary domai...

JLSEC-2026-764 In affected libpcap versions during the setup of a remote packet capture the internal function...

In affected libpcap versions during the setup of a remote packet capture the internal function sockinitaddress calls getaddrinfo and possibly freeaddrinfo, but does not clearly indicate to the caller function whether freeaddrinfo still remains to be called after the function returns. This makes i...

CVE-2026-33630

A flaw was found in c-ares. A use-after-free / double-free vulnerability exists in the query-completion handling path, where a query callback is invoked while the query is still linked in internal lookup structures. A remote attacker can exploit this via aresgetaddrinfo over TCP by sending crafte...

PT-2026-56309

Name of the Vulnerable Software and Affected Versions c-ares versions prior to 1.34.7 Description The software contains multiple issues. A use-after-free or double-free condition exists in query-completion handling, which can be remotely triggered via the ares getaddrinfo function over TCP...

CVE-2026-14607

A weakness has been identified in RT-Thread up to 5.0.2. This affects the function sysgetaddrinfo of the file components/lwp/lwpsyscall.c. Executing a manipulation of the argument aiaddr can lead to memory corruption. The attack can only be executed locally. The exploit has been made available to...

CVE-2026-14607

A weakness has been identified in RT-Thread up to 5.0.2. This affects the function sysgetaddrinfo of the file components/lwp/lwpsyscall.c. Executing a manipulation of the argument aiaddr can lead to memory corruption. The attack can only be executed locally. The exploit has been made available to...

CVE-2026-14607

CVE-2026-14607 affects RT-Thread up to 5.0.2, specifically the sys_getaddrinfo implementation in components/lwp/lwp_syscall.c. Manipulating the ai_addr argument can cause memory corruption; exploit public and local access required. A fix is being prepared in a pull request (RT-Thread/rt-thread#11...

CVE-2026-14607 RT-Thread lwp_syscall.c sys_getaddrinfo memory corruption

A weakness has been identified in RT-Thread up to 5.0.2. This affects the function sysgetaddrinfo of the file components/lwp/lwpsyscall.c. Executing a manipulation of the argument aiaddr can lead to memory corruption. The attack can only be executed locally. The exploit has been made available to...

PT-2026-55581

Name of the Vulnerable Software and Affected Versions RT-Thread versions prior to 5.0.3 Description A memory corruption issue exists in the sys getaddrinfo function within the components/lwp/lwp syscall.c file. A local attacker can trigger this by manipulating the ai addr argument. Recommendation...

CVE-2026-10646

Zephyr's BSD-sockets getaddrinfo implementation subsys/net/lib/sockets/getaddrinfo.c passes a pointer to a stack-allocated state object struct getaddrinfostate aistate as the userdata of an asynchronous DNS resolver query. The socket layer waits on a semaphore with a timeout deliberately set...

CVE-2026-10646

Zephyr's BSD-sockets getaddrinfo() (subsys/net/lib/sockets/getaddrinfo.c) has a use-after-return risk from a stack-allocated ai_state being kept as user_data during a DNS resolver retry. If a semaphore wait times out and the code retries without cancelling the previous query or resetting the sema...

CVE-2026-10646 Use-after-return in `zsock_getaddrinfo()` when a timed-out DNS query is retried without cancellation

Zephyr's BSD-sockets getaddrinfo implementation subsys/net/lib/sockets/getaddrinfo.c passes a pointer to a stack-allocated state object struct getaddrinfostate aistate as the userdata of an asynchronous DNS resolver query. The socket layer waits on a semaphore with a timeout deliberately set...

CVE-2026-10646

Zephyr's BSD-sockets getaddrinfo implementation subsys/net/lib/sockets/getaddrinfo.c passes a pointer to a stack-allocated state object struct getaddrinfostate aistate as the userdata of an asynchronous DNS resolver query. The socket layer waits on a semaphore with a timeout deliberately set...

CVE-2026-10646 Use-after-return in `zsock_getaddrinfo()` when a timed-out DNS query is retried without cancellation

Zephyr's BSD-sockets getaddrinfo implementation subsys/net/lib/sockets/getaddrinfo.c passes a pointer to a stack-allocated state object struct getaddrinfostate aistate as the userdata of an asynchronous DNS resolver query. The socket layer waits on a semaphore with a timeout deliberately set...

CVE-2026-46727

An issue was discovered in Ruby 4 before 4.0.5. A race condition leading to a use-after-free in the pthread-based getaddrinfo timeout handler rbgetaddrinfo in ext/socket/raddrinfo.c allows a remote attacker who can delay DNS responses near the user-specified timeout to crash a Ruby process that...