65 matches found
windows-x86-shellcode-poc
Windows x86 Buffer Overflow PoC for Beginners This is a simple, self-contained tutorial on stack-based buffer overflow exploits for 32-bit Windows. No external guides required—everything you need is here. What is this repository? vulnerable.c: A simple program with an unsafe gets function...
Rocky Linux 8 [CIQ] Security Update: LibRaw / LibRaw-debuginfo / LibRaw-debugsource / LibRaw-devel (crlsa-2024_2994)
The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20242994 advisory. LibRaw: stack buffer overflow in LibRawbufferdatastream::gets in src/librawdatastream.cpp CVE-2021-32142 Tenable has extracted the preceding description block...
AlmaLinux 9.2 [TuxCare] Security Update: LibRaw / LibRaw-devel / LibRaw-samples / LibRaw-static (ALMALINUX9.2:CLSA-2025:1745427138)
The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1745427138 advisory. - Buffer Overflow vulnerability in LibRaw linux/unix v0.20.0 allows attacker to escalate privileges via the LibRawbufferdatastream::getschar,...
CVE-2026-19933
A weakness has been identified in DefaultFuction Customer-Relationship-Management-In-C-Project 2.0. Impacted is the function gets of the component Customer Search Module. This manipulation causes stack-based buffer overflow. The attack may be initiated remotely. The exploit has been made availabl...
EUVD-2026-59907
A weakness has been identified in DefaultFuction Customer-Relationship-Management-In-C-Project 2.0. Impacted is the function gets of the component Customer Search Module. This manipulation causes stack-based buffer overflow. The attack may be initiated remotely. The exploit has been made availabl...
CVE-2026-19933
A weakness has been identified in DefaultFuction Customer-Relationship-Management-In-C-Project 2.0. Impacted is the function gets of the component Customer Search Module. This manipulation causes stack-based buffer overflow. The attack may be initiated remotely. The exploit has been made availabl...
CVE-2026-19933
CVE-2026-19933 affects DefaultFuction Customer-Relationship-Management-In-C-Project 2.0, specifically the Customer Search Module. Affected component/function: Customer Search Module; root cause: manipulation of the function gets leads to a stack-based buffer overflow. Impact: enables remote attac...
CVE-2026-19933 DefaultFuction Customer-Relationship-Management-In-C-Project Customer Search gets stack-based overflow
A weakness has been identified in DefaultFuction Customer-Relationship-Management-In-C-Project 2.0. Impacted is the function gets of the component Customer Search Module. This manipulation causes stack-based buffer overflow. The attack may be initiated remotely. The exploit has been made availabl...
PT-2026-73101
Name of the Vulnerable Software and Affected Versions DefaultFuction Customer-Relationship-Management-In-C-Project version 2.0 Description A stack-based buffer overflow exists in the Customer Search Module. This issue occurs within the gets function and can be triggered remotely. A stack-based...
MCP Ruby SDK: Unbounded line buffer in stdio transports leads to memory exhaustion (DoS)
Summary The stdio transports in MCP::Server::Transports::StdioTransport and MCP::Client::Stdio read newline-delimited JSON-RPC frames using IOgets with no limit argument. CRuby's IOgets with no limit reads from the current position until the next separator \n with no upper bound on the returned...
GHSA-7683-3W9X-CH42 MCP Ruby SDK: Unbounded line buffer in stdio transports leads to memory exhaustion (DoS)
Summary The stdio transports in MCP::Server::Transports::StdioTransport and MCP::Client::Stdio read newline-delimited JSON-RPC frames using IOgets with no limit argument. CRuby's IOgets with no limit reads from the current position until the next separator \n with no upper bound on the returned...
CVE-2026-63119 MCP Ruby SDK: Unbounded line buffer in stdio transports leads to memory exhaustion (DoS)
MCP Ruby SDK is the official Ruby SDK for Model Context Protocol servers and clients. Prior to 0.23.0, MCP::Server::Transports::StdioTransport and MCP::Client::Stdio in the mcp gem use IOgets without a byte limit, allowing a peer that sends data without a newline to exhaust process memory. This...
Allocation of Resources Without Limits or Throttling
Overview mcp is a The official Ruby SDK for Model Context Protocol servers and clients Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in the stdio transports lib/mcp/server/transports/stdiotransport.rb and lib/mcp/client/stdio.rb, which ca...
Astra Linux – Vulnerability in Linux 5.10
In the Linux kernel, the following vulnerabilities have been resolved: netfilter: nftables: Unlinking the table before deleting it The syzbot reports the following UAFs: BUG: KASAN: Use-after-free in memcmp+0x18f/0x1c0, lib/string.c:955 nlastrcmp+0xf2/0x130, lib/nlattr.c:836...
Buffer-Overflow-PoC
Buffer Overflow PoC — ret2libc on x86-64 Linux Overview D...
New-Shellcode-Injection-Exploit
Shellcode Injection Exploit Author Created by 0x5da...
CVE-2025-1331
IBM CICS TX Standard 11.1 and IBM CICS TX Advanced 10.1 and 11.1 could allow a local user to execute arbitrary code on the system due to the use of unsafe use of the gets function...
Software-Exploitation-Final-Project
ATM Challenge - Buffer Overflow Exploit Author: Olalekan...
Malicious code in gets-random-datas (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d13279c0dfe50ca0e8f75374e6903bf163c9fa3b46842da81459f75f423a88d7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...