64 matches found
vpwn
vpwn by qwertyoruiop 汎用 xnu ヒープオーバーフロー悪用ツール。 デモ出力: root@kitploit: $ ./pwn i Preparing payload... i broke out of kaslr, kaslrslide = 0000000001a00000 + Payload successfully crafted. i Manipulating the heap... i Exploit loaded. + got r00t sh-3.2 uname -a Darwin qwertyoruiops-iMac.local 14.3.0 Darwi...
CVE-2024-6387-Exploit-POC
CVE-2024-6387-Exploit-POC このリポジトリには、脆弱なバージョンのOpenSSHを実行しているSSHサーバー上のCVE-2024-6387脆弱性を悪用するためのProof of Concept（POC）が含まれています。 POCとは？ POC（Proof of Concept）とは、セキュリティ脆弱性の悪用を、制御された再現可能な方法で実証するプログラムまたはスクリプトです。その主な目的は、脆弱性が存在し、悪意のあるコードを実行したり、影響を受けるシステム上で不正な操作を行ったりするために悪用され得ることを示すことです。 POCの仕組み...
CVE-2026-19548 Binutils: binutils: multiple use-after-free in add_archive_element via lto plugin processing
Multiple Use-After-Free vulnerabilities were found in the addarchiveelement function in ld/ldmain.c of the GNU linker ld, a component of binutils. The root cause is that pluginmaybeclaim in ld/plugin.c frees the original BFD object via bfdclose/bfddeletebfd when entry-thebfd-myarchive == NULL, bu...
CVE-2026-19548
Multiple Use-After-Free vulnerabilities were found in the addarchiveelement function in ld/ldmain.c of the GNU linker ld, a component of binutils. The root cause is that pluginmaybeclaim in ld/plugin.c frees the original BFD object via bfdclose/bfddeletebfd when entry-thebfd-myarchive == NULL, bu...
PT-2026-71137
Name of the Vulnerable Software and Affected Versions binutils affected versions not specified Description Multiple Use-After-Free issues exist in the add archive element function within the GNU linker ld, a component of binutils. The problem occurs when plugin maybe claim in ld/plugin.c frees th...
RollerCoaster
RollerCoaster: Advanced Exploitation of Cisco ASA LINA Firmwar...
📄 Samsung Quram DNG Advanced Remote Code Execution
This proof of concept uses an advanced exploitation technique that allows a remote attacker to execute arbitrary code on a target device by carefully controlling and manipulating memory in the target application or library. This technique is particularly used against memory-sensitive libraries li...
EUVD-2017-1525
Malware in sbrugna...
EUVD-2017-1538
Malware in sbrugna...
Linux Distros Unpatched Vulnerability : CVE-2017-1000366
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - glibc contains a vulnerability that allows specially crafted LDLIBRARYPATH values to manipulate the heap/stack, causing them to alias, potentially resulting in...
gstreamer1-plugins-good: OOB-write in convert_to_s334_1a
A flaw was found in the GStreamer library. An out-of-bounds write in the MP4/MOV demuxer when handling CEA608 Closed Caption tracks can lead to crashes for certain input files. This vulnerability allows a malicious third party to trigger a crash of the application and perform code execution throu...
gstreamer1-plugins-good: OOB-write in isomp4/qtdemux.c
A flaw was found in the GStreamer library. An integer overflow in the MP4/MOV demuxer's sample table parser can lead to out-of-bounds writes and NULL-pointer dereferences for certain input files. This vulnerability allows a malicious third party to trigger an application crash and, in the case of...
gstreamer1-plugins-base: out-of-bounds write in Ogg demuxer
A flaw was found in the GStreamer library. An out-of-bounds write in the Ogg demuxer can cause crashes for certain input files. This vulnerability allows a malicious third party to trigger out-of-bounds writes that can result in the application's crash or possibly allow code execution through hea...
gstreamer1-plugins-good: OOB-write in isomp4/qtdemux.c
A flaw was found in the GStreamer library. An integer overflow in the MP4/MOV demuxer's sample table parser can lead to out-of-bounds writes and NULL-pointer dereferences for certain input files. This vulnerability allows a malicious third party to trigger an application crash and, in the case of...
gstreamer1-plugins-good: OOB-write in convert_to_s334_1a
A flaw was found in the GStreamer library. An out-of-bounds write in the MP4/MOV demuxer when handling CEA608 Closed Caption tracks can lead to crashes for certain input files. This vulnerability allows a malicious third party to trigger a crash of the application and perform code execution throu...
gstreamer1-plugins-base: out-of-bounds write in Ogg demuxer
A flaw was found in the GStreamer library. An out-of-bounds write in the Ogg demuxer can cause crashes for certain input files. This vulnerability allows a malicious third party to trigger out-of-bounds writes that can result in the application's crash or possibly allow code execution through hea...
gstreamer1-plugins-good: OOB-write in convert_to_s334_1a
A flaw was found in the GStreamer library. An out-of-bounds write in the MP4/MOV demuxer when handling CEA608 Closed Caption tracks can lead to crashes for certain input files. This vulnerability allows a malicious third party to trigger a crash of the application and perform code execution throu...
gstreamer1-plugins-good: OOB-write in isomp4/qtdemux.c
A flaw was found in the GStreamer library. An integer overflow in the MP4/MOV demuxer's sample table parser can lead to out-of-bounds writes and NULL-pointer dereferences for certain input files. This vulnerability allows a malicious third party to trigger an application crash and, in the case of...
gstreamer1-plugins-base: out-of-bounds write in Ogg demuxer
A flaw was found in the GStreamer library. An out-of-bounds write in the Ogg demuxer can cause crashes for certain input files. This vulnerability allows a malicious third party to trigger out-of-bounds writes that can result in the application's crash or possibly allow code execution through hea...
gstreamer1-plugins-base: out-of-bounds write in Ogg demuxer
A flaw was found in the GStreamer library. An out-of-bounds write in the Ogg demuxer can cause crashes for certain input files. This vulnerability allows a malicious third party to trigger out-of-bounds writes that can result in the application's crash or possibly allow code execution through hea...