PoC-CVE-2025-69419

CVE-2025-69419 – Reproducible de Desbordamiento de Búfer en el Montón de OpenSSL Resumen Este repositorio contiene un reproductor de prueba de concepto mínimo para CVE-2025-69419 que afecta versiones vulnerables de OpenSSL. El PoC demuestra la escritura fuera de los límites del montón reportada...

CVE-2022-24903-Heap-based-buffer-overflow-Hand-On-Lab

Laboratorio Práctico CVE-2022-24903 Autor: Andrew Beshay Mousa Un laboratorio práctico que demuestra la vulnerabilidad de desbordamiento de búfer en el montón de rsyslog. Un entorno de laboratorio práctico para reproducir y comprender la vulnerabilidad de desbordamiento de búfer en el montón de...

CVE-2026-27654-PoC

CVE-2026-27654 – PoC del manejo de rutas DAV Alias en el módulo ngxhttpdavmodule de nginx Este repositorio proporciona un exploit de prueba de concepto para CVE‑2026‑27654 , una vulnerabilidad de desbordamiento de montón heap overflow en el módulo ngxhttpdavmodule de nginx. El fallo surge de un...

one-multiply-too-many-cve-2026-70638-llama-cpp-android-jni-integer-overflow

CVE-2026-70638 - Desbordamiento de enteros JNI de LLaMA-Android en llama.cpp PoC complementario para el artículo de Hunt-Benito "Una multiplicación de más: CVE-2026-70638 — Desbordamiento de enteros en la asignación de montón JNI de Android de llama.cpp" →...

CVE-2026-42533-POC

CVE-2026-42533 Desbordamiento de búfer en el heap y fuga de información del heap antes de la autenticación en nginx, causados por la falta de guardado/restauración del estado de las capturas de PCRE entre las dos pasadas del motor de scripts. Una variable map con regex evaluada entre dos...

nginx-cve-2026-42945-poc

CVE-2026-42945 — Desbordamiento de búfer en el montículo del Módulo Rewrite de NGINX → RCE RCE confirmado exitoso — mediante desbordamiento de montículo + inyección de proceso GDB, ejecuta comandos arbitrarios en los procesos worker de NGINX / OpenResty. Inicio rápido root@kitploit: 一键构建 NGINX 镜像...

CVE-2026-42945

Script de evaluación de riesgo real de CVE-2026-42945 Herramienta de evaluación de riesgo local para CVE-2026-42945 Nginx Rift. A diferencia de simplemente decir "la versión afectada es peligrosa", este script verifica capa por capa las tres condiciones que realmente determinan el riesgo, dando u...

CVE-2026-11108-Integer-Overflow-in-Memory-Allocator-kmalloc-Sim-

CVE-2026-11108 – Desbordamiento de entero en asignador de memoria kmalloc Sim Código del programa C root@kitploit: // allocsim.c - Vulnerable memory allocator include include include define MAXBLOCK 1024 void mymallocsizet size sizet total = size + sizeofsizet; // header if total MAXBLOCK return...

CVE-2021-3156

Título del Proyecto Generador de exploit para CVE-2021-3156 sudo Instalación 1. Instala dependencias ./install.sh 2. Ejecuta generador de exploit: ./run.sh 3. Si la versión de sudo del sistema es vulnerable se genera un exploit para la versión instalada 4. El exploit se genera en exploit.c y el...

EulerOS Virtualization 2.11.1 : vim (EulerOS-SA-2026-3480)

According to the versions of the vim packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : The UNIX editor Vim prior to version 9.1.0678 has a use-after-free error in argument list handling. When adding a new file to the...

EulerOS Virtualization 2.12.1 : libtiff (EulerOS-SA-2026-3595)

According to the versions of the libtiff package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in libtiff. A remote attacker could exploit this vulnerability by providing a specially crafted PixarLog-compresse...

EulerOS 2.0 SP10 : libtiff (EulerOS-SA-2026-3750)

According to the versions of the libtiff packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in libtiff. A remote attacker could exploit this vulnerability by providing a specially crafted PixarLog-compressed TIFF image...

EulerOS Virtualization 2.12.0 : vim (EulerOS-SA-2026-3679)

According to the versions of the vim packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Vim is an open source, command line text editor. Prior to 9.2.0735, the C omni-completion script in runtime/autoload/ccomplete.vim...

SUSE SLED15: glibc / glibc-32bit / glibc-devel / glibc-devel-32bit / etc (SUSE-SU-2026:4250-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4250-1 advisory. - CVE-2026-6368: invalid free via wordexp WRDEAPPEND rollback bsc1274726. - CVE-2026-6791: stack overflow in...

MiracleLinux 9 : corosync-3.1.10-1.el9_8.2 (AXSA:2026-1879:05)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1879:05 advisory. corosync: corosync: heap-based buffer overflow in totempg assembly buffer during fragmented message reassembly CVE-2026-81665 Tenable has extracted the...

DEBIAN-CVE-2026-93393

A heap-based buffer overflow exists in the TLS transport layer of the MongoDB C Driver when built with the Windows platform TLS backend. A remote endpoint that the client connects to can cause the driver to write uncontrolled data outside the bounds of a heap allocation while processing incoming...

CVE-2026-93393

A heap-based buffer overflow exists in the TLS transport layer of the MongoDB C Driver when built with the Windows platform TLS backend. A remote endpoint that the client connects to can cause the driver to write uncontrolled data outside the bounds of a heap allocation while processing incoming...

Security Bulletin: IBM MQ for HPE NonStop is vulnerable to a denial of service attack (CVE-2026-10858)

Summary IBM MQ for HPE NonStop is vulnerable to a denial of service issue caused by a heap buffer overflow. Vulnerability Details CVEID:CVE-2026-10858 DESCRIPTION: IBM MQ could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to a heap buffer...

Security Bulletin: IBM MQ for HPE NonStop is vulnerable to a denial of service attack (CVE-2026-11716)

Summary IBM MQ for HPE NonStop is vulnerable to a denal of service issue in MQ cluster migration. Vulnerability Details CVEID:CVE-2026-11716 DESCRIPTION: IBM MQ could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code during queue manager startup du...

Security Bulletin: IBM MQ for HPE NonStop is vulnerable to a denial of service issue (CVE-2026-11727)

Summary IBM MQ for HPE NonStop is vulnerable to a denial of service issue caused by improper validation of AMS policy data responses. Vulnerability Details CVEID:CVE-2026-11727 DESCRIPTION: IBM MQ C client could allow a remote attacker to cause a denial of service or potentially execute arbitrary...