39782 matches found
CVE-2026-32710
CVE-2026-32710 Heap buffer overflow in MariaDBJSONSCHEMAVALID → escalatione persistente dei privilegi → RCE via UDF | ---|--- Interessati| MariaDB 11.4.x confermato su 11.4.9 Bug| Scrittura fuori limite in jsongetnormalizedstring — strncpy in un DYNAMICSTRING da 128 byte senza controllo dei limit...
CVE-2021-21017
CVE-2021-21017 Non è un altro bug del Byte Order Mark di Adobe Reader : root@kitploit: Plugin IA32, ver. 2020.013.20074. char cdecl FUN2581894cchar baseurl,LPCSTR relurl ............................................................ ............................................................ if...
CVE-2021-3279
CVE-2021-3279 https://www.cvedetails.com/cve/CVE-2021-3279/...
CVE-2026-32223-USBPrint-Exploit
CVE-2026-32223: Plug me if you can: Ausnutzung von USB-Druckertreibern in Windows Heap-basierter Pufferüberlauf im Windows-USB-Druckertreiber usbprint.sys, der zu lokaler Rechteausweitung LPE führt Diese Schwachstelle wurde von ENKI WhiteHat entdeckt und gemeldet. Überblick CVE-2026-32223 ist ein...
CVE-2026-20698-PF_ROUTE-Heap-Overflow
CVE-2026-20698 — Overflow dell'heap del kernel XNU tramite PFROUTE RTAGENMASK Panoramica Overflow del buffer dell'heap nel socket di routing PFROUTE di XNU durante l'elaborazione di RTAGENMASK in routemsg. Provoca un kernel panic da un processo non privilegiato senza entitlements. CVE :...
Windows-kernel-SegmentHeap-Aligned-Chunk-Confusion
Dieses Repository enthält einen PoC-Exploit, der eine Exploitationstechnik namens Aligned Chunk Confusion verwendet. Die Details zu dieser Technik finden sich im Paper. Dieser Exploit nutzt einen Heap-Overflow im Windows-Kernel-Heap aus, um seine Berechtigungen von Low auf SYSTEM zu erhöhen. Die...
cve-2022-42475-Fortinet
cve-2022-42475 利用 Fortinet SSLVPN 守护进程中堆溢出的 POC 代码 使用方法 pip install pwntools 要使用此代码，你可以将其保存到文件中，例如 exploit.py，然后在命令行中使用 Python 运行它，并传入所需参数。以下是运行该漏洞利用程序的示例命令： python exploit.py 将 替换为目标系统的主机名或 IP 地址，将 替换为易受攻击服务的端口号，将 替换为您希望接收 shell 的机器 IP 地址。其余参数是您要执行的命令，以空格分隔。 例如，如果目标系统的 IP 地址为...
exploits
exploits CVE-2021-22600: Exploit LPE per il kernel Linux CVE-2021-3156: Escalation locale dei privilegi in Linux tramite heap overflow in sudo Demo CVE-2021-3156: Exploit one shot per la vulnerabilità heap overflow in sudo CVE-2020-6507: Scrittura fuori dai limiti in V8. Versioni di Chrome =...
exploit_playground
Informazioni Questo è il posto dove pubblicherò analisi di exploit pubblici, o alcuni dei miei exploit 1day. Analisi di exploit pubblici Personalmente penso che il modo migliore per imparare un exploit pubblico sia comprenderlo riga per riga finché non lo capisco appieno. Pubblicherò alcuni di...
CVE-2026-63072
🔐 CVE-2026-63072 — Estouro de Buffer no Heap do OpenSSL CMS Uma análise técnica daCVE-2026-63072 , uma escrita fora dos limites baseada em heap que afeta a funcionalidade de desembrulho de chaves CMS do OpenSSL. 📌 Visão Geral CVE-2026-63072 é uma vulnerabilidade de estouro de buffer baseada em he...
PT-2026-82761
A heap overflow in the ff sws alphablendaway function libswscale/alphablend.c of FFmpeg git-master commit 722a217 allows attackers to cause a Denial of Service DoS via a crafted input...
SUSE SLES12: postgresql14 / postgresql14-contrib / postgresql14-devel / etc (SUSE-SU-2026:3793-1)
The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3793-1 advisory. - CVE-2026-6464: psql COPY FROM STDIN early failure processes data lines as psql commands bsc1275046. - CVE-2026-6469: ALTER TABLE...
CVE-2026-38347
A heap overflow in the ff_sws_alphablendaway function (libswscale/alphablend.c) of FFmpeg (git-master commit 722a217) allows a remote attacker to trigger a Denial of Service by supplying a crafted input, causing the application to crash or become unresponsive. The vulnerability is scored CVSS 7.5...
CVE-2026-77652
A heap-based buffer overflow vulnerability exists in the Dia diagram e...
CVE-2026-38347
A heap overflow in the ffswsalphablendaway function libswscale/alphablend.c of FFmpeg git-master commit 722a217 allows attackers to cause a Denial of Service DoS via a crafted input...
CVE-2026-38347
A heap overflow in the ffswsalphablendaway function libswscale/alphablend.c of FFmpeg git-master commit 722a217 allows attackers to cause a Denial of Service DoS via a crafted input...
AirBorne-PoC
Фреймворк AirBorne PoC – Elite RCE Edition Полный PoC-фреймворк для CVE-2025-24252 и CVE-2025-24132 Автор ekomsSavior | AirBorne — это комбинированный фреймворк PoC, нацеленный на две серьезные уязвимости в сервисе Apple AirPlay. Он включает в себя полный триггер сбоя и рабочую обратную оболочку ...
cve-images
cve-images — immagini vulnerabili di laboratorio intenzionali Una raccolta di immagini Docker deliberatamente vulnerabili per lo studio della sicurezza in un laboratorio isolato. Iniziato come riproduzione di CVE di nginx e si sta ampliando in un set più ampio di immagini vulnerabili per...
CVE-2016-5636
CVE-2016-5636 PoC para CVE-2016-5636, que é um estouro de heap no Python 3.6. Este repositório inclui: crash-with-zip : PoC de crash ao ler arquivo zip não confiável google-web-engine : PoC de crash funcionando no google web engine spawn-shell : um exploit local para obter shell...
