exploit_playground

소개 여기에 공개 익스플로잇Public Exploit 분석이나 제 1day 익스플로잇 일부를 게시할 예정입니다. 공개 익스플로잇 분석 개인적으로 공개 익스플로잇을 배우는 가장 좋은 방법은 익스플로잇을 완전히 이해할 때까지 한 줄 한 줄 이해하는 것이라고 생각합니다. 저는 이러한 과도하게 주석이 달린 ; 익스플로잇 중 일부를 게시하여 다른 사람들도 배울 수 있기를 바라며, 커뮤니티에 조금이나마 환원하려는 시도를 합니다. 또한 문서화 목적도 있습니다. 이런 것들은 시간이 지나면 제 머릿속에서 희미해지기 때문입니다...

CVE-2026-32710

CVE-2026-32710 MariaDBJSONSCHEMAVALID의 힙 버퍼 오버플로우 → 지속적 권한 상승 → UDF RCE | ---|--- 영향 대상| MariaDB 11.4.x 11.4.9에서 확인 버그| jsongetnormalizedstring의 OOB 쓰기 — 경계 검사 없는 128바이트 DYNAMICSTRING에 대한 strncpy 영향| SELECT 전용 사용자 → ALL PRIVILEGES WITH GRANT OPTION → UDF를 통한 임의 명령 실행 소스| sql/jsonschemahelper.cc:9...

EUVD-2026-73720

Microsoft Security Advisory CVE-2026-69439 – .NET and Visual Studio Elevation of Privilege Vulnerability...

EUVD-2026-75010

A heap-based buffer overflow in VPN certificate ASN.1 decoding may allow an unauthenticated remote attacker to execute arbitrary code on Check Point Quantum Security Management and Quantum Security Gateway systems...

SUSE-SU-2026:3595-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2022-4994: KVM: x86: wean fast IN from emulatorpioin bsc1273097. - CVE-2023-53995: net: ipv4: fix one memleak in inetdelifa bsc1255616. - CVE-2024-38542: RDMA/manaib...

check_icmp_dos

checkicmpdos iOS 12 / OS X Remote Kernel Heap Overflow CVE-2018-4407 POC： root@kitploit: pip install scapy sudo scapy sendIPdst=“Target IP“,options=IPOption“A”8/TCPdport=2323,options=19, “1"18,19, “2”18 またはスクリプトを使用 root@kitploit: python checkicmpdos.py 127.0.0.1...

cve-2022-42475-Fortinet

cve-2022-42475 POC-код для эксплуатации переполнения кучи в SSLVPN-демоне Fortinet Использование pip install pwntools Чтобы использовать этот код, сохраните его в файл, например exploit.py, и запустите с помощью Python в командной строке, передав необходимые аргументы. Вот пример команды для...

CVE-2021-3156

CVE-2021-3156 Визуализация, фаззинг, эксплойт и патч уязвимости Baron Samedit Посмотреть отчёт » Francesco Marchiori · Alessandro Lotto Содержание 1. Аннотация 2. Визуализация 3. Фаззинг 4. Эксплойт 5. Патч 🧩 Аннотация Любая Unix-подобная операционная система оснащена командой sudo, которая...

Heap-Over-Flow-with-CVE-2016-10191

Heap-Over-Flow-with-CVE-2016-10191 CVE 2016-10191에 대한 힙 오버플로우 연구 보고서 작성됨...

CVEs-for-picoc-3.2.2

CVE для picoc-3.2.2 Файлы для воспроизведения CVE-2022-44312 – CVE-2022-44321 Ссылки на CVE Переполнение кучи в PicoC v3.2.2 в функции ExpressionCoerceInteger в expression.c CVE-2022-44312 Переполнение кучи в PicoC v3.2.2 в функции ExpressionCoerceUnsignedInteger в expression.c CVE-2022-44313...

CVE-2021-3156

CVE-2021-3156 PoC 소개 이것은 sudo의 CVE-2021-3156 취약점Qualys가 Baron Samedit이라고 명명에 대한 익스플로잇입니다. 사용법 빌드: root@kitploit: $ make 타겟 목록: root@kitploit: $ ./sudo-hax-me-a-sandwich 실행: root@kitploit: $ ./sudo-hax-me-a-sandwich 수동 모드: root@kitploit: $ ./sudo-hax-me-a-sandwich 브루트 포스 타겟 검출 실험적 GNU parallel이 설치...

CVE-2025-65018_Exploit_Challenge

CVE-2025-65018 CTF-челлендж: «PNG Panic» Этот челлендж основан на реальной уязвимости переполнения буфера в libpng конкретно, в упрощённом API pngimagefinishread при обработке 16-битных чересстрочных изображений. 🚩 Цель челленджа Вам предоставлен уязвимый бинарный файл victim, который использует...

CVE-2026-21104

Heap-based buffer overflow in KnoxVault trustlet prior to SMR Sep-2026 Release 1 allows local privileged attackers to execute arbitrary code...

CVE-2026-21096

CVE-2026-21096 is a heap-based buffer overflow in the JPEG decoder of libimagecodec.quram.so in Samsung Mobile devices, prior to the SMR Sep-2026 Release 1 . The vulnerability allows remote attackers to execute arbitrary code, with no user interaction or privileges required, though the attack req...

CVE-2026-21095

Heap-based buffer overflow in DNG decoder of libimagecodec.quram.so prior to SMR Sep-2026 Release 1 allows remote attackers to execute arbitrary code...

CVE-2026-63072

🔐 CVE-2026-63072 — OpenSSL CMS 힙 버퍼 오버플로우 OpenSSL의 CMS 키 언래핑 기능에 영향을 미치는 힙 기반 범위 밖 쓰기out-of-bounds write 취약점인CVE-2026-63072 에 대한 기술 분석. 📌 개요 CVE-2026-63072 는 OpenSSL의 CMSCryptographic Message Syntax 구현에 존재하는 힙 기반 버퍼 오버플로우 취약점입니다. 이 취약점은 영향을 받는 AES-WRAP-PAD 키 언래핑 경로를 사용하여 특수하게 제작된 CMS 메시지를 처리할 때...

Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update

An update for kernel is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update

An update for kernel is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

kernel: USB: serial: io_ti: fix heap overflow in get_manuf_info()

A flaw was found in the Linux kernel's ioti USB serial driver. A malicious USB device, when plugged into a host running this driver, can exploit a heap overflow vulnerability in the getmanufinfo function. This occurs because the driver does not properly validate the size of data read from the...

Important: Red Hat Security Advisory: kernel security update

An update for kernel is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring Syst...