CVE-2022-24903-Heap-based-buffer-overflow-Hand-On-Lab

CVE-2022-24903 핸즈온 랩 저자: Andrew Beshay Mousa rsyslog 힙 버퍼 오버플로 취약점을 시연하는 실용적인 핸즈온 랩입니다. TCP syslog 수신 시 octet-counted framing을 통해 rsyslog 힙 버퍼 오버플로 취약점CVE-2022-24903을 재현하고 이해할 수 있는 실용적인 랩 환경입니다. Table of Contents 개요 랩 아키텍처 사전 요구사항 취약점 상세 랩 설정 대상 머신 Ubuntu 공격자 머신 Kali 익스플로잇 검증 문제 해결 완화 조치 참고 자료 개요...

RLSA-2026:66392 Moderate: apr-util security update

The mission of the Apache Portable Runtime APR is to provide a free library of C data structures and routines. This library contains additional utility interfaces for APR; including support for XML, LDAP, database interfaces, URI parsing and more. Security Fixes: apr-util: Apache Portable Runtime...

apr-util security update

An update is available for apr-util. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The mission of the Apache Portable Runtime APR is to provide a free library...

RLSA-2026:66336 Important: vim security update

Vim Vi IMproved is an updated and improved version of the vi editor. Security Fixes: vim: Vim: Information disclosure and denial of service via crafted Unicode characters in terminal emulator CVE-2026-28420 vim: Vim: Denial of Service via out-of-bounds write in terminal handling CVE-2026-52859 vi...

vim security update

An update is available for vim. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Vim Vi IMproved is an updated and improved version of the vi editor. Security...

apr-util security update

An update is available for apr-util. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The mission of the Apache Portable Runtime APR is to provide a free library ...

RLSA-2026:66366 Important: vim security update

Vim Vi IMproved is an updated and improved version of the vi editor. Security Fixes: vim: Vim: Information disclosure and denial of service via crafted Unicode characters in terminal emulator CVE-2026-28420 vim: Vim: Denial of Service via out-of-bounds write in terminal handling CVE-2026-52859 vi...

RLSA-2026:66341 Moderate: apr-util security update

The mission of the Apache Portable Runtime APR is to provide a free library of C data structures and routines. This library contains additional utility interfaces for APR; including support for XML, LDAP, database interfaces, URI parsing and more. Security Fixes: apr-util: Apache Portable Runtime...

CVE-2024-30051

CVE-2024-30051 — Windows DWM Heap Overflow EoP · Исследование магистерской диссертации -orange Heap-based Buffer Overflow в Windows Desktop Window Manager dwmcore.dll Локальное повышение привилегий → Уровень целостности SYSTEM через процесс DWM Целевая сборка: Windows 11 22H2 10.0.22621.3447 ·...

RLSA-2026:66451 Moderate: glib2 security update

GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures. Security Fixes: xdgmime: heap-based buffer...

glib2 security update

An update is available for glib2. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list GLib provides the core application building blocks for libraries and applicatio...

CVE-2026-45761

A flaw was found in Suricata, a network Intrusion Detection System IDS, Intrusion Prevention System IPS, and Network Security Monitoring NSM engine. A local attacker, by providing a specially crafted rule with mixed-case frame syntax, could trigger a heap buffer overflow. This vulnerability occur...

CVE-2026-45185

CVE-2026-45185 — Dead.Letter: Exim 힙 UAF에서 원격 루트 권한 탈취까지 CVSS 9.8 치명적Critical | Exim 4.97–4.99.2 | Ubuntu / GnuTLS 빌드 | 인증 불필요 GDB 트레이스, 단계별 분석, 전 세계 노출 데이터를 포함한 전체 분석 문서: https://0init.github.io/cve-2026-45185-dead-letter-exim-rce.html 이 취약점이란 Exim이 BDAT 본문 전송 중일 때 TLS closenotify 경보를 보내면...

nginx-map-risk-audit

CVE-2026-42533: NGINX Map 정규식 위험 검토 CVE-2026-42533에 대한 방어적 연구 노트입니다. 이 CVE는 정규식 캡처와 특정 변수 평가 패턴을 사용하는 map 지시문과 관련된 NGINX 요청 처리의 힙 버퍼 오버플로입니다. 쉽게 말하면: NGINX는 웹 서버이자 리버스 프록시 소프트웨어입니다. 웹사이트와 API 앞에 위치하여 웹 요청을 받아 어디로 보낼지 결정합니다. map 규칙은 "이 요청 값이 X처럼 보이면 이 변수를 Y로 설정하라"는 NGINX 구성 기능입니다. 정규식 캡처는 패턴 일치에서...

CVE-2026-27654-PoC

CVE-2026-27654 – nginx ngxhttpdavmodule DAV Alias 경로 처리 PoC 이 저장소는 nginx의 ngxhttpdavmodule에 존재하는 힙 오버플로heap-overflow 취약점인 CVE‑2026‑27654 에 대한 개념 증명PoC 익스플로잇을 제공합니다. 이 버그는 특수하게 조작된 Destination 헤더와 alias 기반 location을 사용하는 MOVE/COPY 요청을 처리할 때 발생하는 sizet 언더플로underflow에서 비롯됩니다. ⚠️ 면책 조항: 이 도구는 공인된 보안 연...

CVE-2026-42533

CVE-2026-42533 — nginx two-pass 캡처 덮어쓰기two-pass capture clobbering nginx0.9.6–1.30.3 / mainline ≤1.31.2 복합 값 스크립트 엔진의 사전 인증 힙 오버플로 + 정보 유출; CVSS 9.2. 동일한 근본 원인에 두 가지 트리거 표면이 있습니다: HTTPregex location + regex map와 streamsslpreread + SNI + regex map. 심층 기술 분석 및 정오표는 ANALYSIS.md를 참조하세요. 프로젝트 구조...

CVE-2026-88053

A flaw was found in Tesseract, an open-source Optical Character Recognition OCR engine. A local attacker could provide a specially crafted .traineddata file, which, when processed, could lead to a heap out-of-bounds write. This vulnerability occurs due to unvalidated counts used as loop bounds...

CVE-2026-88052

A flaw was found in Tesseract, an open-source Optical Character Recognition OCR engine. The UNICHARSET::loadviafgets function incorrectly trusts a declared character count, which can lead to an out-of-bounds write in memory. A remote attacker could exploit this vulnerability by providing a...

CVE-2026-88051

A flaw was found in Tesseract, an open-source Optical Character Recognition OCR engine. A heap out-of-bounds write vulnerability exists in the GenericVector::read function when processing a specially crafted .traineddata model. By manipulating the reserved and sizeused fields, a local attacker ca...

Moderate: Red Hat Security Advisory: glib2 security update

An update for glib2 is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...