vim: Vim: Heap buffer overflow allows arbitrary code execution

A heap buffer overflow in Vim allows a local attacker to cause a denial of service or potentially execute arbitrary code. The flaw is triggered by processing a specially crafted spell file, where the setsofo function fails to reset internal data between sections, leading to an out-of-bounds write...

CVE-2021-3156-Baron-Samedit

CVE-2021-3156 - Laboratorio y Exploit "Baron Samedit" Este repositorio proporciona un entorno educativo autocontenido para comprender y explotar CVE-2021-3156 , un desbordamiento de búfer en el montón en sudo que permite a cualquier usuario no privilegiado obtener privilegios de root en sistemas...

Exploit for Heap-based Buffer Overflow in F5 Nginx_Gateway_Fabric

CVE-2026-42533 Lab — NGINX Two-Pass Capture Clobbering RCE...

nginx-cve-2026-42945-check

NGINX CVE-2026-42945 本机检查脚本 语言：中文 | English 本仓库提供两份单机检查脚本，用于在 Linux / Windows 服务器本机排查 Nginx、OpenResty、Tengine 是否存在 CVE-2026-42945 相关风险。 脚本只做只读采集和本地判定，不执行漏洞 PoC，不发送攻击请求，不修改配置，不重启服务，不升级软件。 漏洞背景 CVE-2026-42945 又被称为 NGINX Rift ，公开资料将其描述为 ngxhttprewritemodule 中的堆缓冲区溢出问题。根据 NVD 描述，当 rewrite 指令与后续 rewri...

httpd: mod_proxy_ajp: heap-based buffer over-read and memory disclosure in ajp_parse_data()

A flaw was found in the modproxyajp module of httpd. When processing AJP Apache JServ Protocol messages, the ajpparsedata function attempts to read data beyond the allocated buffer size, allowing an attacker or a malformed request to cause a heap-based buffer over-read. This issue potentially lea...

httpd: Apache HTTP Server: Heap-based Buffer Overflow via malicious backend servers

A flaw was found in Apache HTTP Server. This heap-based buffer overflow vulnerability can be exploited by a malicious backend server when using ProxyPassReverseCookie directives. This could lead to a denial of service DoS condition, making the server unavailable to legitimate users...

httpd: Apache HTTP Server: Heap-based Buffer Overflow via untrusted content in mod_xml2enc

A flaw was found in Apache HTTP Server, specifically within the modxml2enc module. This heap-based buffer overflow vulnerability can be triggered when processing untrusted content through the xml2StartParse function. A remote attacker could potentially exploit this to cause a denial of service,...

Apache HTTP Server: mod_proxy_ajp: Apache HTTP Server mod_proxy_ajp: Arbitrary code execution via heap-based buffer overflow

A flaw was found in modproxyajp of Apache HTTP Server. This heap-based buffer overflow vulnerability allows a remote attacker, by connecting to a malicious AJP Apache JServ Protocol server, to send a specially crafted message. This message can cause modproxyajp to write attacker-controlled data...

Orthanc DICOM Server

ADVISORY SUMMARY Successful exploitation of this vulnerability could allow an authenticated remote attacker to write past the end of a heap allocation when Orthanc decodes an attacker-supplied PNG or JPEG image, resulting in a crash of the Orthanc process and a denial-of-service condition. 2...

CVE-2026-42945

CVE-2026-42945: NGINX Rift 堆缓冲区溢出漏洞 概述 CVE-2026-42945 是 NGINX 服务器中的一个严重堆缓冲区溢出漏洞，被称为 "NGINX Rift"。该漏洞存在于 NGINX 的 rewrite 和 set 指令处理逻辑中，当特定配置条件满足时，攻击者可以通过构造恶意请求触发堆溢出，导致拒绝服务（DoS）甚至潜在的远程代码执行（RCE）。 漏洞类型 ：堆缓冲区溢出 风险等级 ：高危 CVE ID ：CVE-2026-42945 影响范围 受影响版本 ：NGINX 0.6.27 1.30.0 不受影响版本 ：NGINX 1.31.0 及更高版本...

CVE-2025-14847-MongoBleed-Exploit

CVE-2025-14847 - MongoBleed 👨‍💻 作者: Furkan KAYAPINAR @FurkanKAYAPINAR ⚠️ 仅供教育用途 针对 MongoDB Server 中严重的未授权内存泄漏漏洞的实验环境及利用脚本。 📋 目录 漏洞概述 受影响版本 安装 实验环境 使用方法 修复方案 法律声明 🔴 漏洞概述 CVE-2025-14847 MongoBleed 是 MongoDB Server 的 zlib 压缩处理中存在的一个严重的未授权内存泄漏漏洞。 属性| 值 ---|--- CVE 编号| CVE-2025-14847 CVSS 评分| 8.7 高危...

CVE-2025-49844

CVE-2025-49844 RediShell AI 制作的 Revshell PoC 由 AI 制作的 Redishell PoC 的未测试完成版。 原始 PoC： https://github.com/raminfp/redisexploit/blob/main/exploitpoc.py 韩语部分： https://github.com/dwisiswant0/CVE-2025-49844/blob/master/CVE-2025-49844.lua 进展？ 我们后来又接入了...

google-chrome-emergency-update

Chrome 紧急安全更新 此仓库包含与谷歌 Chrome 紧急更新相关的信息和工具，用于解决关键安全漏洞。 🚨 紧急更新通知 谷歌已发布 Chrome 紧急更新，以修复正在被积极利用的零日漏洞。 关键细节 CVE ：CVE-2023-7024（及其他） 严重性 ：严重 更新版本 ：120.0.6099.62/.63（Mac/Linux），120.0.6099.62/.63（Windows） 发布日期 ：2023年12月 🔥 关键漏洞 WebRTC 堆缓冲区溢出 （CVE-2023-7024） V8 JavaScript 引擎类型混淆 多个高危内存安全问题 📁 仓库内容 /docs -...

CVE-2026-23479-Redis-UAF-Proof-of-Concept

🔥 CVE-2026-23479 – Redis UAF 概念验证（PoC） RedisunblockClientOnKey 中的释放后使用（UAF）漏洞，可导致远程代码执行 附带 GDB 辅助利用的概念验证（仅限教育/实验室用途） 📖 概述 CVE-2026-23479 是 Redis 7.2.0 至 8.6.2 版本中的一个严重释放后使用（UAF）漏洞。 该漏洞位于 unblockClientOnKey 中，该函数调用了 processCommandAndResetClient，但未检查其返回值。 如果在调用过程中客户端被释放（例如因淘汰机制），调用方将继续操作悬空指针 → 。...

Cisco-ASA-CVE-2025-20333-Scanner

CVE-2025-20333 Scanner Un escáner de diagnóstico basado en Python para el desbordamiento de búfer del servidor web VPN de Cisco ASA / FTD CVE-2025-20333. CVE-2025-20333 es una vulnerabilidad crítica de desbordamiento de búfer en el montón heap-based buffer overflow en el manejador de carga de...

CVE-2026-65349

CVE-2026-65349 — getattrlist OOB Write in vfsattrpackinternal Component: XNU VFS — vfsattrpackinternal getattrlist syscall Affected: iOS / iPadOS 26.6 23G71 and earlier Fixed in: iOS / iPadOS 26.6.1 23G83 Type: Out-of-Bounds write to caller buffer Impact: Kernel heap corruption; from kernel conte...

Exploit for Use After Free in Linux Linux_Kernel

RMV Exploit — чистая сборка CVE-2026-43499 для iQOO Neo 11 PD...

FreeRDP: FreeRDP: Denial of Service via heap out-of-bounds read

A heap out-of-bounds read vulnerability in FreeRDP allows an unauthenticated, malicious RDP server to cause a Denial of Service. By sending a specially crafted glyph fragment update, the server forces the client to read beyond its allocated memory, crashing the application...

Important: Red Hat Security Advisory: freerdp security update

An update for freerdp is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring...

FreeRDP: FreeRDP: Heap-buffer-overflow allows arbitrary code execution via crafted RPC response

A flaw was found in FreeRDP. A remote attacker, specifically a malicious TS Gateway, can exploit a heap-buffer-overflow vulnerability by sending a specially crafted Remote Desktop Protocol RDP response. This occurs because the client incorrectly uses a smaller allochint value instead of the actua...