redsnarf

. \ \ | / / / \ | // \ / |\ \ / \ \ \ \ | | \ // // |/ \ | / | | /| | || /\ / /| /| || / / / / / / [email protected] @redsnarf RedSnarf is a pen-testing / red-teaming tool by Ed Williams for retrieving hashes and credentials from Windows workstations, servers and domain controllers...

CVE-2026-122054

A flaw was found in glibc. When converting crafted text using the BIG-HKSCS character set, such as through the iconv library function, the conversion routine can fail to advance and enter an infinite loop. A remote attacker could exploit this vulnerability by submitting malicious input to an...

CVE-2026-122054

Converting crafted BIG-HKSCS input to UCS-4 or the internal wide character encoding, for example with iconv, in the GNU C Library version 2.18 through 2.31 may result in the converter making no progress, causing the calling application to hang...

EUVD-2026-117002

Converting crafted BIG-HKSCS input to UCS-4 or the internal wide character encoding, for example with iconv, in the GNU C Library version 2.18 through 2.31 may result in the converter making no progress, causing the calling application to hang...

CVE-2026-122054

The GNU C Library versions 2.18 through 2.31 are vulnerable to a denial of service condition. When converting crafted BIG-HKSCS input to UCS-4 or internal wide character encoding (e.g., via iconv ), the converter may fail to make progress. This results in the calling application hanging indefinit...

CVE-2026-122054 BIG-HKSCS decoding hang on crafted input

Converting crafted BIG-HKSCS input to UCS-4 or the internal wide character encoding, for example with iconv, in the GNU C Library version 2.18 through 2.31 may result in the converter making no progress, causing the calling application to hang...

CVE-2026-122054 BIG-HKSCS decoding hang on crafted input

Converting crafted BIG-HKSCS input to UCS-4 or the internal wide character encoding, for example with iconv, in the GNU C Library version 2.18 through 2.31 may result in the converter making no progress, causing the calling application to hang...

UBUNTU-CVE-2026-122054

Converting crafted BIG-HKSCS input to UCS-4 or the internal wide character encoding, for example with iconv, in the GNU C Library version 2.18 through 2.31 may result in the converter making no progress, causing the calling application to hang...

CVE-2026-122054

Converting crafted BIG-HKSCS input to UCS-4 or the internal wide character encoding, for example with iconv, in the GNU C Library version 2.18 through 2.31 may result in the converter making no progress, causing the calling application to hang...

CVE-2024-2961-Remote-File-Read

CVE-2024-2961 Remote File Read This script demonstrates how to exploit a vulnerability in systems using the iconv library when it mishandles character encoding conversions, as described in CVE-2024-2961. It allows an attacker to read arbitrary files from the server by taking advantage of PHP filt...

exploit_cve-2023-26326_using_cve-2024-2961

Exploit BuddyForms CVE-2023-26326 using Iconv CVE-2024-2961 This work was done by me, Omar Elshopky, and Nour El Dien Bassiouny. This repository contains an exploit for the WordPress BuddyForms Plugin CVE-2023-26326, initially reported in the advisory by Joshua Martinelle. The exploit leverages a...

wongpress

Real Case Exploitation of Buffer Overflow & Format String Vulnerabilities to Gain RCE in Ubuntu Server Related CVEs CVE-2024-2961 : Buffer overflow vulnerability in Glibc iconv function CVE-2024-29510 : Format string vulnerability in Ghostscript PostScript language interpreter 1. Problem...

CVE-2024-2961

CVE-2024-2961 CVE-2024–2961 Security Issue Mitigation Script Description This repository contains a Bash script to check and mitigate the buffer overflow vulnerability identified in GNU libc glibc versions 2.39 and older, known as CVE-2024-2961. This vulnerability affects PHP when the iconv...

CVE-2024-4577

CVE-2024-4577 This is a PoC for PHP CVE-2024-4577. Introduction Security in the digital environment is more important than ever. That said, imagine an invisible door opens on millions of websites due to a new vulnerability in PHP, one of the most used programming languages ​​on the web. This...

CVE-2026-6042-PoC

CVE-2026-6042: Algorithmic Complexity DoS in musl libc iconv Gap-skipping loops in musl's iconv GB18030 4-byte decoder allow a small crafted input to consume disproportionate CPU time. A 40 KB adversarial payload can pin a CPU core for over 40 minutes. Advisory :...

iconvfix

iconvfix Bash script to patch for CVE-2024-2961 Currently works on Centos7. No warranty, do not use on production systems, this is just an internal helper : Usage tsh ssh username@target sudo 'bash -s' iconvfix.sh...

test_iconv

Testing CVE-2024-2961 V1 - Under Analysis This repository contains a C program to test for CVE-2024-2961, which involves a buffer overflow vulnerability in the iconv function of the GNU C Library glibc. Due to the structure of PHP’s heap, this overflow can be exploited to modify part of a free li...

CVE-2026-107590 Out-of-bounds write vulnerability in QTextCodec iconv-based encoding impacts Qt

An out-of-bounds write vulnerability in the Qt QTextCodec iconv-based encoding of the Qt 5 Compatibility APIs module Qt Core in Qt 5 and earlier impacts Qt. Under certain conditions, encoding text with QTextCodec may write outside an internal buffer. This can cause the application to crash and ma...

CVE-2026-107590

The Qt framework is impacted by an out-of-bounds write vulnerability in the QTextCodec iconv-based encoding of the Qt 5 Compatibility APIs module (equivalent to Qt Core in Qt 5 and earlier). Under specific conditions, encoding text with QTextCodec may result in writes outside an internal buffer, ...

Qt buffer error vulnerability

Buffer error vulnerabilities exist in Qt versions 4.5.0 through 6.8.8 and 6.9.0 through 6.11.2. These vulnerabilities stem from an out-of-bounds write in Qt’s iconv-based encoding for QTextCodec. Under certain conditions, when QTextCodec is used to encode text, it may write beyond the boundaries ...