Lucene search
+L

539 matches found

Kitploit
Kitploit
•added 2026/09/28 7:48 p.m.•11 views

CVE-2024-2961

CVE-2024-2961 CVE-2024–2961 Security Issue Mitigation Script Description This repository contains a Bash script to check and mitigate the buffer overflow vulnerability identified in GNU libc glibc versions 2.39 and older, known as CVE-2024-2961. This vulnerability affects PHP when the iconv...

7.3CVSS7.3AI score0.8833EPSS
SaveExploits18
Kitploit
Kitploit
•added 2026/09/28 4:07 p.m.•15 views

iconvfix

iconvfix Bash script to patch for CVE-2024-2961 Currently works on Centos7. No warranty, do not use on production systems, this is just an internal helper : Usage tsh ssh username@target sudo 'bash -s' iconvfix.sh...

7.3CVSS7.2AI score0.8833EPSS
SaveExploits18
IBM Security Bulletins
IBM Security Bulletins
•added 2026/09/28 2:31 p.m.•2 views

Security Bulletin: IBM DataPower Gateway affected by denial of service due to glibc (CVE-2026-4046)

Summary IBM DataPower Gateway has addressed CVE-2026-4046 in glibc in versions 10.6.0.11 and 10.5.0.23 Vulnerability Details CVEID:CVE-2026-4046 DESCRIPTION: The iconv function in the GNU C Library versions 2.43 and earlier may crash due to an assertion failure when converting inputs from the...

7.5CVSS7.1AI score0.00662EPSS
SaveExploits1Affected Software1
Kitploit
Kitploit
•added 2026/09/28 1:02 p.m.•16 views

CVE-2024-2961-Remote-File-Read

CVE-2024-2961 Remote File Read This script demonstrates how to exploit a vulnerability in systems using the iconv library when it mishandles character encoding conversions, as described in CVE-2024-2961. It allows an attacker to read arbitrary files from the server by taking advantage of PHP filt...

7.3CVSS7.3AI score0.8833EPSS
SaveExploits18
Kitploit
Kitploit
•added 2026/09/28 12:56 p.m.•49 views

redsnarf

root@kitploit: . \ \ | / / / \ | // \ / |\ \ / \ \ \ \ | | \ // // |/ \ | / | | /| | || /\ / /| /| || / / / / / / [email protected] @redsnarf RedSnarf is a pen-testing / red-teaming tool by Ed Williams for retrieving hashes and credentials from Windows workstations, servers and...

6.1AI score
SaveExploits0References3
Kitploit
Kitploit
•added 2026/09/28 6:24 a.m.•10 views

cnext-exploits

Exploits de CNEXT Exploits para CNEXT CVE-2024-2961, un desbordamiento de búfer en iconv de glibc, por @cfreal Uso root@kitploit: $ git clone --recurse-submodules https://github.com/ambionics/cnext-exploits.git $ pip install -r requirements.txt Análisis técnico La vulnerabilidad y los exploits se...

7.3CVSS7.4AI score0.8833EPSS
SaveExploits18References1
Kitploit
Kitploit
•added 2026/09/27 6:43 p.m.•8 views

exploit_cve-2023-26326_using_cve-2024-2961

Exploit BuddyForms CVE-2023-26326 using Iconv CVE-2024-2961 This work was done by me, Omar Elshopky, and Nour El Dien Bassiouny. This repository contains an exploit for the WordPress BuddyForms Plugin CVE-2023-26326, initially reported in the advisory by Joshua Martinelle. The exploit leverages a...

9.8CVSS7.2AI score0.8833EPSS
SaveExploits20References4
Kitploit
Kitploit
•added 2026/09/27 2:57 p.m.•10 views

test_iconv

Testing CVE-2024-2961 V1 - Under Analysis This repository contains a C program to test for CVE-2024-2961, which involves a buffer overflow vulnerability in the iconv function of the GNU C Library glibc. Due to the structure of PHP’s heap, this overflow can be exploited to modify part of a free li...

7.3CVSS7.5AI score0.8833EPSS
SaveExploits18
Kitploit
Kitploit
•added 2026/09/27 12:40 a.m.•9 views

cve-2021-4034

cve-2021-4034 mkdir -p 'GCONVPATH=.'; touch 'GCONVPATH=./pwnkit'; chmod a+x 'GCONVPATH=./pwnkit' mkdir -p pwnkit; echo 'module UTF-8// PWNKIT// pwnkit 2' pwnkit/gconv-modules echo...

7.8CVSS6.8AI score0.94345EPSS
SaveExploits155
Kitploit
Kitploit
•added 2026/09/24 5:55 p.m.•15 views

CVE-2026-6042-PoC

CVE-2026-6042: Algorithmic Complexity DoS in musl libc iconv Gap-skipping loops in musl's iconv GB18030 4-byte decoder allow a small crafted input to consume disproportionate CPU time. A 40 KB adversarial payload can pin a CPU core for over 40 minutes. Advisory :...

4.8CVSS5.6AI score0.0016EPSS
SaveExploits1
Kitploit
Kitploit
•added 2026/09/24 1:04 p.m.•9 views

wongpress

Real Case Exploitation of Buffer Overflow & Format String Vulnerabilities to Gain RCE in Ubuntu Server Related CVEs CVE-2024-2961 : Buffer overflow vulnerability in Glibc iconv function CVE-2024-29510 : Format string vulnerability in Ghostscript PostScript language interpreter 1. Problem...

7.3CVSS7.2AI score0.8833EPSS
SaveExploits23
IBM Security Bulletins
IBM Security Bulletins
•added 2026/09/22 7:14 a.m.•12 views

Security Bulletin: IBM Guardium Data Protection is affected by multiple vulnerabilities.

Summary IBM Guardium Data Protection has addressed these vulnerabilities in an update. Vulnerability Details CVEID:CVE-2026-4046 DESCRIPTION: The iconv function in the GNU C Library versions 2.43 and earlier may crash due to an assertion failure when converting inputs from the IBM1390 or IBM1399...

9.1CVSS6.9AI score0.01827EPSS
SaveExploits6Affected Software1
IBM Security Bulletins
IBM Security Bulletins
•added 2026/09/22 7:04 a.m.•8 views

Security Bulletin: Vulnarabilities in kernel, glibc, expat, RMC daemon, httpd and mod_http2 libraries (CVE-2026-46333, CVE-2026-4046, CVE-2026-45186, CVE-2026-14514, CVE-2025-53020, CVE-2026-49975) affect Power HMC.

Summary The kernel, glibc, expat, RMC daemon, httpd and modhttp2 libraries are used by Power Hardware Management Console HMC. HMC has addressed the applicable CVEs. Vulnerability Details CVEID:CVE-2026-4046 DESCRIPTION: The iconv function in the GNU C Library versions 2.43 and earlier may crash d...

7.8CVSS5.9AI score0.04799EPSS
SaveExploits19Affected Software1
Kitploit
Kitploit
•added 2026/09/21 7:54 p.m.•16 views

CVE-2024-4577

CVE-2024-4577 Este es un PoC para PHP CVE-2024-4577. Introducción La seguridad en el entorno digital es más importante que nunca. Dicho esto, imagina que una puerta invisible se abre en millones de sitios web debido a una nueva vulnerabilidad en PHP, uno de los lenguajes de programación más...

9.8CVSS7.6AI score0.99987EPSS
SaveExploits68
OSV
OSV
•added 2026/09/15 11:17 a.m.•8 views

AZL-100959 CVE-2026-77117 affecting package glibc 2.38-21

Converting crafted SHIFTJISX0213 input to UCS-4 or the internal wide character encoding, for example with iconv, in the GNU C Library version 2.3 to 2.44 may result in the converter making no progress, causing the calling application to hang. Some SHIFTJISX0213 sequences decode to two code points...

5.9CVSS6AI score0.00412EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/09/15 10:51 a.m.•9 views

CVE-2026-80489 EUC_JISX0213 decoding may hang on crafted input

Converting crafted EUCJISX0213 input to UCS-4 or the internal wide character encoding, for example with iconv, in the GNU C Library version 2.3 to 2.44 may result in the converter making no progress, causing the calling application to hang. Some EUCJISX0213 sequences decode to two code points. If...

5.9CVSS5.9AI score0.00412EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/09/15 10:51 a.m.•12 views

EUVD-2026-78411

Converting crafted EUCJISX0213 input to UCS-4 or the internal wide character encoding, for example with iconv, in the GNU C Library version 2.3 to 2.44 may result in the converter making no progress, causing the calling application to hang. Some EUCJISX0213 sequences decode to two code points. If...

5.9CVSS5.9AI score0.00412EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/09/15 10:51 a.m.•28 views

CVE-2026-80489 EUC_JISX0213 decoding may hang on crafted input

Converting crafted EUCJISX0213 input to UCS-4 or the internal wide character encoding, for example with iconv, in the GNU C Library version 2.3 to 2.44 may result in the converter making no progress, causing the calling application to hang. Some EUCJISX0213 sequences decode to two code points. If...

5.9CVSS0.00412EPSS
SaveExploits0References2
OSV
OSV
•added 2026/09/15 10:51 a.m.•10 views

CVE-2026-80489 EUC_JISX0213 decoding may hang on crafted input

Converting crafted EUCJISX0213 input to UCS-4 or the internal wide character encoding, for example with iconv, in the GNU C Library version 2.3 to 2.44 may result in the converter making no progress, causing the calling application to hang. Some EUCJISX0213 sequences decode to two code points. If...

5.9CVSS5.9AI score
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2026/09/15 10:48 a.m.•11 views

CVE-2026-77117 SHIFT_JISX0213 decoding may hang on crafted input

Converting crafted SHIFTJISX0213 input to UCS-4 or the internal wide character encoding, for example with iconv, in the GNU C Library version 2.3 to 2.44 may result in the converter making no progress, causing the calling application to hang. Some SHIFTJISX0213 sequences decode to two code points...

5.9CVSS5.9AI score0.00412EPSS
SaveExploits0References2
Rows per page
Query Builder