cnext-exploits

Exploits de CNEXT Exploits para CNEXT CVE-2024-2961, un desbordamiento de búfer en iconv de glibc, por @cfreal Uso $ git clone --recurse-submodules https://github.com/ambionics/cnext-exploits.git $ pip install -r requirements.txt Análisis técnico La vulnerabilidad y los exploits se describen en l...

redsnarf

. \ \ | / / / \ | // \ / |\ \ / \ \ \ \ | | \ // // |/ \ | / | | /| | || /\ / /| /| || / / / / / / [email protected] @redsnarf RedSnarf is a pen-testing / red-teaming tool by Ed Williams for retrieving hashes and credentials from Windows workstations, servers and domain controllers...

exploit_cve-2023-26326_using_cve-2024-2961

利用 Iconv（CVE-2024-2961）攻击 BuddyForms（CVE-2023-26326） 这项工作由我、Omar Elshopky 和 Nour El Dien Bassiouny 完成。 该仓库包含针对 WordPress BuddyForms 插件（CVE-2023-26326）的漏洞利用代码，最初由 Joshua Martinelle 在 安全公告 中报告。该漏洞利用利用了 Iconv，设置字符集实现 RCE：利用 glibc 攻击 PHP 引擎 博客中提出的技术，并由 @ambionics 在 cnext-exploits 仓库中实现。...

cve-2021-4034

cve-2021-4034 mkdir -p 'GCONVPATH=.'; touch 'GCONVPATH=./pwnkit'; chmod a+x 'GCONVPATH=./pwnkit' mkdir -p pwnkit; echo 'module UTF-8// PWNKIT// pwnkit 2' pwnkit/gconv-modules echo...

CVE-2024-2961

CVE-2024-2961 CVE-2024–2961 安全问题缓解脚本 描述 此仓库包含一个 Bash 脚本，用于检查并缓解 GNU libc glibc 2.39 及更早版本中标识为 CVE-2024-2961 的缓冲区溢出漏洞。当 PHP 使用 iconv 函数将请求编码与某些中文扩展编码（ISO-2022-CN-EXT）之间进行转换时，该漏洞会影响 PHP。如果被利用，可能导致潜在的广泛影响。 使用方法 前提条件 确保您拥有修改系统配置文件所需的权限。 脚本需要系统上提供 ldd、iconv、grep 和 find 等基本工具。 运行脚本 git clone...

CVE-2024-2961-Remote-File-Read

CVE-2024-2961 远程文件读取 此脚本演示了如何利用系统中使用 iconv 库时对字符编码转换处理不当的漏洞（如 CVE-2024-2961 所述）。它允许攻击者通过利用 PHP filter 链和有缺陷的编码处理来读取服务器上的任意文件。 该脚本自动化上传精心构造的有效载荷、获取结果文件并显示其内容的过程。它基于文章中详细描述的研究成果：Iconv CVE-2024-2961：利用字符编码转换 工作原理 脚本遵循以下步骤： 1. 有效载荷创建 创建一个 PHP filter 链有效载荷，利用 iconv...

cve-2024-2961

cve-2024-2961 Versión personalizada de https://sansec.io/downloads/cve-2024-2961.c Crédito: https://github.com/ambionics/cnext-exploits https://github.com/absolutedesignltd/iconvfix...

CVE-2026-6042-PoC

CVE-2026-6042: Algorithmic Complexity DoS in musl libc iconv Gap-skipping loops in musl's iconv GB18030 4-byte decoder allow a small crafted input to consume disproportionate CPU time. A 40 KB adversarial payload can pin a CPU core for over 40 minutes. Advisory :...

wongpress

Real Case Exploitation of Buffer Overflow & Format String Vulnerabilities to Gain RCE in Ubuntu Server Related CVEs CVE-2024-2961 : Buffer overflow vulnerability in Glibc iconv function CVE-2024-29510 : Format string vulnerability in Ghostscript PostScript language interpreter 1. Problem...

Rocky Linux 8 [CIQ] Security Update: compat-libpthread-nonshared / glibc / glibc-all-langpacks / etc (crlsa-2024_3269)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20243269 advisory. glibc: Out of bounds write in iconv may lead to remote code execution CVE-2024-2961 Tenable has extracted the preceding description block directly from the CIQ...

Rocky Linux 8 [CIQ] Security Update: compat-libpthread-nonshared / glibc / glibc-all-langpacks / etc (crlsa-2026_20587)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202620587 advisory. glibc: glibc: Denial of Service via iconv function with specific character sets CVE-2026-4046 Tenable has extracted the preceding description block directly from t...

Rocky Linux 10.2 [CIQ] Security Update: glibc / glibc-all-langpacks / glibc-benchtests / etc (crlsa-2026_20594)

The Rocky Linux 10.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202620594 advisory. glibc: glibc: Denial of Service via iconv function with specific character sets CVE-2026-4046 Tenable has extracted the preceding description block directly fro...

CentOS Linux 8.4 [TuxCare] Security Update: compat-libpthread-nonshared / glibc / glibc-all-langpacks / etc (CENTOS8.4:CLSA-2026:1780135072)

The CentOS Linux 8.4 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.4:CLSA-2026:1780135072 advisory. - The iconv function in the GNU C Library versions 2.43 and earlier may crash due to an assertion failure when converting inputs from the...

AlmaLinux 9.6 [TuxCare] Security Update: compat-libpthread-nonshared / glibc / glibc-all-langpacks / etc (ALMALINUX9.6:CLSA-2026:1783697985)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1783697985 advisory. - The iconv function in the GNU C Library versions 2.43 and earlier may crash due to an assertion failure when converting inputs from the...

AlmaLinux 9.2 [TuxCare] Security Update: compat-libpthread-nonshared / glibc / glibc-all-langpacks / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2024:1718023873)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2024:1718023873 advisory. - The iconv function in the GNU C Library versions 2.39 and older may overflow the output buffer passed to it by up to 4 bytes when...

CentOS Linux 8.5 [TuxCare] Security Update: compat-libpthread-nonshared / glibc / glibc-all-langpacks / etc (CENTOS8.5:CLSA-2026:1780323824)

The CentOS Linux 8.5 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.5:CLSA-2026:1780323824 advisory. - The iconv function in the GNU C Library versions 2.43 and earlier may crash due to an assertion failure when converting inputs from the...

CentOS Linux 8 [TuxCare] Security Update: compat-libpthread-nonshared / glibc / glibc-all-langpacks / etc (CENTOS-STREAM8:CLSA-2026:1780561907)

The CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS- STREAM8:CLSA-2026:1780561907 advisory. - The iconv function in the GNU C Library versions 2.43 and earlier may crash due to an assertion failure when converting inputs from the...

Rocky Linux 9.6 [TuxCare] Security Update: compat-libpthread-nonshared / glibc / glibc-all-langpacks / etc (ALMALINUX9.6:CLSA-2026:1783697985)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1783697985 advisory. - The iconv function in the GNU C Library versions 2.43 and earlier may crash due to an assertion failure when converting inputs from the...

CVE-2024-4577

CVE-2024-4577 这是 PHP CVE-2024-4577 的 PoC。 简介 数字环境中的安全性比以往任何时候都更加重要。也就是说，想象一下，由于 PHP（网络上最常用的编程语言之一）中出现的新漏洞，数百万个网站上的隐形门被打开。该漏洞被称为 CVE-2024-4577 ，允许远程攻击者通过向 1CGI 注入参数在受影响的服务器上执行任意命令。由安全研究员 Orange Tsai @orange8361 来自 DEVCORE @d3vc0r3 发现，此漏洞引起了全球安全社区的关注。我们在此提供的信息来自外部研究来源。 漏洞描述 CVE-2024-4577 是一个远程代码执行...

Security Bulletin: IBM DataPower Gateway affected by denial of service due to glibc (CVE-2026-4046)

Summary IBM DataPower Gateway has addressed CVE-2026-4046 in glibc in versions 10.6.0.11 and 10.5.0.23 Vulnerability Details CVEID:CVE-2026-4046 DESCRIPTION: The iconv function in the GNU C Library versions 2.43 and earlier may crash due to an assertion failure when converting inputs from the...