EUVD-2026-82787

An integer overflow or wraparound vulnerability in File Operation in Synology DiskStation Manager DSM before 7.2.1-69057-10, 7.2.2-72806-7 and 7.3.2-86009-2 allows remote authenticated users to conduct limited denial-of-service attacks...

CVE-2026-11108-Integer-Overflow-in-Memory-Allocator-kmalloc-Sim-

CVE-2026-11108 – Desbordamiento de entero en asignador de memoria kmalloc Sim Código del programa C root@kitploit: // allocsim.c - Vulnerable memory allocator include include include define MAXBLOCK 1024 void mymallocsizet size sizet total = size + sizeofsizet; // header if total MAXBLOCK return...

nginxpwner

Nginxpwner Nginxpwner is a simple tool to look for common Nginx misconfigurations and vulnerabilities. Install: root@kitploit: cd /opt git clone https://github.com/stark0de/nginxpwner cd nginxpwner chmod +x install.sh ./install.sh Install using Docker root@kitploit: git clone...

CVE-2023-28218

报告 CVE-2023-28218 漏洞概述 导致 Windows 内核权限提升的漏洞。该漏洞出现在驱动程序 Windows Ancillary Function Driver for WinSock AFD.sys 中。该漏洞在 2023 年 4 月 11 日的补丁中修复。CVSS 评分为 3.1，为 7.0 / 6.1，被评为 Important。 漏洞描述 漏洞类型：Double fetch 和 Integer overflow 导致 pool overflow。 漏洞发生在函数 Afd!AfdComputeCMSGLength 和 Afd!AfdCopyCMSGBuffer 中。...

PHP_8.1.x_Exploit

🚀 PHP CVE 自动驾驶仪 自动检测和利用关键 PHP 漏洞 CVE-2024-4577 绕过, CVE-2025-14177, CVE-2025-14180, CVE-2025-14178 PHP8.1.xExploit.sh 是一个单文件、零配置 的安全评估工具，能够自动发现易受攻击的 PHP 端点，并利用影响 PHP 8.1.34 之前版本 （2024 年 12 月发布）的四个高危 CVE 。它无需手工构建载荷 ——只需提供一个 URL，脚本会自动完成从爬取到远程代码执行的全部工作。完全自动驾驶模式 ——无需用户提示即可自动检测和利用。 特性 完全自主的自动驾驶模式 – 给定一...

CVE-2017-7529-Nginx---Remote-Integer-Overflow-Exploit

此存储库没有 README。...

CVE-2026-93313

A vulnerability was found in Freedesktop Poppler 26.07.0. The impacted element is the function JBIG2Stream::readCodeTableSeg of the file poppler/JBIG2Stream.cc. Performing a manipulation results in integer overflow. The attack can be initiated remotely. The exploit has been made public and could ...

CVE-2026-93314

A vulnerability was determined in Freedesktop Poppler 26.07.0. This affects the function FoFiTrueType::mapCodeToGID of the file fofi/FoFiTrueType.cc. Executing a manipulation of the argument segCnt can lead to integer overflow. The attack can be launched remotely. The exploit has been publicly...

CVE-2017-7529-

CVE-2017-7529-Desbordamiento de Entero en el Encabezado Range de Nginx Nginx es un servidor web de alto rendimiento y un servidor proxy inverso, de caché, etc., ampliamente utilizado. En versiones de Nginx 1.13.2 e inferiores, existe una vulnerabilidad de desbordamiento de enteros que permite a u...

CVE-2013-2977

IBM Lotus Notes PNG Integer Overflow - CVE-2013-2977 IBM Lotus Notes es el cliente de una plataforma colaborativa cliente-servidor, siendo IBM Lotus Domino el servidor de aplicaciones. La capacidad de cliente de correo electrónico es una de sus características más importantes y utilizadas. IBM...

CVE-2017-7529

Nginx整数溢出漏洞 CVE-2017-7529 漏洞信息 当使用nginx标准模块时，攻击者可以通过发送包含恶意构造 range 域的 header 请求，来获取响应中的缓存文件头部信息。在某些配置中，缓存文件头可能包含后端服务器的IP地址或其它敏感信息，从而导致信息泄露。 参考：【漏洞分析】Nginx range 过滤器整形溢出漏洞 CVE–2017–7529预警分析 漏洞影响 该漏洞影响所有 0.5.6 - 1.13.2版本内默认配置模块的Nginx只需要开启缓存攻击者即可发送恶意请求进行远程攻击造成信息泄露。...

EUVD-2026-82624

A vulnerability was determined in Freedesktop Poppler 26.07.0. This affects the function FoFiTrueType::mapCodeToGID of the file fofi/FoFiTrueType.cc. Executing a manipulation of the argument segCnt can lead to integer overflow. The attack can be launched remotely. The exploit has been publicly...

CVE-2026-93314

A signed integer overflow in the function FoFiTrueType::mapCodeToGID (file fofi/FoFiTrueType.cc) affects Freedesktop Poppler 26.07.0 . The overflow is triggered by manipulating the segCnt argument. The vulnerability is exploitable remotely with user interaction required and no privileges needed. ...

CVE-2026-93311

A vulnerability was detected in Freedesktop Poppler 26.07.0. This issue affects the function SampledFunction::SampledFunction of the file poppler/Function.cc of the component SampledFunction. The manipulation of the argument BitsPerSample results in integer overflow. The attack may be performed...

CVE-2026-93313 Freedesktop Poppler JBIG2Stream.cc readCodeTableSeg integer overflow

A vulnerability was found in Freedesktop Poppler 26.07.0. The impacted element is the function JBIG2Stream::readCodeTableSeg of the file poppler/JBIG2Stream.cc. Performing a manipulation results in integer overflow. The attack can be initiated remotely. The exploit has been made public and could ...

CVE-2026-93313

An integer overflow in the JBIG2Stream::readCodeTableSeg function of poppler/JBIG2Stream.cc affects Freedesktop Poppler 26.07.0 . The flaw can be triggered remotely and, per the CVSS 3.1 vector (UI:R), requires user interaction —likely via a crafted document. The vulnerability allows low impact t...

EUVD-2026-82614

A vulnerability was found in Freedesktop Poppler 26.07.0. The impacted element is the function JBIG2Stream::readCodeTableSeg of the file poppler/JBIG2Stream.cc. Performing a manipulation results in integer overflow. The attack can be initiated remotely. The exploit has been made public and could ...

CVE-2009-4118

CVE-2009-4118 Cliente VPN de Cisco - Desbordamiento de Entero Denegación de Servicio Publicación de Exploit-DB en https://www.exploit-db.com/exploits/10190/ Alerta de Inteligencia oficial de Cisco ID 19445 y Créditos http://tools.cisco.com/security/center/viewAlert.x?alertId=19445 Autor Alex...

Trigon

Trigon Trigon 是一个基于 CVE-2023-32434 的确定性内核漏洞利用。它当前支持运行 iOS 13 - 15.7.6 的 A9 至 A11 设备。确定性意味着该漏洞利用在利用期间或之后永远不会导致内核恐慌，并且完全可靠。 Trigon 利用了 XNU 的 VM 层中的一个整数溢出漏洞。该漏洞允许我们构建任意物理地址映射原语。这赋予我们对任何物理地址的读写原语，除非是页表 。无法读取页表使得漏洞利用更加困难，但最终我们找到了一些巧妙的技巧来绕过这个问题，并构建了完整的虚拟读写原语。 完整的文章可以在这里找到。如果你对 iOS...

CVE-2026-93311

Freedesktop Poppler 26.07.0 contains an integer overflow in the SampledFunction::SampledFunction constructor (poppler/Function.cc), triggered by manipulation of the BitsPerSample argument. The vulnerability is reachable remotely over the network with low complexity and no required privileges, but...