CVE-2026-104043

A flaw exists in SSSD where a local attacker with access to the Name Service Switch (NSS) responder UNIX socket can trigger an integer underflow . By sending a specially crafted request with an undersized packet header, the attacker can cause an out-of-bounds memory read during packet parsing. Th...

EUVD-2026-92913

A flaw was found in SSSD. A local attacker with access to the Name Service Switch NSS responder UNIX socket can trigger an integer underflow by sending a specially crafted request with an undersized packet header. This issue causes an out-of-bounds memory read during packet parsing, crashing the...

EUVD-2026-92895

A flaw was found in SSSD. A local attacker can exploit this issue by sending a specially crafted request with an invalid packet length to the autofs responder UNIX socket. This causes an integer underflow and an out-of-bounds memory read, which can crash the responder process and result in a deni...

CVE-2026-104037 Sssd: sssd: denial of service via packet length underflow in autofs responder

A flaw was found in SSSD. A local attacker can exploit this issue by sending a specially crafted request with an invalid packet length to the autofs responder UNIX socket. This causes an integer underflow and an out-of-bounds memory read, which can crash the responder process and result in a deni...

Urgent11-Suricata-LUA-scripts

Urgent11-Suricata-LUA-scripts CVE-2019-12255, CVE-2019-12256, CVE-2019-12258, CVE-2019-12260을 탐지하는 Suricata LUA 스크립트 CVE-2019-12255 이 스크립트는 CVE-2019-12255를 확인합니다. 검사되는 패킷은 PSH, ACK, URG 플래그가 설정되어 있어야 하며, 페이로드 크기가 1500바이트를 초과해야 합니다. 그런 다음 긴급 포인터urgent pointer 값이 0으로 설정되어 있는지 확인합니다. 이는 취약한 장치에서 정수...

CVE-2026-42980-POC

CVE-2026-42980 公開開示 このリポジトリには、CVE-2026-42980 の公開開示資料が含まれています。これは Windows カーネル WMI の整数アンダーフロー脆弱性であり、脆弱なラボビルド上で NT AUTHORITY\SYSTEM へのローカル特権昇格に悪用される可能性があります。 詳細レポート 英語の記事 スペイン語の記事 リポジトリ構成 public/ README.md README.es.md writeup-en.md writeup-es.md build.ps1 Makefile src/ cve202642980lpe.c helpers.c...

CVE-2020-1349

CVE-2020-1349 해당 취약점은 한글 Windows 10 1909 x64, 코드페이지 949에 설치된 Outlook 2019 16.0.12624.20424에서 발생합니다. TLDR; 이 취약점을 이용해 ASLR을 우회하지는 못했지만, 부팅 시 고정되는 시스템 라이브러리의 주소를 사용하여 계산기를 띄우는 Outlook 2019 32비트 익스플로잇을 작성했습니다. 또한 이 취약점은 제로 클릭 취약점입니다. "outlook.com" 계정 이외의 메일 서비스 계정이 IMAP을 사용하여 Outlook 2019와 연결되어 있으면 ...

CVE-2019-14287-write-up

CVE-2019-14287-분석 4294967295 Sudo 버그로 제한된 사용자가 Root로 명령 실행 가능 취약점 시연 새 사용자 추가: sudo su - root useradd -m -s /bin/bash testuser passwd testuser // add password to user visudo 새 항목 추가 test ALL=ALL, !root /usr/bin/id // specifying that this user cannot use id command with root user 파일을 저장하고 root 사용자...

Windows-CVE-2024-38063

Windows-TCP/IP-IPv6CVE-2024-38063 취약점 CVE-2024-38063은 Windows 운영 체제 TCP/IP 구성 요소에 존재하는 원격 코드 실행 취약점입니다. Microsoft 공식 정보에 따르면, 이 취약점의 최대 심각도는 '심각'이며 CVSS 점수는 9.8입니다. 여러 버전의 Windows 시스템이 이 취약점의 영향을 받습니다. 공격자는 이 취약점을 이용하여 원격 코드 실행을 수행할 수 있습니다. 취약점 원리 취약점의 원인은 Windows 운영 체제 TCP/IP 구성 요소에 정수 언더플로integ...

CVE-2022-0185-Case-Study

CVE-2022-0185-사례 연구 이 사례 연구는 ECE 9069: 해킹 입문 과제의 결과물입니다: https://whisperlab.org/introduction-to-hacking/ CVE-2022-0185 개요 CVE-2022-0185는 Linux 커널의 Filesystem Context 기능에서 legacyparseparam 함수가 제공된 매개변수 길이를 검증하는 방식에서 발견된 힙 기반 버퍼 오버플로 취약점입니다. unprivileged user namespaces가 활성화된 경우 비특권, 그렇지 않으면...

CVE-2022-0185-POC

CVE-2022-0185 — 개념 증명 CVE-2022-0185 에 대한 개념 증명 익스플로잇으로, Linux 커널의 legacyparseparam 함수fs/fscontext.c에서 발생하는 힙 기반 버퍼 오버플로우입니다. 이 취약점을 통해 로컬의 비특권 사용자가 root로 권한을 상승시킬 수 있습니다. 원본 익스플로잇: Crusaders of Rust. 전체 분석 문서: https://www.willsroot.io/2022/01/cve-2022-0185.html 취약점 이 버그는 legacyparseparam 내부의 경계...

CVE-2026-81000

⚡ CVE-2026-81000 - TUNderflow Linux Kernel TUN/TAP Receive Headroom Memory Corruption A Linux kernel memory-corruption vulnerability in the TUN/TAP networking subsystem , caused by insufficient bounds on receive headroom and an integer underflow in the packet allocation path. ⚠️ Disclaimer This...

EUVD-2026-91836

The web management service in affected RouterOS versions contains an integer underflow in its HTTP request body handling that is reachable before authentication. This can be leveraged by an unauthenticated network attacker to achieve arbitrary code execution as root, or to cause a denial of...

Linux Distros Unpatched Vulnerability : CVE-2026-86537

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Uncaught exception, Loop with unreachable exit condition 'infinite loop', Integer underflow wrap or wraparound vulnerability in Apache Thrift D language binding...

Linux Distros Unpatched Vulnerability : CVE-2026-82459

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Integer underflow wrap or wraparound, Out-of-bounds write vulnerability in Apache Thrift C++ 32 bit THeaderTransport. This issue affects Apache Thrift: before...

CVE-2026-84411

The web management service in affected RouterOS versions contains an integer underflow in its HTTP request body handling that is reachable before authentication. This can be leveraged by an unauthenticated network attacker to achieve arbitrary code execution as root, or to cause a denial of...

CVE-2026-84411

The web management service in MikroTik RouterOS versions prior to 7.24 is vulnerable to an integer underflow in its HTTP request body handling. This flaw is reachable before authentication , allowing an unauthenticated network attacker to achieve arbitrary code execution as root or cause a denial...

CVE-2026-84411 MikroTik RouterOS Integer Underflow

The web management service in affected RouterOS versions contains an integer underflow in its HTTP request body handling that is reachable before authentication. This can be leveraged by an unauthenticated network attacker to achieve arbitrary code execution as root, or to cause a denial of...

CVE-2026-85769

CVE-2026-85769 Heap out-of-bounds read in libtpms TPM 2.0 volatile-state deserialization. An unbounded optional-block skip in blockskipread advances the unmarshal cursor by an attacker-controlled 16-bit length and drives the signed remaining-size counter negative. Every downstream bounds check th...

CVE-2026-86537

A flaw was found in Apache Thrift's D language bindings. A remote, unauthenticated attacker could cause a Denial of Service DoS by sending specially crafted input to an affected application. This input triggers an integer underflow or an unhandled exception, causing the process to enter an infini...