CVE-2025-60751

CVE-2025-60751: GeographicLib 스택 기반 버퍼 오버플로우 📌 이 저장소는 C++ 라이브러리 GeographicLib 에 존재하는 스택 기반 버퍼 오버플로우 Stack-based Buffer Overflow 결함인 CVE-2025-60751 취약점에 대한 분석 및 기술 문서를 포함합니다. 📝 설명 이 취약점은 GeoConvert 구성 요소 내의 DMS::InternalDecode 함수에서 발생합니다. 이 결함은 라이브러리가 DMS 도, 분, 초 형식의 잘못되었거나 지나치게 긴 좌표 문자열을 처리하려고 할 ...

CVE-2026-24061

CVE-2026-24061 Telnet RCE 익스플로잇 - SafeBreach Labs 제작 이 스크립트는 형식이 잘못된 USER 환경 변수를 사용하여 Telnet 서버의 CVE-2026-24061 취약점을 악용합니다. 사용법 대상 호스트로 스크립트를 실행합니다: root@kitploit: python telnetrce.py -p 인수 host: 대상 IP 주소 또는 호스트 이름 필수 -p, --port: 대상 포트 기본값: 23 예제 root@kitploit: python telnetrce.py 192.168.1.100...

CVE-2017-3881-exploit-cisco-

Cisco Cluster Management ProtocolCMP 처리 코드의 Cisco IOS 및 Cisco IOS XE 소프트웨어 취약점으로 인해 인증되지 않은 원격 공격자가 영향을 받는 장치를 재부팅하거나 상승된 권한으로 원격 코드를 실행할 수 있습니다. 클러스터 관리 프로토콜은 클러스터 구성원 간의 신호 및 명령 프로토콜로 Telnet을 내부적으로 사용합니다. 이 취약점은 두 가지 요소의 조합으로 인해 발생합니다. 1 CMP 관련 Telnet 옵션 사용을 클러스터 구성원 간의 내부 로컬 통신으로만 제한하지 않고 영향을 ...

CVE-2023-40294-and-CVE-2023-40295

제 환경에서 boron을 실행하던 중, 우연히 2개의 힙 버퍼 오버플로우를 발견했습니다. libboronlibboron.so.2 버전 2.0.8에서 약간 잘못된 형식의 입력을 처리할 때 발생했습니다. 이는 Mac x8664과 Linux x8664에서 공식적으로 테스트되었습니다: Files for reproduction reproduction.zip 컴파일 git clone https://github.com/0branch/boron.git cd boron ./configure && make sudo make install &&...

CVE-2026-73768

A vulnerability exists in the command line interface of AOS-CX that may allow for improper processing of malformed input. Successful exploitation could result in the execution of arbitrary commands with root privileges...

CVE-2026-73750

Vulnerabilities exist in the authentication module that may improperly process malformed or truncated input. An authenticated remote attacker could exploit these vulnerabilities by providing specially crafted input from a compromised or hostile authentication server. Successful exploitation could...

CVE-2026-73749

Multiple vulnerabilities exist in a daemon of AOS-CX that may allow for improper processing of malformed input. An unauthenticated remote attacker could exploit these vulnerabilities by sending specially crafted packets to the affected service. Successful exploitation could result in remote code...

EUVD-2026-69632

A vulnerability exists in the command line interface of AOS-CX that may allow for improper processing of malformed input. Successful exploitation could result in the execution of arbitrary commands with root privileges...

CVE-2026-73768

CVE-2026-73768 is a local privilege escalation in the command line interface (CLI) of HPE ArubaOS-CX (AOS-CX) . The root cause is improper processing of malformed input , which can allow a low-privilege local user to execute arbitrary commands with root privileges . The CVSS 3.1 base score is 7.3...

CVE-2026-73768 Local Privilege Escalation in AOS-CX Command Line Interface

A vulnerability exists in the command line interface of AOS-CX that may allow for improper processing of malformed input. Successful exploitation could result in the execution of arbitrary commands with root privileges...

EUVD-2026-69614

Vulnerabilities exist in the authentication module that may improperly process malformed or truncated input. An authenticated remote attacker could exploit these vulnerabilities by providing specially crafted input from a compromised or hostile authentication server. Successful exploitation could...

EUVD-2026-69613

Multiple vulnerabilities exist in a daemon of AOS-CX that may allow for improper processing of malformed input. An unauthenticated remote attacker could exploit these vulnerabilities by sending specially crafted packets to the affected service. Successful exploitation could result in remote code...

CVE-2026-83614 xmldom: Quadratic-time parsing via the malformed-input recovery path — `parseElementStartPart` re-scan and `normalize()` adjacent-text merge

xmldom is a pure JavaScript W3C standard-based XML DOM Level 2 Core DOMParser and XMLSerializer module. Prior to @xmldom/xmldom versions 0.8.15 and 0.9.12, and in xmldom versions 0.3.0 through 0.6.0, two independent quadratic paths can cause denial of service. In lib/sax.js, parseElementStartPart...

PoC-CVE-2025-69421

CVE-2025-69421 충돌 전용 재현기 이 저장소는 격리된 실험실 환경에서 CVE-2025-69421을 재현하는 최소한의 잘못된 형식의 PKCS12 파일을 포함합니다. 생성된 PFX에는 선택적 encryptedContent 필드가 생략된 EncryptedData의 EncryptedContentInfo가 포함됩니다. 취약한 OpenSSL 버전은 PKCS12unpackp7encdata에서 NULL ASN1OCTETSTRING 포인터를 PKCS12itemdecryptd2iex로 전달할 수 있으며, 이 함수는 NULL 검사 없이...

PT-2026-84467

Name of the Vulnerable Software and Affected Versions AOS-CX affected versions not specified Description A daemon in AOS-CX improperly processes malformed input. An unauthenticated remote attacker can exploit this by sending specially crafted packets to the affected service, potentially leading t...

MGASA-2026-0348 Updated clamav packages fix security vulnerabilities

An indexing error while converting GPT partition names that could read or write beyond a stack-allocated partition entry. CVE-2026-20345 An integer overflow in the PESpin unpacker that could allocate an undersized buffer and then write beyond it while rebuilding a PE file. CVE-2026-20339 An integ...

CVE_2019_19844

djangocve201919844poc CVE-2019-19844에 대한 PoC 설정 1. docker-compose run --service-ports web python manage.py migrate --no-input 2. docker-compose run --service-ports web python manage.py createsuperuser [email protected] --username 0xsha 3. localhost:8000/accounts/password-reset로 이동하세요...

CVE-2026-47888

A Spring RSocket application is exposed to a memory leak via a malformed SETUP frame. Spring Framework 7.0.0 - 7.0.8 Spring Framework 6.2.0 - 6.2.19 Spring Framework 6.1.0 - 6.1.28 Spring Framework 6.0.0 - 6.0.30 Spring Framework 5.3.0 - 5.3.49 Spring Framework 5.2.0.RELEASE - 5.2.25.RELEASE...

CVE-2026-47888 Spring Framework Memory Leak via SETUP Frame in RSocketMessageHandler

A Spring RSocket application is exposed to a memory leak via a malformed SETUP frame. Spring Framework 7.0.0 - 7.0.8 Spring Framework 6.2.0 - 6.2.19 Spring Framework 6.1.0 - 6.1.28 Spring Framework 6.0.0 - 6.0.30 Spring Framework 5.3.0 - 5.3.49 Spring Framework 5.2.0.RELEASE - 5.2.25.RELEASE...

CVE-2026-47888

CVE-2026-47888 affects the RSocketMessageHandler component of Spring Framework, where a malformed SETUP frame causes a memory leak in RSocket applications. The vulnerability is exploitable over the network with no privileges or user interaction required, leading to high availability impact (CVSS ...