CVE-2022-22629

CVE-2022-22629 Prova di concetto Questo post riguarda la PoC per il bug WebGL che è stato corretto negli aggiornamenti di sicurezza di Safari 15.4. Se vuoi imparare in dettaglio come funziona WebGL, puoi usare questa risorsa ufficiale, dato che qui discuteremo i dettagli specifici del bug:...

freePW_tc7200Eploit

Dieses Repo enthält eine PoC-iPhone-App für den Exploit von CVE: CVE-2014-1677. Der Bug/die Sicherheitslücke war lange genug öffentlich, und ein Fix hätte schon vor langer Zeit veröffentlicht werden sollen. Hoffentlich bringt diese App jemanden dazu, sich die Mühe zu machen, einen Fix zu...

SSH-key-and-RCE-PoC-for-CVE-2021-41773

SSH-Key und RCE PoC für CVE-2021-41773 Dieses Repository enthält einen Proof-of-Concept PoC für CVE-2021-41773. Diese CVE legt eine Local File Inclusion LFI und Remote Code Execution RCE Schwachstelle offen. Installation Stellen Sie sicher, dass Go Version 1.23.0 installiert ist. Erstellen Sie di...

FuxiOS

FuxIOS.py v2.0 - CVE-2016-4631 Exploit PoC � Nota Personale 2025 ¿Perché pubblico questo ora? Mentre rivedevo vecchi dischi rigidi e repository dimenticati, mi sono imbattuto in questo script che ho scritto anni fa quando stavo appena iniziando la mia carriera nella cybersecurity. Era un'epoca...

cve-2020-9375

CVE-2020-9375 I dispositivi TP-Link Archer C50 V3 precedenti alla Build 200318 Rel. 62209 consentono a un attaccante remoto di causare un denial of service tramite un'intestazione HTTP manipolata contenente un campo Referer inaspettato. Titolo Exploit : TP-Link Archer C50 v3 Denial of Service Dat...

PoC---CVE-2018-6389

PoC - CVE-2018-6389 Proof of Concept della vulnerabilità CVE-2018-6389 su Wordpress 4.9.2...

CVE-2024-39930-PoC

CVE-2024-39930-PoC Codice di exploit per CVE-2024-39930 RCE del server SSH di gogs...

CVE-2023-43177

CVE-2023-43177 CrushFTP = 10.5.1 Esecuzione di codice remoto Questo repository contiene l'exploit proof-of-concept dell'RCE sviluppato durante la ricerca...

EUVD-2026-66133

A stack-based buffer overflow vulnerability exists in BlueZ, the Linux Bluetooth protocol stack. A remote user within Bluetooth radio range can send a specially crafted Extended Inquiry Response EIR packet that causes a buffer overflow when the target device performs Bluetooth discovery. This...

net/mail: golang: Go net/mail: Denial of Service via crafted email inputs

A flaw was found in the net/mail package of the Go programming language. An attacker could provide specially crafted inputs to the ParseAddress, ParseAddressList, or ParseDate functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service DoS for...

net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame

A flaw was found in the HTTP/2 protocol implementation within the Go standard library golang.org/x/net and net/http/internal/http2. A remote attacker can exploit this vulnerability by sending a specially crafted HTTP/2 SETTINGS frame with the SETTINGSMAXFRAMESIZE parameter set to zero. This...

net/mail: golang: net/mail: Denial of Service via pathological email address parsing

A flaw was found in the net/mail package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the consumePhrase function, it can lead to excessive resource consumption due to quadratic...

Important: Red Hat Security Advisory: Red Hat build of MicroShift 4.16.69 security update

Red Hat build of MicroShift release 4.16.69 is now available with updates to packages and images that include a security update. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

kernel: fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath

A flaw was found in the Linux kernel's CIFS Common Internet File System client. When the cifssanitizeprepath function processes specially crafted input, such as an empty string or a string containing only delimiters, it can attempt to read data beyond its allocated memory buffer. This out-of-boun...

kernel: dm log: fix out-of-bounds write due to region_count overflow

A flaw was found in the Linux kernel's device-mapper log dm log component. A local attacker could exploit an integer overflow vulnerability where a 64-bit value is truncated to 32 bits, leading to undersized memory allocations. This allows for out-of-bounds writes to kernel memory during log...

kernel: net: atm: fix crash due to unvalidated vcc pointer in sigd_send()

A flaw was found in the Linux kernel's Asynchronous Transfer Mode ATM networking component. A local attacker, by acting as a malicious signaling daemon, could send a specially crafted message containing an unvalidated pointer. This unvalidated pointer would be directly used by the kernel, leading...

Important: Red Hat Security Advisory: kernel-rt security, bug fix, and enhancement update

An update for kernel-rt is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

kernel: net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels

A flaw was found in the Linux kernel's IPv6 networking implementation, specifically within the seg6 and rpl lwtunnels. A race condition can occur when handling destination cache entries, where a NOREF no reference destination object is used after it has been freed. This use-after-free vulnerabili...

CVE-2024-2961_poc

Questo repository non contiene un README...

CVE-2019-19012

CVE-2019-19012 regexec.c में searchinrange फंक्शन में एक पूर्णांक अतिप्रवाह integer overflow Oniguruma 6.x में 6.9.4rc2 से पहले के संस्करणों में सीमा-से-बाहर पढ़ने out-of-bounds read की ओर ले जाता है, जिसमें इस पढ़ने का ऑफसेट हमलावर के नियंत्रण में होता है। यह केवल 32-बिट संकलित संस्करण को प्रभाव...