889223 matches found
EUVD-2026-95807
Xerial snappy-java before 1.1.10.9 contains an unbounded memory allocation vulnerability that allows attackers to exhaust JVM memory by declaring a large uncompressed length in compressed input. Attackers can supply a few crafted bytes to Snappy.uncompress, uncompressString, SnappyInputStream or...
CVE-2026-108106
The Xerial snappy-java library before version 1.1.10.9 is vulnerable to an unbounded memory allocation flaw. An attacker can provide crafted bytes to the Snappy.uncompress , uncompressString , SnappyInputStream , or SnappyFramedInputStream functions, declaring a large uncompressed length within a...
CVE-2026-108106 Xerial snappy-java before 1.1.10.9 Unbounded Memory Allocation Denial of Service
Xerial snappy-java before 1.1.10.9 contains an unbounded memory allocation vulnerability that allows attackers to exhaust JVM memory by declaring a large uncompressed length in compressed input. Attackers can supply a few crafted bytes to Snappy.uncompress, uncompressString, SnappyInputStream or...
libput_user_exploit
주의 !!! 이 익스플로잇은 0으로 3바이트를 추가로 기록합니다. 하지만 ptmx.fsync 핸들러를 설치하고 ueventhelper 문자열을 수정하기에는 충분합니다...
CVE-2025-31486
CVE-2025-31486-PoC.py url 이미지 취약점 재현 및 특정 환경 구성에 대한 자세한 내용은 다음을 참조하세요：https://chenchena.blog.csdn.net/article/details/147150357?spm=1001.2014.3001.5502...
FreeRDP-Out-of-Bounds-Read-CVE-2024-32459-
FreeRDP-Out-of-Bounds-Read-CVE-2024-32459- FreeRDP-Out-of-Bounds-Read-CVE-2024-32459 취약점은 RDPRemote Desktop Protocol 구현에 사용되는 오픈소스 프로그램인 FreeRDP에서 발견된 보안 결함입니다. 이 취약점은 입력 처리 과정의 약점으로 인해 발생하며, 공격자가 특수하게 조작된 데이터를 전송하여 대상 시스템에서 임의 코드 실행을 유발할 수 있습니다. FreeRDP 350 또는 2116 이전 버전은 경계 밖 읽기out-of-bounds...
CVE-2026-104115 Stack buffer overflow in illumos reparsed nfs-basic plugin allows local users to crash the daemon
A stack-based buffer overflow in the illumos reparse point daemon reparsed allows a local user to crash the daemon. getfslocations in usr/src/cmd/fs.d/nfs/rpbasic/libnfsbasic.c, part of the nfs-basic reparse plugin, copies the host and path components of a reparse string into a fixed 1024-byte...
log4shell-rmi-poc
log4shell-rmi-poc Java-RMI를 통한 Log4j 취약점CVE-2021-44228의 개념 증명PoC spring-boot-starter-log4j2의 Log4j 2.5.7을 사용합니다. 요구 사항: Java 8JDK 1.8.025 및 Java 11JDK 11.0.1에서 테스트되었습니다. POC 실행 방법 1. 저장소 클론: git clone https://github.com/Labout/log4shell-rmi-poc.git 2. 공격자 RMI 서버 시작 cd Log4jshellrmiserver ./mvnw...
BokuLoader
BokuLoader : Cobalt Strike 반사 로더 Cobalt Strike의 회피 기능을 재현, 통합 및 향상시키는 것을 목표로 하는 개념 증명 사용자 정의 반사 로더 UDRL입니다! 기여자: 기여자| 트위터| 주요 기여 ---|---|--- Bobby Cooke| @0xBoku| 프로젝트 원작자 및 유지보수자 Santiago Pecin| @s4ntiagop| 반사 로더 주요 개선 Chris Spehn| @ConsciousHacker| 어그레서 스크립팅 Joshua Magri| @passthehashbrwn| IAT ...
CVE-2015-6637
CVE-2015-6637 Edward Hung의 PoC PoC 실행 중에는 기기를 백업하십시오 https://source.android.com/security/bulletin/2016-01-01.html...
rails-exploit-cve-2013-0156
== CVE-2013-0156 및 CVE-2013-0155에 대한 Rails PoC 익스플로잇 원격 코드 실행 익스플로잇이 포함된 Rails 3.2.10 애플리케이션을 부트스트래핑했습니다. 참고: https://github.com/ronin-ruby/ronin-ruby.github.com/blob/rails-pocs/blog/posts/2013-01-09-rails-pocs.md === 설정 Gem 종속성을 설치하고 포트 3002에서 앱을 실행하세요 $ bundle install $ rake db:migrate $ rails ...
CVE-2026-104112 Missing release of passed file descriptors in illumos nscd allows local users to exhaust kernel memory
A missing release of resources in the illumos name service cache daemon nscd allows a local user to exhaust kernel memory. The nscd door server procedure, switcher in usr/src/cmd/nscd/nscdfrontend.c, does not close file descriptors that are passed with a door call but not used by the request, and...
CVE-2026-104112
The illumos name service cache daemon (nscd ) is vulnerable to a kernel memory exhaustion flaw due to a missing release of file descriptors . Specifically, the switcher() procedure in usr/src/cmd/nscd/nscd_frontend.c fails to close descriptors passed via a door call that are not used by the reque...
EUVD-2026-95801
A missing release of resources in the illumos name service cache daemon nscd allows a local user to exhaust kernel memory. The nscd door server procedure, switcher in usr/src/cmd/nscd/nscdfrontend.c, does not close file descriptors that are passed with a door call but not used by the request, and...
GenEtherExploit
EN GenEtherExploit は、macOS の脆弱性 CVE-2023-40404 に対する Proof-of-Concept（PoC）エクスプロイトです。この PoC は IOKit API を利用して IOUserEthernetResource ネットワークサービスとやり取りし、システムのネットワークインターフェースを操作します。このエクスプロイトの目的は、イーサネットコントローラを作成および操作することで、脆弱性のある macOS システムで潜在的なカーネルパニックを実証することです。 免責事項...
CVE-2024-27815
CVE-2024-27815 XNU 커널 버퍼 오버플로. xnu-10002.1.13에서 도입되었고, xnu-10063.121.3에서 수정됨. 분석 글: https://jprx.io/cve-2024-27815 gcc TURPENTINE.c -o TURPENTINE ./TURPENTINE 해시 $ sha256sum TURPENTINE.c f7160a6ad7d52f32d64b86cf3006c98a217954d80c3fc71a8f27595e227d0fa0 TURPENTINE.c 해시를 X에 2024년 2월 17일에 게시함...
CVE-2026-94064
Deserialization of Untrusted Data vulnerability in BuddhaThemes Neo | Barber Shop WordPress Theme neocut allows Object Injection.This issue affects Neo | Barber Shop WordPress Theme: from n/a through 3.5...
CVE-2026-94065
Deserialization of Untrusted Data vulnerability in BuddhaThemes ColorFolio colorit allows Object Injection.This issue affects ColorFolio: from n/a through 1.3...
CVE-2026-108063
A flaw was found in libhangul. When parsing Hanja dictionary files, the library fails to verify that an entry contains a valid value alongside its key. By providing a specially crafted dictionary file to an application that queries it, an attacker can trigger an unexpected application crash,...