cve-2018-8120

CVE-2018-8120 win7 x64 참조 https://github.com/unamer/CVE-2018-8120 https://github.com/FuzzySecurity/PSKernel-Primitives...

CVE-2024-6768

CVE-2024-6768: 입력에서 지정된 수량의 부적절한 검증으로 인해 CLFS.sys에서 복구 불가능한 상태가 발생하여 BSoD 유발 소개: CVE-2024-6768은 Windows의 CLFSCommon Log File System 드라이버CLFS.sys에서 입력 데이터의 지정된 수량에 대한 부적절한 검증으로 인해 발생하는 취약점입니다. 이 결함으로 인해 복구 불가능한 불일치가 발생하여 KeBugCheckEx 함수가 호출되고 Blue Screen of DeathBSoD가 발생합니다. 이 문제는 모든 업데이트가 적용된 상태에...

hulk

Hulk DoS 도구 HULK DoS 도구를 Python에서 Go 언어로 포팅했습니다. 원본 Python 유틸리티는 Barry Shteiman http://www.sectorix.com/2012/05/17/hulk-web-server-dos-tool/이 만들었습니다. 코드를 있는 그대로 빠르고 대충 포팅했습니다. 원래 함수 이름과 로직은 대부분 그대로 유지했습니다. Python 버전과의 주요 차이점은 Golang의 동시성 아키텍처, 즉 고루틴goroutines에 있습니다. hulk.py는 연결 풀의 각 연결마다 새로운 스레드를...

CVE-2026-102916 Reachable assertion in illumos bhyve REP string instruction emulation allows guest to panic host

A reachable assertion in the illumos bhyve instruction emulator allows a guest to panic the host. When emulating a REP-prefixed MOVS or STOS instruction that accesses guest MMIO, vieemulatemovs and vieemulatestos in usr/src/uts/intel/io/vmm/vmminstructionemul.c do not clear the VIESREPEAT status...

CVE-2026-102916 Reachable assertion in illumos bhyve REP string instruction emulation allows guest to panic host

A reachable assertion in the illumos bhyve instruction emulator allows a guest to panic the host. When emulating a REP-prefixed MOVS or STOS instruction that accesses guest MMIO, vieemulatemovs and vieemulatestos in usr/src/uts/intel/io/vmm/vmminstructionemul.c do not clear the VIESREPEAT status...

CVE-2026-102916

The illumos bhyve instruction emulator contains a reachable assertion vulnerability in the emulation of REP-prefixed MOVS and STOS instructions. Specifically, the functions vie_emulate_movs() and vie_emulate_stos() in usr/src/uts/intel/io/vmm/vmm_instruction_emul.c fail to clear the VIES_REPEAT s...

EUVD-2026-95796

A reachable assertion in the illumos bhyve instruction emulator allows a guest to panic the host. When emulating a REP-prefixed MOVS or STOS instruction that accesses guest MMIO, vieemulatemovs and vieemulatestos in usr/src/uts/intel/io/vmm/vmminstructionemul.c do not clear the VIESREPEAT status...

cve-2020-1337-poc

cve-2020-1337-poc CVE-2020-1337를 위한 PoC Windows Print Spooler 권한 상승 이 버그를 발견한 모든 연구자에게 감사드립니다. 참고: https://voidsec.com/cve-2020-1337-printdemon-is-dead-long-live-printdemon/ 코드 참조: https://github.com/sailay1996/WerTrigger https://github.com/BC-SECURITY/Invoke-PrintDemon @404death...

Wild-Wild-WiFi

Wild-Wild-WiFi Wild Wild WiFi 자세한 정보는 다음에서 확인할 수 있습니다: http://www.elladodelmal.com/2018/03/wild-wild-wifi-dancing-with-wolves-1.html 논문은 다음에서 읽을 수 있습니다: https://es.slideshare.net/elevenpaths/wild-wild-wifi-dancing-with-wolves 본 소프트웨어는 "있는 그대로" 제공되며, 상품성, 특정 목적에의 적합성 및 비침해에 대한 보증을 포함하되 이에 국한되지 않는...

CVE-2025-5777

CVE-2025-5777 일명 CitrixBleed 2은 Citrix Gateway 로그인 프로세스에서의 OOB 읽기입니다. 이것은 취약한 Citrix Gateway 인스턴스로부터 메모리 데이터를 획득하여 쿠키/자격 증명 도난으로 이어질 수 있는 OOBCVE-2025-5777를 악용한 개념 증명입니다. 사용법 스크립트를 사용할 때 venv를 사용하는 것을 적극 권장합니다. usage: main.py -h -t THREADS -o OUTPUT url positional arguments: url target URL options...

CVE-2024-40457-PoC

CVE-2024-40457-PoC CVE PoC 2024-40457 -g 플래그 조심, 사진을 확인하세요...

EUVD-2026-95795

Open5GS through 2.8.0 contains a reachable assertion vulnerability in mmegnhandlesgsncontextrequest that allows remote unauthenticated attackers to crash the MME via malformed SGSN Address IEs. Attackers sending GTPv1-C traffic from a configured SGSN address with a known UE IMSI or P-TMSI can...

EUVD-2026-95794

Open5GS through 2.8.0 contains a heap out-of-bounds read vulnerability in ogspfcpparsedroppeddltrafficthreshold that allows remote unauthenticated attackers to read past IE buffers via short IEs. Attackers can send PFCP Session Establishment or Modification Requests to the UPF on UDP port 8805 wi...

CVE-2026-108103

Versions of Open5GS through 2.8.0 are vulnerable to a heap out-of-bounds read in the ogs_pfcp_parse_dropped_dl_traffic_threshold() function. This flaw allows remote unauthenticated attackers to read past IE buffers by sending PFCP Session Establishment or Modification Requests to the UPF on UDP p...

CVE-2026-108103 Open5GS through 2.8.0 Heap Out-of-Bounds Read via PFCP Dropped DL Traffic Threshold IE

Open5GS through 2.8.0 contains a heap out-of-bounds read vulnerability in ogspfcpparsedroppeddltrafficthreshold that allows remote unauthenticated attackers to read past IE buffers via short IEs. Attackers can send PFCP Session Establishment or Modification Requests to the UPF on UDP port 8805 wi...

CVE-2026-108102 Open5GS through 2.8.0 Heap Out-of-Bounds Read via PFCP Volume Measurement IE

Open5GS through 2.8.0 contains a heap out-of-bounds read vulnerability in ogspfcpparsevolumemeasurement in lib/pfcp/types.c that allows remote unauthenticated attackers to read past IE buffers. Attackers can send a PFCP Session Report Request to the SMF on UDP port 8805 with a short, all-flags...

EUVD-2026-95793

Open5GS through 2.8.0 contains a heap out-of-bounds read vulnerability in ogspfcpparsevolumemeasurement in lib/pfcp/types.c that allows remote unauthenticated attackers to read past IE buffers. Attackers can send a PFCP Session Report Request to the SMF on UDP port 8805 with a short, all-flags...

CVE-2026-108102 Open5GS through 2.8.0 Heap Out-of-Bounds Read via PFCP Volume Measurement IE

Open5GS through 2.8.0 contains a heap out-of-bounds read vulnerability in ogspfcpparsevolumemeasurement in lib/pfcp/types.c that allows remote unauthenticated attackers to read past IE buffers. Attackers can send a PFCP Session Report Request to the SMF on UDP port 8805 with a short, all-flags...

CVE-2026-108102

The Open5GS project (versions through 2.8.0 ) contains a heap out-of-bounds read vulnerability within the ogs_pfcp_parse_volume_measurement() function in lib/pfcp/types.c. This flaw allows remote unauthenticated attackers to read past Information Element (IE) buffers by sending a PFCP Session Rep...

CVE-2026-108102 Open5GS through 2.8.0 Heap Out-of-Bounds Read via PFCP Volume Measurement IE

Open5GS through 2.8.0 contains a heap out-of-bounds read vulnerability in ogspfcpparsevolumemeasurement in lib/pfcp/types.c that allows remote unauthenticated attackers to read past IE buffers. Attackers can send a PFCP Session Report Request to the SMF on UDP port 8805 with a short, all-flags...