CVE-2023-40296

CVE-2023-40296 async-sockets-cpp fino alla versione 0.3.1 contiene una vulnerabilità di buffer overflow off-by-one in static void ReceiveFromUDPSocket udpSocket in udpsocket.hpp, intorno alle righe 160-167. Il buffer overflow interessa tutti i server UDP corrispondenti. Il remote buffer overflow...

Baron-Samedit-Heap-Buffer-Overflow-CVE-2021-3156

Baron-Samedit-Heap-Buffer-Overflow-CVE-2021-3156 Gegen die Schwachstelle anfällige Versionen Die Baron-Samedit-Schwachstelle CVE-2021-3156 betrifft die Legacy-Versionen von sudo 1.8.2 bis 1.8.31p2 und die stabilen Versionen 1.9.0 bis 1.9.5p1. Dieser Heap-basierte Pufferüberlauffehler wurde im Jul...

CVE-2021-3156

CVE-2021-3156 - Heap-basierter Pufferüberlauf in Sudo ⚠️ Nur für Bildungszwecke und autorisierte Sicherheitsforschung Ursprüngliche Exploit-Autoren Sehr dankbar dem ursprünglichen PoC-Autor Qualys Research Team Beschreibung Sudo vor Version 1.9.5p2 enthält einen Off-by-One-Fehler, der zu einem...

cve-2016-6187-poc

PoC per https://duasynt.com/blog/cve-2016-6187-heap-off-by-one-exploit...

cve-2010-1938

🚀 Exploit FTP Off-by-One CVE-2010-1938 Un semplice script Python per testare una vulnerabilità off-by-one nella libreria OPIE CVE-2010-1938. Questa vulnerabilità colpisce alcuni server FTP e può consentire Denial of Service DoS o esecuzione arbitraria di codice. 📜 Descrizione Questo script prende...

cve-2021-3156

CVE-2021-3156 – Baron Samedit Schwachstellenumgebung Erstelle das Image mit der Dockerfile root@kitploit: docker build -t cve-2021-3156:ubuntu2004 . Erstelle einen Container mit dem Image root@kitploit: docker run --rm -it cve-2021-3156:ubuntu2004 /bin/bash Schwachstellenursache In Sudo vor Versi...

CVE-2021-3156

CVE-2021-3156 Sudo vor 1.9.5p2 enthält einen Off-by-One-Fehler, der zu einem Heap-basierten Pufferüberlauf führen kann, der eine Privilegieneskalation zu root über sudoedit -s und ein Befehlszeilenargument ermöglicht, das mit einem einzelnen Backslash-Zeichen endet. Credit: Hinweis von Baron...

CVE-2026-65927

An off-by-one error in the [N] flag of Apache Tomcat's RewriteValve causes rewrite processing to restart at the second rule instead of the first. This can allow an attacker to bypass access control rules that rely on the first rewrite rule being re-evaluated. The issue affects Tomcat 11.0.0-M1 th...

CVE-2026-79148

An off-by-one error in DevTools within Google Chrome prior to 152.0.7977.65 allowed a remote attacker, leveraging social engineering, to potentially read memory inside the sandbox through a crafted Chrome extension. Chromium assigns this a Low security severity. The fix is available in Chrome 152...

OBO

Off-By-One Slide dalle conferenze Off-By-One Guarda tutti i talk Anno ↓| Slide| Playlist YouTube ---|---|--- 2024| Slide del Giorno 1...

CVE-2006-3747

File riguardanti la mia pubblicazione su bugtraq e il primo exploit funzionante per CVE-2006-3747 Apache modrewrite LDAP off-by-one buffer overflow. http://www.securityfocus.com/archive/1/443870 Data di rilascio pubblico del POC/Exploit: 2006-08-20 Autore: Jacobo Avariento Gimeno ID CVE:...

CVE-2022-3602

CVE−2022-3602 Was ist das? Dieses Dokument und Repository ist eine Aufarbeitung von CVE‑2022‑3602, einem Punycode‑Pufferüberlauf‑Problem in OpenSSL. Es ist ein "Anti‑POC" das Problem scheint nicht ausnutzbar zu sein und richtet sich an Leute, die ihre eigenen OpenSSL‑Builds pflegen, und an...

PT-2026-81885

Name of the Vulnerable Software and Affected Versions Apache Tomcat versions 11.0.0-M1 through 11.0.24 Apache Tomcat versions 10.1.0-M1 through 10.1.57 Apache Tomcat versions 9.0.0.M1 through 9.0.120 Apache Tomcat versions 8.5.0 through 8.5.100 Description An off-by-one error in the rewrite valve...

CVE-2026-74598

A flaw was found in the Linux kernel's IPv6 networking stack. An off-by-one error in the validation of the Route Information option length RFC 4191 allows a remote attacker to craft a Router Advertisement RA packet. This crafted packet can cause the kernel to read up to 8 bytes beyond the intende...

SUSE CVE-2026-74598

In the Linux kernel, the following vulnerability has been resolved: ipv6: fix Route Information option length validation rt6routercv validates the Route Information option RFC 4191 length against the prefix length, but both checks are off by one. rinfo-length is the ND option length in units of 8...

CVE-2026-74598

In the Linux kernel, the following vulnerability has been resolved: ipv6: fix Route Information option length validation rt6routercv validates the Route Information option RFC 4191 length against the prefix length, but both checks are off by one. rinfo-length is the ND option length in units of 8...

CVE-2026-74598 ipv6: fix Route Information option length validation

In the Linux kernel, the following vulnerability has been resolved: ipv6: fix Route Information option length validation rt6routercv validates the Route Information option RFC 4191 length against the prefix length, but both checks are off by one. rinfo-length is the ND option length in units of 8...

CVE-2026-74598

CVE-2026-74598 is an out-of-bounds read in the Linux kernel's IPv6 stack, specifically in rt6_route_rcv() handling of the Route Information option (RFC 4191). Both length checks are off by one: the code accepts length >= 2 and length >= 1 where RFC 4191 requires stricter bounds. A remote at...

CVE-2026-74598 ipv6: fix Route Information option length validation

In the Linux kernel, the following vulnerability has been resolved: ipv6: fix Route Information option length validation rt6routercv validates the Route Information option RFC 4191 length against the prefix length, but both checks are off by one. rinfo-length is the ND option length in units of 8...

EUVD-2026-64535

In the Linux kernel, the following vulnerability has been resolved: ipv6: fix Route Information option length validation rt6routercv validates the Route Information option RFC 4191 length against the prefix length, but both checks are off by one. rinfo-length is the ND option length in units of 8...