CVE-2026-82414

BACnet Stack is a BACnet open source protocol stack C library for embedded systems. From versions 1.4.0 to before 1.4.6, 1.5.0 to before 1.5.1, and 1.6.0 to before 1.6.1, the BACnet MS/TP receive path decodes COBS frames into an output pointer inside the same fixed input buffer, but passes the fu...

EUVD-2026-125544

picoquic before 2026.11.05.3e2e3d3 contains an integer overflow vulnerability in picoquicdecodetimestampframe that allows remote QUIC peers to corrupt stored timestamps by sending oversized TIMESTAMP values. Attackers on connections negotiating the TIMESTAMP extension can send large values shifte...

EUVD-2026-125553

C-Kermit before 11.1.515 contains a heap buffer overflow vulnerability in putsrv in ckcfns.c that allows malicious peers to write past the srvcmd buffer by sending crafted packets. Attackers can use Kermit repeat-count compression in server command, GET, or file-header packets to write...

EUVD-2026-125556

C-Kermit 8.0.200 before 11.1.515 contains a buffer overflow vulnerability in getreply in ckcftp.c that allows malicious FTP servers to overwrite client memory by sending overlong security replies. Attackers controlling or intercepting an FTP server can send long PBSZ replies after AUTH TLS, or lo...

EUVD-2026-125557

C-Kermit 6.0.192 before 11.1.515 contains a buffer overflow vulnerability in tnsnenv in ckctel.c that allows malicious Telnet servers to corrupt client memory via crafted NEW-ENVIRON SEND subnegotiation. Malicious or machine-in-the-middle servers can send oversized variable names before...

EUVD-2026-125436

A buffer overflow in handling EDID Display-Range descriptors in X.Org xwayland before 24.1.15 and X Server before 21.1.26 could be used by malicious monitors to crash the x server or execute cote...

CVE-2017-11882

CVE-2017-11882 Overview From the perspective of exploit effectiveness, it can kill all versions of Office from 2003 to 2016, and the entire attack environment is very simple to build. This vulnerability is caused by the Equation Editor in Office software. Because the editor process does not...

initroot

Exploiting CVE-2016-10277 More information at: https://alephsecurity.com/2017/06/07/initroot-moto/ If you just want to check if your device is vulnerable, it might be quicker if you just flash stock ramdisk without any modifications. If it's your case, just look for initroot--STOCK.cpio.gz...

android-gadget

android-gadget Summary Certain revisions of the Linux kernel used in Android are affected by issue CVE-2021-39685. Detailed information and a POC for CVE-2021-39685 may be found in the inspector-gadget repository. This repository includes POC targeting few Android specific USB gadgets including:...

stackflow

stackflow Universal stack-based buffer overfow exploitation tool Usage usage: ./stackflow.py OPTIONS optional arguments: -h, --help show this help message and exit -r RHOST, --rhost RHOST rhost -p RPORT, --rport RPORT rport -c CMDS, --cmds CMDS commands to send to server before overflow -v VULNCM...

CVE-2025-0282

PoC for CVE-2025-0282 A remote unauthenticated stack based buffer overflow affecting Ivanti Connect Secure, Ivanti Policy Secure, and Ivanti Neurons for ZTA gateways Overview This is a proof of concept exploit to demonstrate exploitation of CVE-2025-0282, and is based upon the exploitation strate...

CVE-2025-38676

CVE-2025-38676 — Linux Kernel ≤ 6.17-rc2 AMD IOMMU stack buffer overflow This repo provides safe, non-exploit PoC resources to study CVE-2025-38676: Info-gathering + safety tools QEMU boot harness to exercise long kernel cmdline permutations Hardening guidance GRUB/UEFI/Secure Boot; baseline...

cve-2022-42475

FortiOS SSL-VPN buffer overflow vulnerability cve-2022-42475 https://nvd.nist.gov/vuln/detail/CVE-2022-42475 POC code to exploit the Heap overflow in Fortinet's SSLVPN daemon Notes This is a quick and dirty POC that will probably not work anywhere unless you are extremely lucky. It is version...

CVE-2026-88772-POC

CVE-2026-88772 - Citrix NetScaler ADC/Gateway DTLS memory overflow RCE/DoS Overview Utility for remote code execution RCE and denial-of-service DoS against Citrix NetScaler ADC and Gateway appliances. Leverages the DTLS memory overflow vulnerability CWE-119 to achieve unauthenticated remote code...

CVE-2026-32710

CVE-2026-32710 Heap buffer overflow in MariaDBJSONSCHEMAVALID → persistent privilege escalation → UDF RCE | ---|--- Affected| MariaDB 11.4.x confirmed on 11.4.9 Bug| OOB write in jsongetnormalizedstring — strncpy into 128-byte DYNAMICSTRING with no bounds check Impact| SELECT-only user → ALL...

CVE-2019-18634

CVE-2019-18634 ⚠️ This code has only been tested on sudo 1.8.25. The bug impacts 1.8.30, but there are differences in character handling that prevent this PoC from executing this does not mitigate the exploitability of the bug. See 1 ⚠️ Functional exploit for CVE-2019-18634, a heap buffer overflow...

CVE-2017-9544

CVE-2017-9544 Exploit for SEH based buffer overflow in Easy Chat Server CVE-2017-9544 Based on: pwntools msfvenom / reversetcp payload ropper x64dbg Vulnerable app available at https://www.exploit-db.com/exploits/42155 Setup Set victim IP to 192.168.15.100 and start Easy Chat Server. Set attacker...

CVE-2026-129122

C-Kermit versions 6.0.192 before 11.1.515 are vulnerable to a buffer overflow in the tn_snenv() function within ckctel.c. This flaw occurs when a malicious or machine-in-the-middle Telnet server sends oversized variable names during a NEW-ENVIRON SEND subnegotiation before authentication. The vul...

CVE-2026-129123

The C-Kermit software (versions 8.0.200 before 11.1.515 ) is vulnerable to a buffer overflow in the getreply() function within ckcftp.c. A malicious or intercepted FTP server can overwrite client memory by sending overlong security replies. Specifically, the overflow occurs in the static reply_bu...

CVE-2026-129126

C-Kermit versions prior to 11.1.515 are susceptible to a heap buffer overflow in the putsrv() function within ckcfns.c. The vulnerability occurs during packet decoding when malicious peers send crafted packets utilizing kermit repeat-count compression in server command, GET, or file-header packet...