CVE-2026-0049

CVE-2026-0049 — Android DNG zero-click DoS dngsdk MapTable add-overflow Materiale completo di ricerca e PoC. Analisi narrativa: 🇮🇹BLOG.md · 🇬🇧BLOG.en.md. Bug : overflow di interi unsigned su fAreaSpec.Plane + fAreaSpec.Planes in dngopcodeMapTable::ProcessArea dngsdk/source/dngmiscopcodes.cpp:388...

CVE-2021-3156-Project

CVE-2021-3156 — Baron Samedit Overflow del Buffer Basato su Heap in sudo → Escalation Locale dei Privilegi Dipartimento di Cybersecurity ITSOLERA | Tirocinio Red Team 2026 root@kitploit: ██████╗ █████╗ ██████╗ ██████╗ ███╗ ██╗ ███████╗ █████╗ ███╗ ███╗███████╗██████╗ ██╗████████╗...

CVE-2026-22013-Hardware-Wallet-USB-Descriptor-Buffer-Overflow

CVE-2026-22013 – Pufferüberlauf im USB-Deskriptor einer Hardware-Wallet Programmcode C-Firmware-Simulation root@kitploit: // hwwalletusb.c - USB descriptor parsing with fixed buffer include void handleusbsetupchar data, int len char descriptor32; if len 0 && data0 == 0x06 // GETDESCRIPTOR // Copy...

CVE-2026-23002-5G-NAS-Message-Buffer-Overflow-in-gNodeB

CVE-2026-23002 – 5G-NAS-Nachrichten-Pufferüberlauf in gNodeB Programmcode C-Simulation root@kitploit: // gnbnassim.c - Simulated 5G gNodeB parsing NAS Registration Request include include include define MAXIESIZE 128 void processregistrationrequestuint8t nasmsg, uint16t length uint8t...

CVE-2026-11105-Stack-Buffer-Overflow-in-Custom-Base64-Decoder

CVE-2026-11105 – Estouro de Buffer na Pilha no Decodificador Base64 Personalizado Código do Programa C root@kitploit: // base64vuln.c - Vulnerable Base64 decoder include include include int base64decodeconst char in, sizet inlen, char out, sizet outlen static const char table =...

icicle

Analisi dei crash MSP430 Crash trovati nei binari MSP430 da Icicle. | Target| Descrizione ---|---|--- I03| Goodwatch| Confronto errato durante la scrittura su dmesgbuffer I04| Goodwatch| Lunghezza zero del messaggio I05| Goodwatch| Overflow RNG I06| Goodwatch| Accesso fuori dai limiti nella...

CVE-2026-6789-Stack-Buffer-Overflow-in-Embedded-TLS-Certificate-Parser

9. CVE-2026-6789 – Overflow del buffer di stack nel parser di certificati TLS integrato Panoramica Una popolare libreria TLS leggera simulata contiene un overflow del buffer di stack durante il parsing delle estensioni Subject Alternative Name dei certificati X.509 con un campo di lunghezza...

Google-Nest-Cam-Bug-Disclosures

Google-Nest-Cam-Bug-Disclosures Modelli interessati: Dropcam Pro, modelli Nest Cam Indoor/Outdoor Ultima build interessata: 205-600052 Build parzialmente corretta: 205-600055 AGGIORNAMENTO L'ultima versione del firmware 205-600055 non risolve la vulnerabilità di dissociazione WiFi nella Dropcam...

CVE-2026-2222-MQTT-Broker-CONNECT-Packet-Heap-Overflow

CVE-2026-2222 – Heap-Überlauf im CONNECT-Paket des MQTT-Brokers Programmcode C + Python root@kitploit: // mqttbrokersim.c - Simulated vulnerable MQTT broker include include include struct mqttconnect char protocolname8; uint8t protocollevel; uint8t flags; uint16t keepalive; // remaining length...

CVE-2019-18634-writeup

Analyse des CVE-2019-18634 https://www.exploit-db.com/exploits/47995 Sudo 1.8.25p - 'pwfeedback' Pufferüberlauf PoC Die pwfeedback-Option von Sudo kann verwendet werden, um visuelles Feedback zu geben, wenn der Benutzer sein Passwort eingibt. Bei jedem Tastendruck wird ein Sternchen gedruckt. Die...

CVE-2025-65018-Heap-buffer-overflow-in-libpng-ps4-ps5-

Poc per CVE-2025-65018-Heap-buffer-overflow-in-libpng-ps4-ps5- Uso: 1-premi il pulsante share e fai uno screenshot 2-con ftp vai al percorso:/user/avcontents/photo/NPXS20001/NPXS20001/XXX/ troverai lo screenshot che hai fatto. 3-copialo sul pc ed eseguilo con makepng.py, produrrà poc.png...

mediatek-wlan-heap-overflow-cve-2026-20452-filogic-router-rce

CVE-2026-20452 — MediaTek WLAN AP Heap Overflow PoC Prova di concetto per CVE-2026-20452, un overflow del buffer heap nel driver WLAN Access Point di MediaTek. Vulnerabilità CVE : CVE-2026-20452 CVSS : 8.0 HIGH CWE : CWE-122 — Heap-based Buffer Overflow Sottocomponente : wlan driver AP Vettore...

CVE-2022-34913

وصف CVE-2022-34913 يعاني md2roff 1.7 من تجاوز سعة المخزن المؤقت القائم على المكدس عبر ملف Markdown يحتوي على عدد كبير من الأحرف المتتالية التي تتم معالجتها. إعادة الإنتاج لإعادة إنتاج الثغرة، يجب علينا تنزيل نسخة معرضة للثغرة من md2roff الإصدار 1.7: root@kitploit: git clone...

CVE-2017-7184

CVE-2017-7184 – Escalation dei privilegi nel kernel Linux XFRM senza sudo Panoramica Questo repository contiene un exploit proof-of-concept di escalation locale dei privilegi per CVE-2017-7184 , una vulnerabilità del kernel Linux nel sottosistema netlink XFRM IPsec. L'exploit dimostra come un...

CVE-2023-25234_Tenda_AC6_stack_overflow

Questo repository non contiene un README...

CVE-2021-3156

CVE-2021-3156 PoC Introdução Este é um exploit para o CVE-2021-3156 vulnerabilidade no sudo apelidada de Baron Samedit by Qualys. Modo de Uso build: root@kitploit: $ make lista de alvos: root@kitploit: $ ./sudo-hax-me-a-sandwich run: root@kitploit: $ ./sudo-hax-me-a-sandwich modo manual:...

CVE-2025-15467

CVE-2025-15467 OpenSSL CMS AuthEnvelopedData 解析におけるスタックバッファオーバーフロー 脆弱性 evpciphergetasn1aeadparams が CMS AuthEnvelopedData コンテンツ内の AEAD 暗号パラメータ（例: AES-GCM）を解析する際に、スタックバッファオーバーフローが存在します。過大なサイズの IV が 16 バイトのスタックバッファをオーバーフローさせ、サービス拒否および潜在的なリモートコード実行を引き起こす可能性があります。 影響を受けるバージョン...

nginxpwner

Nginxpwner Nginxpwner is a simple tool to look for common Nginx misconfigurations and vulnerabilities. Install: root@kitploit: cd /opt git clone https://github.com/stark0de/nginxpwner cd nginxpwner chmod +x install.sh ./install.sh Install using Docker root@kitploit: git clone...

nginx-cve-2026-42945-check

Script di controllo locale per NGINX CVE-2026-42945 Lingue: Cinese | Inglese Questo repository fornisce due script di controllo standalone per verificare localmente su server Linux / Windows se Nginx, OpenResty e Tengine presentano rischi relativi a CVE-2026-42945. Gli script eseguono solo raccol...

CVE-2017-9544

CVE-2017-9544 Exploit per buffer overflow basato su SEH in Easy Chat Server CVE-2017-9544 Basato su: pwntools payload msfvenom / reversetcp ropper x64dbg App vulnerabile disponibile su https://www.exploit-db.com/exploits/42155 Setup Imposta l'IP della vittima su 192.168.15.100 e avvia Easy Chat...