CVE-2026-0049

CVE-2026-0049 — Android DNG zero-click DoS dngsdk MapTable add-overflow Materiale completo di ricerca e PoC. Analisi narrativa: 🇮🇹BLOG.md · 🇬🇧BLOG.en.md. Bug : overflow di interi unsigned su fAreaSpec.Plane + fAreaSpec.Planes in dngopcodeMapTable::ProcessArea dngsdk/source/dngmiscopcodes.cpp:388...

CVE-2021-3156-Project

CVE-2021-3156 — Baron Samedit Overflow del Buffer Basato su Heap in sudo → Escalation Locale dei Privilegi Dipartimento di Cybersecurity ITSOLERA | Tirocinio Red Team 2026 root@kitploit: ██████╗ █████╗ ██████╗ ██████╗ ███╗ ██╗ ███████╗ █████╗ ███╗ ███╗███████╗██████╗ ██╗████████╗...

CVE-2026-22013-Hardware-Wallet-USB-Descriptor-Buffer-Overflow

CVE-2026-22013 – Pufferüberlauf im USB-Deskriptor einer Hardware-Wallet Programmcode C-Firmware-Simulation root@kitploit: // hwwalletusb.c - USB descriptor parsing with fixed buffer include void handleusbsetupchar data, int len char descriptor32; if len 0 && data0 == 0x06 // GETDESCRIPTOR // Copy...

icicle

Analisi dei crash MSP430 Crash trovati nei binari MSP430 da Icicle. | Target| Descrizione ---|---|--- I03| Goodwatch| Confronto errato durante la scrittura su dmesgbuffer I04| Goodwatch| Lunghezza zero del messaggio I05| Goodwatch| Overflow RNG I06| Goodwatch| Accesso fuori dai limiti nella...

CVE-2026-6789-Stack-Buffer-Overflow-in-Embedded-TLS-Certificate-Parser

9. CVE-2026-6789 – Overflow del buffer di stack nel parser di certificati TLS integrato Panoramica Una popolare libreria TLS leggera simulata contiene un overflow del buffer di stack durante il parsing delle estensioni Subject Alternative Name dei certificati X.509 con un campo di lunghezza...

Google-Nest-Cam-Bug-Disclosures

Google-Nest-Cam-Bug-Disclosures Modelli interessati: Dropcam Pro, modelli Nest Cam Indoor/Outdoor Ultima build interessata: 205-600052 Build parzialmente corretta: 205-600055 AGGIORNAMENTO L'ultima versione del firmware 205-600055 non risolve la vulnerabilità di dissociazione WiFi nella Dropcam...

CVE-2026-2222-MQTT-Broker-CONNECT-Packet-Heap-Overflow

CVE-2026-2222 – Heap-Überlauf im CONNECT-Paket des MQTT-Brokers Programmcode C + Python root@kitploit: // mqttbrokersim.c - Simulated vulnerable MQTT broker include include include struct mqttconnect char protocolname8; uint8t protocollevel; uint8t flags; uint16t keepalive; // remaining length...

CVE-2019-18634-writeup

Analyse des CVE-2019-18634 https://www.exploit-db.com/exploits/47995 Sudo 1.8.25p - 'pwfeedback' Pufferüberlauf PoC Die pwfeedback-Option von Sudo kann verwendet werden, um visuelles Feedback zu geben, wenn der Benutzer sein Passwort eingibt. Bei jedem Tastendruck wird ein Sternchen gedruckt. Die...

CVE-2025-65018-Heap-buffer-overflow-in-libpng-ps4-ps5-

Poc per CVE-2025-65018-Heap-buffer-overflow-in-libpng-ps4-ps5- Uso: 1-premi il pulsante share e fai uno screenshot 2-con ftp vai al percorso:/user/avcontents/photo/NPXS20001/NPXS20001/XXX/ troverai lo screenshot che hai fatto. 3-copialo sul pc ed eseguilo con makepng.py, produrrà poc.png...

mediatek-wlan-heap-overflow-cve-2026-20452-filogic-router-rce

CVE-2026-20452 — MediaTek WLAN AP Heap Overflow PoC Prova di concetto per CVE-2026-20452, un overflow del buffer heap nel driver WLAN Access Point di MediaTek. Vulnerabilità CVE : CVE-2026-20452 CVSS : 8.0 HIGH CWE : CWE-122 — Heap-based Buffer Overflow Sottocomponente : wlan driver AP Vettore...

CVE-2022-34913

وصف CVE-2022-34913 يعاني md2roff 1.7 من تجاوز سعة المخزن المؤقت القائم على المكدس عبر ملف Markdown يحتوي على عدد كبير من الأحرف المتتالية التي تتم معالجتها. إعادة الإنتاج لإعادة إنتاج الثغرة، يجب علينا تنزيل نسخة معرضة للثغرة من md2roff الإصدار 1.7: root@kitploit: git clone...

CVE-2017-7184

CVE-2017-7184 – Escalation dei privilegi nel kernel Linux XFRM senza sudo Panoramica Questo repository contiene un exploit proof-of-concept di escalation locale dei privilegi per CVE-2017-7184 , una vulnerabilità del kernel Linux nel sottosistema netlink XFRM IPsec. L'exploit dimostra come un...

CVE-2023-25234_Tenda_AC6_stack_overflow

Questo repository non contiene un README...

CVE-2025-15467

CVE-2025-15467 OpenSSL CMS AuthEnvelopedData 解析におけるスタックバッファオーバーフロー 脆弱性 evpciphergetasn1aeadparams が CMS AuthEnvelopedData コンテンツ内の AEAD 暗号パラメータ（例: AES-GCM）を解析する際に、スタックバッファオーバーフローが存在します。過大なサイズの IV が 16 バイトのスタックバッファをオーバーフローさせ、サービス拒否および潜在的なリモートコード実行を引き起こす可能性があります。 影響を受けるバージョン...

nginx-cve-2026-42945-check

Script di controllo locale per NGINX CVE-2026-42945 Lingue: Cinese | Inglese Questo repository fornisce due script di controllo standalone per verificare localmente su server Linux / Windows se Nginx, OpenResty e Tengine presentano rischi relativi a CVE-2026-42945. Gli script eseguono solo raccol...

CVE-2017-9544

CVE-2017-9544 Exploit per buffer overflow basato su SEH in Easy Chat Server CVE-2017-9544 Basato su: pwntools payload msfvenom / reversetcp ropper x64dbg App vulnerabile disponibile su https://www.exploit-db.com/exploits/42155 Setup Imposta l'IP della vittima su 192.168.15.100 e avvia Easy Chat...

CVE-2008-4654

CVE-2008-4654 VideoLAN VLC media player 0.9.4 Media Player ty.c Pufferüberlauf Diff...

CVE-2005-0575-knet-exploit

CVE-2005-0575 KNet Web Server 1.04b Remote Buffer Overflow SEH Exploit para x86 Windows XP SP3, este exploit precisa de alguns ajustes! edite o código antes de executar! feito no passado, esqueci quando fiz...

CVE-2002-0991

CVE-2002-0991 Buffer overflow nel comando cifslogin di HP CIFS/9000 Client A.01.06 e versioni precedenti Pubblicazione su Exploit-db: https://www.exploit-db.com/exploits/21577/ Pubblicazione su Packetstorm: https://packetstormsecurity.com/files/26303/cifslogin.txt.html Pubblicazione su...

CVE-2025-4517-POC-Sudoers

CVE-2025-4517 - POC zum Hinzufügen eines Benutzers zu sudoers Dieses Skript ist eine weaponisierte Version der im Google Security Research Advisory: https://github.com/google/security-research/security/advisories/GHSA-hgqp-3mmf-7h8f veröffentlichten Forschung. Während die ursprüngliche Forschung...