heffalump

Heffalump Heffalump é um honeypot interminável que dá pesadelos a bots maliciosos. Para usar, no seu robots.txt, informe aos bots para não acessarem uma determinada URL, pela qual o heffalump está fazendo proxy reverso. Qualquer agente web que acessar essa URL receberá um fluxo interminável de...

AutoGenerateXalanPayload

AutoGenerateXalanPayload Introdução Esta é uma ferramenta de geração automatizada de payloads para a vulnerabilidade de overflow do Xalan no JDK, derivada do CVE-2022-34169. Como foi descoberto que diferentes versões do JDK requerem payloads de overflow diferentes, esta ferramenta de geração...

CVE-2017-7529-Nginx---Remote-Integer-Overflow-Exploit

इस रिपॉजिटरी में README नहीं है।...

Windows-CVE-2024-38063

Windows CVE-2024-38063 ID do CVE: CVE-2024-38063 Pontuação CVSS 3.1: 9.8 Crítico Pontuação EPSS: Baixo - 0.088% https://www.cvedetails.com/epss/CVE-2024-38063/epss-score-history.html Impacto: Execução Remota de Código Componentes Afetados: Pilha TCP/IP do Windows Vetor de Ataque: Rede Remoto...

nginx-cve-2026-42945-poc

CVE-2026-42945 — تجاوز سعة المخزن المؤقت في الكومة بوحدة NGINX Rewrite Module → RCE تم تأكيد نجاح RCE — من خلال تجاوز سعة الكومة + حقن العمليات عبر GDB، يتم تنفيذ أوامر عشوائية في عمليات NGINX / OpenResty worker. البدء السريع root@kitploit: 一键构建 NGINX 镜像 + 执行 RCE 测试 ./run.sh nginx 一键构建 OpenResty ...

CVE-2024-30051

Vulnerabilidade de Elevação de Privilégio da Biblioteca Core DWM do Windows CVE-2024-30051 Publicado em 15 de agosto de 2024 Nesta postagem de blog, explicarei uma vulnerabilidade na biblioteca Core DWM do Microsoft Windows que analisei quando o exploit para o Core Impact estava sendo desenvolvid...

CVE-2025-32756-POC

CVE-2025-32756: Fortinet RCE PoC फोर्टिनेट उत्पादों को प्रभावित करने वाली महत्वपूर्ण स्टैक-आधारित बफ़र ओवरफ़्लो भेद्यता CVE-2025-32756 के लिए एक प्रमाण-अवधारणा। भेद्यता CVSS : 9.8 गंभीर प्रकार : AuthHash कुकी प्रसंस्करण में स्टैक-आधारित बफ़र ओवरफ़्लो प्रभाव : अप्रमाणित दूरस्थ कोड निष्पादन प्रभावि...

CVE-2014-4481

CoreGraphics CCITT Corruption de mémoire - CVE-2014-4481 Le framework Apple CoreGraphics ne parvient pas à valider l'entrée lors de l'analyse des données encodées en CCITT groupe 3, ce qui provoque un débordement de tas. Une petite allocation mémoire dans le tas peut être débordée par des données...

CVE-2023-38545-libcurl-SOCKS5-heap-buffer-overflow

अस्वीकरण यह लेख केवल तकनीकी चर्चा और सीखने के उद्देश्य से है। इस दस्तावेज़ में दी गई जानकारी के उपयोग से होने वाले किसी भी प्रत्यक्ष या अप्रत्यक्ष परिणाम और नुकसान की जिम्मेदारी उपयोगकर्ता की होगी, लेखक इसके लिए कोई जिम्मेदारी नहीं लेता है। CVE-2023-38545: libcurl-SOCKS5-heap-buffer-overflow संदर...

CVE-2025-71407 Nokogiri before 1.18.3 Stack Buffer Overflow and Use-After-Free

Nokogiri before 1.18.3 contains a stack buffer overflow vulnerability in libxml2 when reporting DTD validation errors with long QName prefixes, and a use-after-free vulnerability during validation against untrusted XML Schemas. Attackers can trigger these vulnerabilities by providing malicious DT...

EUVD-2025-210774

Nokogiri before 1.18.3 contains a stack buffer overflow vulnerability in libxml2 when reporting DTD validation errors with long QName prefixes, and a use-after-free vulnerability during validation against untrusted XML Schemas. Attackers can trigger these vulnerabilities by providing malicious DT...

CVE-2025-71407

Nokogiri versions before 1.18.3 contain two vulnerabilities in its bundled libxml2 component: a stack buffer overflow triggered when reporting DTD validation errors with long QName prefixes, and a use-after-free during validation against untrusted XML Schemas. An attacker can exploit these by sup...

CVE-2022-50999 Nokogiri before 1.13.5 Integer Overflow via libxml2

Nokogiri versions before 1.13.5 contain an integer overflow vulnerability in packaged libxml2 buffer handling functions that allows attackers to cause out-of-bounds memory writes. Attackers can exploit this by crafting multi-gigabyte XML files to trigger buffer overflows resulting in information...

EUVD-2022-56024

Nokogiri versions before 1.13.5 contain an integer overflow vulnerability in packaged libxml2 buffer handling functions that allows attackers to cause out-of-bounds memory writes. Attackers can exploit this by crafting multi-gigabyte XML files to trigger buffer overflows resulting in information...

CVE-2022-50999

Nokogiri versions before 1.13.5 contain an integer overflow in the packaged libxml2 buffer handling functions. Attackers can exploit this by supplying multi-gigabyte XML files that trigger out-of-bounds memory writes, potentially leading to information disclosure , data modification , or denial o...

EUVD-2022-56023

Nokogiri before 1.13.9 CRuby implementation using packaged libraries bundles libxml2 v2.9.14, which is affected by CVE-2022-40304 data corruption / double-free from an entity reference cycle when entity content is allocated from a dict and CVE-2022-40303 integer overflows when parsing with...

EUVD-2021-34866

Nokogiri before 1.11.4 CRuby implementation only, when the packaged/vendored libxml2 is used bundles libxml2 2.9.10, which is affected by multiple vulnerabilities addressed in libxml2 2.9.12, including a memory leak in xmlSchemaValidateStream CVE-2019-20388, a global buffer over-read in...

CVE-2021-47996

Nokogiri before 1.11.4 (CRuby implementation, when using the bundled/vendored libxml2) ships libxml2 2.9.10 , which carries multiple known flaws later fixed in libxml2 2.9.12. These include a memory leak in xmlSchemaValidateStream (CVE-2019-20388), a global buffer over-read in xmlEncodeEntitiesIn...

CVE-2022-50998

Nokogiri (CRuby implementation using packaged libraries) versions before 1.13.9 bundle libxml2 v2.9.14 , which is susceptible to two underlying flaws: CVE-2022-40304 (a double-free from an entity reference cycle when entity content is allocated from a dict) and CVE-2022-40303 (integer overflows d...

CVE-2021-47996 Nokogiri before 1.11.4 Multiple Vulnerabilities via libxml2

Nokogiri before 1.11.4 CRuby implementation only, when the packaged/vendored libxml2 is used bundles libxml2 2.9.10, which is affected by multiple vulnerabilities addressed in libxml2 2.9.12, including a memory leak in xmlSchemaValidateStream CVE-2019-20388, a global buffer over-read in...