CVE-2009-4049

CVE-2009-4049 Estouro de buffer baseado em heap em aswRdr.sys também conhecido como driver TDI RDR no avast! Home e Professional 4.8.1356.0 permite que usuários locais causem uma negação de serviço corrupção de memória ou possivelmente obtenham privilégios por meio de argumentos elaborados para...

CVE-2003-0358

CVE-2003-0358 ऐतिहासिक कारणों से पोस्ट किया जा रहा है। snowcrash [email protected] https://github.com/snowcra5h/ विवरण बफर ओवरफ्लो 1 nethack 3.4.0 और पुराने संस्करणों में, और 2 falconseye 1.9.3 और पुराने संस्करणों में, जो nethack पर आधारित है, स्थानीय उपयोगकर्ताओं को एक लंबे -s कमांड लाइन...

test_iconv

Testen von CVE-2024-2961 V1 – in Analyse Dieses Repository enthält ein C-Programm zum Testen von CVE-2024-2961, bei dem es sich um eine Pufferüberlauf-Schwachstelle in der Funktion iconv der GNU C Library glibc handelt. Aufgrund der Struktur des PHP-Heaps kann dieser Überlauf ausgenutzt werden, u...

EUVD-2026-65307

A stack-based buffer overflow vulnerability exists in SKYSEA Client View and SKYMEC IT Manager. If this vulnerability is exploited, an attacker who can log in to a Windows system on which the affected product is installed may be able to execute arbitrary code on another Windows system that has th...

CVE-2026-68960

A stack-based buffer overflow vulnerability exists in SKYSEA Client View and SKYMEC IT Manager. If this vulnerability is exploited, an attacker who can log in to a Windows system on which the affected product is installed may be able to execute arbitrary code on another Windows system that has th...

CVE-2026-68960

A stack-based buffer overflow vulnerability affects SKYSEA Client View and SKYMEC IT Manager , two Windows-based IT management products. An authenticated attacker who can log in to a Windows system running the affected software may be able to execute arbitrary code on a different Windows host tha...

cve-2015-7547-public

Server di attacco PoC per la vulnerabilità CVE-2015-7547 in glibc DNS stub resolver Per testare su macchina locale con una versione vulnerabile di glibc: root@kitploit: user@localhost:/$ echo 'nameserver 127.0.0.127' | sudo tee /etc/resolv.conf user@localhost:/$ echo 'nameserver 127.0.0.127' | su...

inetutils-CVE-2019-0053-Patched-PKGBUILD

O inetutils não é atualizado há 5 anos, e o pacote oficial do Arch também não. Um patch foi lançado que aborda o CVE-2019-0053 exploração de estouro de buffer devido ao uso de sprintf em vez de snprintf, mas não há nenhum lançamento oficial à vista. Sinceramente, há muito mais errado em usar teln...

Ivanti Connect Secure - Stack-based Buffer Overflow

Ivanti Connect Secure 22.7R2.5, Ivanti Policy Secure 22.7R1.2, and Ivanti Neurons for ZTA gateways 22.7R2.3 contain a stack-based buffer overflow in the clientCapabilities parameter handling. This vulnerability allows remote unauthenticated attackers to execute arbitrary code through IF-T TLS...

Windows Server 2003 & IIS 6.0 - Remote Code Execution

Internet Information Services IIS 6.0 in Microsoft Windows Server 2003 R2 contains a buffer overflow vulnerability in the ScStoragePathFromUrl function in the WebDAV service that could allow remote attackers to execute arbitrary code via a long header beginning with "If http://" in a PROPFIND...

SonicWall SMA100 Stack - Buffer Overflow/Remote Code Execution

A Stack-based buffer overflow vulnerability in SMA100 Apache httpd server's modcgi module environment variables allows a remote unauthenticated attacker to potentially execute code as a 'nobody' user in the appliance. This vulnerability affected SMA 200, 210, 400, 410 and 500v appliances firmware...

RLSA-2026:59179 Important: gstreamer1-plugins-good security update

GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-good packages contain a collection of well-supported plug-ins of good quality and under the LGPL license. Security Fixes: gstreamer: GStreamer: Remote Code Execution via MRF fil...

gstreamer1-plugins-good security update

An update is available for gstreamer1-plugins-good. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list GStreamer is a streaming media framework based on graphs of...

CVE-2002-0201

CVE-2002-0201 Il Cyberstop Web Server per Windows 0.1 consente ad attaccanti remoti di causare un denial of service crash e possibilmente eseguire codice arbitrario tramite una lunga richiesta HTTP GET, innescando possibilmente un buffer overflow. Pubblicazione su Exploit-db:...

CVE-2019-1068

CVE-2019-1068 Ursachenanalyse und PoC für eine Microsoft SQL Server Stack-Overflow-Sicherheitslücke durch Reverse Engineering von „svl.dll“. Links zu unserer Arbeit: 1. Ataberk's Blog 2. Fatih's Blog 3. Cem's Blog https://msrc.microsoft.com/update-guide/vulnerability/CVE-2019-1068...

cve-2024-27130-poc

CVE-2024-27130-poc CVE-2024-27130 ist eine schwerwiegende Sicherheitslücke, die QNAP Network Attached Storage NAS-Geräte betrifft. Die Schwachstelle beruht auf der unsicheren Verwendung der strcpy-Funktion in der Funktion NoSupportACL des share.cgi-Skripts im QTS-Betriebssystem, was zu einem...

cve-2019-6250-lab

CVE-2019-6250 — laboratorio RCE pre-autenticazione libzmq Catena RCE funzionante end-to-end + laboratorio riproducibile per CVE-2019-6250 , l'heap-buffer-overflow pre-autenticazione in libzmq's v2decodert::sizeready. Un overflow aritmetico di puntatore uint64t consente a un peer non autenticato d...

cve-2019-13132-lab

CVE-2019-13132 — libzmq CURVE INITIATE स्टैक ओवरफ़्लो → RCE लैब CVE-2019-13132 के लिए पूर्ण-अंत तक काम करने वाला RCE एक्सप्लॉइट + पुनरुत्पादन योग्य लैब, जो libzmq के CURVE INITIATE हैंडशेक हैंडलर में स्टैक बफ़र ओवरफ़्लो है। एक हमलावर जो सर्वर की दीर्घकालिक सार्वजनिक कुंजी जो डिज़ाइन के अनुसार एक...

CVE-2013-3664_MAC

Sketchup MAC Pict Material Palette Stack Corruption - CVE-2013-3664 SketchUp non convalida l'input durante l'analisi di una texture MACPict incorporata. È dimostrato che l'esecuzione di codice arbitrario è possibile quando una texture, una miniatura o un'immagine di sfondo dannosa innesca un...

Kioptrix-Level1-Vulnerability-Analysis

Kioptrix Level 1: पूर्ण-स्पेक्ट्रम भेद्यता ऑडिट और एक्सप्लॉइटेशन 🏛️ व्यावसायिक उद्देश्य उद्देश्य Kioptrix Level 1 वातावरण पर एक संरचित पेनिट्रेशन परीक्षण करना था, ताकि पूर्ण 'root' अभिगम प्राप्त किया जा सके और रेड तथा ब्लू टीम संचालन दोनों के लिए उपयुक्त तकनीकी उपचार रणनीतियों का दस्तावेज़ीकरण किय...