CVE-2021-40346

CVE-2021-40346 请求头内部表示中的整数溢出允许 HTTP 请求走私。本仓库提供了一个使用 docker-compose 构建的 PoC，包含两个 docker 镜像：一个运行存在漏洞版本的 HaProxy（本例中为 2.2.16），另一个运行使用 Gunicorn 作为 WSGI 的 Flask Web 服务器。通过利用该漏洞，我们能够访问 /admin 页面，而该页面的请求本会被 HaProxy 通过用户自定义规则阻止。 POC 环境要求 Docker 🐳 Docker compose 🐳 环境配置 HaProxy docker 容器，端口 8000 映射到宿主机。...

CVE-2026-93546

Integer overflow in moddavfs in Apache HTTP Server through 2.4.68 allows an authenticated WebDAV client with write access to crash worker processes and persistently corrupt a directory's property database via PROPPATCH requests declaring many XML namespaces...

CVE-2026-63292

Stack-based buffer overflow in modvhostalias in Apache Software Foundation Apache HTTP Server through 2.4.68 on all platforms allows a remote client to cause a denial of service or potentially execute arbitrary code via an HTTP request with a Host header exceeding 8192 bytes when...

CVE-2026-14316

The revoked-key error path builds a human-readable failure reason using sprintf into a heap buffer. The allocated buffer is too small for the final formatted message. When sprintf writes the full message, it can write past the end of the heap allocation...

CVE-2026-20698-PF_ROUTE-Heap-Overflow

CVE-2026-20698 — XNU 内核通过 PFROUTE RTAGENMASK 导致的堆溢出 概述 XNU 路由套接字（PFROUTE）在处理 routemsg 中的 RTAGENMASK 时存在堆缓冲区溢出。该漏洞可由无权限且无任何授权的非特权进程触发内核崩溃。 CVE ：CVE-2026-20698（归功于 DARKNAVY） 受影响版本 ：iOS 26.4，macOS 26.4 已修复版本 ：iOS 26.4（返回 ENOBUFS 而非处理超大的 genmask） 影响 ：内核崩溃 / 拒绝服务，潜在的堆破坏 Apple 报告...

CTT-Enhanced-PX4-Autopilot-Exploit-CVE-2026-32743

CTT-增强版PX4自动驾驶仪漏洞利用 — CVE-2026-32743 CVE-2026-32743 — PX4自动驾驶仪栈缓冲区溢出 CTT增强版：33层时间级联无人机拒绝服务攻击。原始漏洞利用通过60字节溢出使MAVLink任务崩溃。CTT版本将溢出分布到33个时间层，每层具有相位共振时序和时间楔形滤波。结果：持久性拒绝服务。无法修补。 CTT-增强版PX4自动驾驶仪漏洞利用 — CVE-2026-32743 🔥 概述...

CVE-2025-52099

CVE-2025-52099 an integer overflow in SQLite 3.50.0 A proof-of-concept PoC to trigger an integer overflow in SQLite 3.50.0's setupLookaside function is provided below. This overflow occurs due to unchecked multiplication of sz nBig, which can wrap into a negative value and result in invalid memor...

CVE-2025-5844

CVE-2025-5548: Analysis & PoC 📝Summary This repository provides a comprehensive technical analysis and a functional Proof of Concept PoC for CVE-2025-5548 : a Buffer Overflow Stack vulnerability affecting FreeFloat FTP Server v1.0. The research covers the entire lifecycle of the vulnerability: fr...

CVE-2025-5548

CVE-2025-5548 Repository documenting the vulnerability CVE-2025-5548 , including environment setup and step-by-step exploitation. Structure 1. Installation — Required tools Python, IDA, Immunity, Mona, Free Float FTP Server, Ncat. 2. Exploitation — IDA analysis and step-by-step overflow exploit;...

CVE-2019-25485

🐞 CVE-2019-25485: R 3.4.4 - Stack-Based Buffer Overflow x86 and x64 Stack-based buffer overflow in R 3.4.4. Full exploitation on x86, but only RIP control with gadget analysis on x64 due to program constraints. The same vulnerability across two architectures, leading to different exploitation...

cve-2026-0013-exploit

This repository does not have a README...

CVE-2025-5548

🐞CVE-2025-5548 Buffer overflow in FreeFloat FTP Server 1.0 🎯 Stack Buffer Overflow Exploitation This repository contains the documentation and practical development of a cybersecurity project focused on reverse engineering and the exploitation of memory-level vulnerabilities Stack Buffer Overflow...

Binary-Exploitation-and-Kernel-Escalation

Binary-Exploitation-and-Kernel-Escalation Secured root-level access by identifying and exploiting misconfigurations and outdated software. Buffer overflow vulnerability in an outdated version of modssl CVE-2002-0082. Privilege escalation was subsequently achieved by exploiting a race condition in...

CVE-2026-95349

A flaw was found in chromium-browser. A buffer overflow vulnerability in the WebGL Web Graphics Library component allows a remote attacker to execute arbitrary code outside the browser sandbox. By tricking a user into visiting a specially crafted HTML page, an attacker can corrupt memory and...

CVE-2026-95318

A flaw was found in chromium-browser. A buffer overflow vulnerability in the Video component allows a remote attacker to potentially execute arbitrary code outside the browser sandbox. To exploit this vulnerability, an attacker must trick a user into viewing a specially crafted HTML page...

CVE-2026-95350

A flaw was found in the ANGLE Almost Native Graphics Layer Engine component of Chromium. A remote attacker could exploit this buffer overflow vulnerability by enticing a user to visit a specially crafted HTML page. Successful exploitation allows the attacker to execute arbitrary code outside the...

CVE-2026-63209

A flaw was found in the klauspost/compress package. A remote attacker can exploit this vulnerability by supplying a specially crafted compression dictionary with an excessively large repeat value, triggering an integer overflow. When the dictionary is subsequently processed, this overflow leads t...

CVE-2026-85228

A flaw was found in Deep Java Library. Due to an integer overflow during tensor buffer validation, a remote, unauthenticated attacker can send a crafted tensor payload to trigger out-of-bounds memory access. Successful exploitation can allow an attacker to obtain sensitive data from adjacent...

CVE-2026-102505

A flaw was found in perl-Imager. When processing floating-point samples from a paletted image, the application allocates an undersized buffer for multi-channel requests. An attacker could provide a specially crafted image to trigger a heap-based buffer overflow with controlled data, potentially...

CVE-2026-92870

A flaw was found in Pgpool-II. Due to a stack-based buffer overflow, an unauthenticated remote attacker can trigger abnormal process termination by sending specially crafted input to the server. This issue leads to a Denial of Service DoS, making the service unavailable to legitimate users...