CVE-2010-1205

Ejemplo de exploit usando la vulnerabilidad CVE-2010-1205 en libpng =1.4.2 gregbook - conjunto de programas de ejemplo distribuidos con las fuentes de libpng generate - genera un archivo png malicioso que provoca un desbordamiento de heap al leer el archivo con libpng pasos para reproducir:...

looney-tunables-CVE-2023-4911

PoC de CVE-2023-4911 Looney Tunables Este es un PoC de CVE-2023-4911 también conocido como "Looney Tunables" que explota un error en la función de análisis de la variable de entorno GLIBCTUNABLES del cargador dinámico de glibc, parsetunables. Comenzando Ejecutando el programa Podemos comprobar si...

CVE-2014-3466_PoC

CVE-2014-3466 GnuTLS 缓冲区溢出：会话 ID 长度检查 的概念验证 信息 参见：https://bugzilla.redhat.com/showbug.cgi?id=1101932 这不是一个武器化的利用程序。 警告：这段 Python 代码很丑陋，我基本上手工构建了 ServerHello，并且在 Python 部分只花了大约五分钟 十五分钟。 欢迎随心所欲地改进这个利用程序（如果可能的话请让我知道！）。 示例 使用恶意 ServerHello 代码启动监听器： $ python poc.py 4433 使用链接到易受攻击版本的 GnuTLS 的客户端连接（例如...

No title provided

A flaw was found in Eclipse OpenJ9. A remote attacker with low privileges could exploit this vulnerability by convincing a user to process a specially crafted .class file containing deeply nested annotations. This could lead to a segmentation fault, resulting in a Denial of Service DoS for the...

CVE-2026-88815

DBI versions before 1.654 for Perl incorrectly treat numeric values as strings in sqltypecastsvpv. When casting to SQLNUMERIC, sqltypecastsvpv passes the string pointer and length of the SV to groknumber without stringifying it first. An integer IV or floating-point NV value has no valid string...

CVE-2026-88816

DBI versions before 1.654 for Perl incorrectly treat numeric values as strings in FetchHashKeyName. fetchrowhashref uses the string pointer of the FetchHashKeyName attribute as the key name without stringifying it first. When FetchHashKeyName has been set to an integer IV or floating-point NV...

CVE-2026-85644

XS::Parse::Infix versions from 0.40 through 0.49 for Perl treat a number as an array reference. The wrapper function XS::Parse::Infix generates for a list-associative infix operator checks whether arguments are array references, but it tests using SvRV rather than SvROK. SvRV reads a union slot...

CVE-2026-88816

A flaw was found in perl-DBI. An attacker or user capable of supplying a numeric value to the FetchHashKeyName attribute can cause a Denial of Service DoS. The fetchrowhashref function attempts to use the attribute value as a string pointer without stringifying it first, leading to an invalid...

CVE-2026-85644

The XS::Parse::Infix component in Perl (versions 0.40 through 0.49) contains a vulnerability where the wrapper function for list-associative infix operators incorrectly uses SvRV() instead of SvROK() to validate array references. Because SvRV() does not validate that the value is actually a refer...

EUVD-2026-88344

XS::Parse::Infix versions from 0.40 through 0.49 for Perl treat a number as an array reference. The wrapper function XS::Parse::Infix generates for a list-associative infix operator checks whether arguments are array references, but it tests using SvRV rather than SvROK. SvRV reads a union slot...

CVE-2026-88816

The DBI database interface for Perl (versions before 1.654 ) contains a vulnerability where FetchHashKeyName incorrectly treats numeric values as strings. Specifically, the fetchrow_hashref function uses a string pointer from the FetchHashKeyName attribute without stringifying it first. If an int...

CVE-2026-88816

DBI versions before 1.654 for Perl incorrectly treat numeric values as strings in FetchHashKeyName. fetchrowhashref uses the string pointer of the FetchHashKeyName attribute as the key name without stringifying it first. When FetchHashKeyName has been set to an integer IV or floating-point NV...

CVE-2026-88816 DBI versions before 1.654 for Perl incorrectly treat numeric values as strings in FetchHashKeyName

DBI versions before 1.654 for Perl incorrectly treat numeric values as strings in FetchHashKeyName. fetchrowhashref uses the string pointer of the FetchHashKeyName attribute as the key name without stringifying it first. When FetchHashKeyName has been set to an integer IV or floating-point NV...

CVE-2026-88815 DBI versions before 1.654 for Perl incorrectly treat numeric values as strings in sql_type_cast_svpv

DBI versions before 1.654 for Perl incorrectly treat numeric values as strings in sqltypecastsvpv. When casting to SQLNUMERIC, sqltypecastsvpv passes the string pointer and length of the SV to groknumber without stringifying it first. An integer IV or floating-point NV value has no valid string...

CVE-2026-88815

DBI versions before 1.654 for Perl incorrectly treat numeric values as strings in sqltypecastsvpv. When casting to SQLNUMERIC, sqltypecastsvpv passes the string pointer and length of the SV to groknumber without stringifying it first. An integer IV or floating-point NV value has no valid string...

CVE-2026-88815

The DBI database interface for Perl versions before 1.654 contains a vulnerability where the sql_type_cast_svpv function incorrectly treats numeric values as strings. Specifically, when casting to SQL_NUMERIC , the function passes a string pointer and length to grok_number without prior stringifi...

unzip_poc

CVE-2022-0529 和 CVE-2022-0530 unzip 6.0 的POC CVE-2022-0529 和 CVE-2022-0530 https://bugzilla.redhat.com/showbug.cgi?id=2051402 https://bugzilla.redhat.com/showbug.cgi?id=2051395...

CVE-2025-67445

Overview A vulnerability in the TOTOLINK X5000R V9.1.0cu.2415 web management interface allows an unauthenticated remote attacker on the LAN to crash the web service via a segmentation fault. By sending an oversized HTTP POST request to the CGI endpoint, an attacker can trigger memory exhaustion,...

CVE-2023-38545-sample

Quick description This showcases the cURL CVE-2023-38545. It is as lightweight as I could make it. Setup First, build the Docker Image: docker build . -t cveimage Next, we can simply run the image file, creating a temporary Docker Container which will get deleted once the container is stopped:...

CVE-2022-0918

CVE-2022-0918 Red Hat CVE 页面: https://access.redhat.com/security/cve/cve-2022-0918 包含补丁链接的 Github issue: https://github.com/389ds/389-ds-base/issues/5242 PoC PoC 应用程序接受单个 IP，IPv4 或 IPv6 均可。 默认情况下，它会向端口 389 发送消息，可在源代码中更改。 PoC 将与目标建立 TCP 连接并发送单个数据包，目标 slapd 随后应发生段错误。 用法 clang poc.c -o poc ./poc IP...