CVE-2023-38545-sample

快速描述 此项目演示了 cURL CVE-2023-38545。我已经尽可能地将其做得轻量。 设置 首先，构建 Docker 镜像： docker build . -t cveimage 接下来，我们可以直接运行镜像文件，创建一个临时的 Docker 容器，该容器在停止后将被自动删除： docker run --rm --tty --net="host" --name cvecontainer cveimage 如果你不方便输入命令，只需打开另一个终端并运行： docker exec -it cvecontainer /bin/bash...

CVE-2014-3466_PoC

CVE-2014-3466 GnuTLS 缓冲区溢出：会话 ID 长度检查 的概念验证 信息 参见：https://bugzilla.redhat.com/showbug.cgi?id=1101932 这不是一个武器化的利用程序。 警告：这段 Python 代码很丑陋，我基本上手工构建了 ServerHello，并且在 Python 部分只花了大约五分钟 十五分钟。 欢迎随心所欲地改进这个利用程序（如果可能的话请让我知道！）。 示例 使用恶意 ServerHello 代码启动监听器： $ python poc.py 4433 使用链接到易受攻击版本的 GnuTLS 的客户端连接（例如...

looney-tunables-CVE-2023-4911

CVE-2023-4911 Looney Tunables の PoC これは CVE-2023-4911（別名 "Looney Tunables"）の PoC であり、glibc 動的ローダーの環境変数パース関数 parsetunables における GLIBCTUNABLES のバグを利用します。 はじめに プログラムの実行 以下のコマンドで対象が脆弱かどうか確認できます env -i "GLIBCTUNABLES=glibc.malloc.mxfast=glibc.malloc.mxfast=A" "Z=printf '%08192x' 1" /usr/bin/su --help...

CVE-2022-0918

CVE-2022-0918 Red Hat CVE 页面: https://access.redhat.com/security/cve/cve-2022-0918 包含补丁链接的 Github issue: https://github.com/389ds/389-ds-base/issues/5242 PoC PoC 应用程序接受单个 IP，IPv4 或 IPv6 均可。 默认情况下，它会向端口 389 发送消息，可在源代码中更改。 PoC 将与目标建立 TCP 连接并发送单个数据包，目标 slapd 随后应发生段错误。 用法 clang poc.c -o poc ./poc IP...

CVE-2022-43343

CVE-2022-43343 の説明 N-Prolog v1.91 において、Main.c の関数 gettoken にグローバルバッファオーバーフローの脆弱性が発見されました。 再現方法 脆弱性を再現するには、脆弱なバージョンの N-Prolog v1.91 をダウンロードし、プロジェクトをコンパイルします。 git clone https://github.com/sasagawa888/nprolog.git cd nprolog git checkout ae7cc9bf6087cfcb57baadbe59f5005c6dc0f09c make...

xpdf-docker

Xpdf Docker イメージ このリポジトリには、CVE-2022-30524 に脆弱な Xpdf バージョン 4.04 の Docker イメージが含まれています。 イメージのビルド 📦 このリポジトリには、以下の3つのフレーバーのイメージが含まれています。 bullseye/gcc : Debian "bullseye"、gcc でビルド bullseye/afl : Debian "bullseye"、afl-clang-fast++ でビルド（デバッグプロファイル） focal/afl : Ubuntu 20.04 LTS Focal Fossa、afl-clang-fast...

Rocky Linux 9.6 [TuxCare] Security Update: vim-X11 / vim-common / vim-enhanced / vim-filesystem / vim-minimal Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1774345469)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1774345469 advisory. - Vim is an open source, command line text editor. Prior to version 9.2.0073, an OS command injection vulnerability exists in the...

Rocky Linux 9 [CIQ] Security Update: openjpeg2 / openjpeg2-debuginfo / openjpeg2-debugsource / etc (crlsa-2022_8207)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20228207 advisory. openjpeg: segmentation fault in opj2decompress due to uninitialized pointer CVE-2022-1122 Tenable has extracted the preceding description block directly from the CI...

Rocky Linux 9.6 [TuxCare] Security Update: libpq / libpq-devel (ALMALINUX9.6:CLSA-2026:1768565904)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1768565904 advisory. - Integer wraparound in multiple PostgreSQL libpq client library functions allows an application input provider or network peer to cause...

AlmaLinux 9.2 [TuxCare] Security Update: mod_auth_openidc (ALMALINUX9.2:CLSA-2025:1745945082)

The AlmaLinux 9.2 host has a package installed that is affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1745945082 advisory. - modauthopenidc is an authentication and authorization module for the Apache 2.x HTTP server that implements the OpenID Connect Relying Part...

CentOS Linux 7 [TuxCare] Security Update: gmp / gmp-devel / gmp-static (CENTOS7:CLSA-2024:1711477070)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2024:1711477070 advisory. - GNU Multiple Precision Arithmetic Library GMP through 6.2.1 has an mpz/inpraw.c integer overflow and resultant buffer overflow via crafted inpu...

AlmaLinux 9.6 [TuxCare] Security Update: vim-X11 / vim-common / vim-enhanced / vim-filesystem / vim-minimal Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1774345469)

The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1774345469 advisory. - Vim is an open source, command line text editor. Prior to version 9.2.0073, an OS command injection vulnerability exists in the...

AlmaLinux 9.2 [TuxCare] Security Update: gstreamer1-plugins-good / gstreamer1-plugins-good-gtk / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2025:1749478391)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1749478391 advisory. - GStreamer is a library for constructing graphs of media-handling components. An OOB-read vulnerability has been discovered in...

Rocky Linux 8 [CIQ] Security Update: openjpeg2 / openjpeg2-debuginfo / openjpeg2-debugsource / etc (crlsa-2022_7645)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20227645 advisory. openjpeg: segmentation fault in opj2decompress due to uninitialized pointer CVE-2022-1122 Tenable has extracted the preceding description block directly from the CI...

AlmaLinux 9.2 [TuxCare] Security Update: gmp / gmp-c++ / gmp-devel / gmp-static (ALMALINUX9.2:CLSA-2025:1745271805)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1745271805 advisory. - GNU Multiple Precision Arithmetic Library GMP through 6.2.1 has an mpz/inpraw.c integer overflow and resultant buffer overflow via crafted...

CentOS Linux 6 [TuxCare] Security Update: vim-X11 / vim-common / vim-enhanced / vim-filesystem / vim-minimal Multiple Vulnerabilities (CENTOS6:CLSA-2026:1774432816)

The CentOS Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS6:CLSA-2026:1774432816 advisory. - Vim is an open source, command line text editor. Prior to version 9.2.0073, an OS command injection vulnerability exists in the netrw...

AlmaLinux 9.6 [TuxCare] Security Update: libpq / libpq-devel (ALMALINUX9.6:CLSA-2026:1768565904)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1768565904 advisory. - Integer wraparound in multiple PostgreSQL libpq client library functions allows an application input provider or network peer to cause libp...

Rocky Linux 9.6 [TuxCare] Security Update: vim-X11 / vim-common / vim-enhanced / vim-filesystem / vim-minimal Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1767712744)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1767712744 advisory. - When switching to other buffers using the :all command and visual mode still being active, this may cause a heap-buffer overflow...

Rocky Linux 8 [CIQ] Security Update: libsndfile / libsndfile-debuginfo / libsndfile-debugsource / etc (crlsa-2024_11192)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202411192 advisory. libsndfile: Segmentation fault error in oggvorbis.c:417 vorbisanalysiswrote CVE-2024-50612 Tenable has extracted the preceding description block directly from the...

Rocky Linux 9 [CIQ] Security Update: libsndfile / libsndfile-debuginfo / libsndfile-debugsource / etc (crlsa-2024_11237)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202411237 advisory. libsndfile: Segmentation fault error in oggvorbis.c:417 vorbisanalysiswrote CVE-2024-50612 Tenable has extracted the preceding description block directly from the...