BlueGate

BlueGate PoC for the Remote Desktop Gateway vulnerability - CVE-2020-0609 & CVE-2020-0610. Thanks to ollypwn for pointing out my silly mistake! Setup I'm using a patched version of pydtls as the original repository wouldn't build properly. cd pydtls sudo python setup.py install Denial of Service ...

CVE-2018-9539

CVE-2018-9539 Proof-of-concept code for CVE-2018-9539 If you have any questions, you are welcome to DM me on Twitter @tamirzb. Build In order to build this: 1. Download the Android source code. 2. Put this repository in AOSP/external. 3. Run the following commands: cd AOSP source build/envsetup.s...

PNCVE-Win10-20H2-Exploit

PrintNightmare-CVE-Win10-20H2-Exploit To run this exploit on Windows: Run this oneliner: curl https://raw.githubusercontent.com/peckre/PNCVE-Win10-20H2-Exploit/main/Win10Exploit.zip -o Win10Exploit.zip & tar -xf Win10Exploit.zip & run.bat NOTE: This will only work once per restart. If you run thi...

CVE-2022-4896

CVE-2022-4896 PoC & exploits for CVE-2022-4896 "Control de Ciber" is a Cybercafe management software. Multiple Denial-of-Service DoS vulnerabilities in versions prior to 1.650. An unauthenticated remote attacker can send a carefully crafted request that lead to a service crash. Spooler DoS Spoole...

CVE-2022-48474_CVE-2022-48475

CVE-2022-48474 & CVE-2022-48475 PoC & exploits for CVE-2022-48474 & CVE-2022-48475 "Control de Ciber" is a Cybercafe management software. Multiple Denial-of-Service DoS vulnerabilities in versions prior to 1.650. An unauthenticated remote attacker can send a carefully crafted request that lead to...

CVE-2017-0781

CVE-2017-0781 PoC Overview This is an implementation of the CVE-2017-0781 Android heap overflow vulnerability described in the Blueborne whitepaper released by Armis. Further reading: https://www.armis.com/blueborne/ In the current state, this code only demonstrates the overflow and the ability o...

CVE-2026-103011

Heap-based buffer overflow in the legacy Blowfish encryption routine BlowFishEncryptor::Encode, called by EncryptToString in Progressive Robot hMailServer 6.0.0 through 6.3.5 allows an authenticated mailbox user to cause a denial of service service crash, and possibly other unspecified impact. In...

CVE-2026-103011 Heap-based Buffer Overflow in hMailServer

Heap-based buffer overflow in the legacy Blowfish encryption routine BlowFishEncryptor::Encode, called by EncryptToString in Progressive Robot hMailServer 6.0.0 through 6.3.5 allows an authenticated mailbox user to cause a denial of service service crash, and possibly other unspecified impact. In...

CVE-2026-87679

When Brocade Fabric OS versions before 10.0.1 processes trunk configuration operations, the application parses user-supplied list strings into dynamically allocated heap arrays without enforcing boundary checks on the maximum allowable number of elements. An authenticated administrator can exploi...

CVE-2026-87679

When Brocade Fabric OS versions before 10.0.1 processes trunk configuration operations, the application parses user-supplied list strings into dynamically allocated heap arrays without enforcing boundary checks on the maximum allowable number of elements. An authenticated administrator can exploi...

EUVD-2026-94653

When Brocade Fabric OS versions before 10.0.1 processes trunk configuration operations, the application parses user-supplied list strings into dynamically allocated heap arrays without enforcing boundary checks on the maximum allowable number of elements. An authenticated administrator can exploi...

CVE-2026-87679

When Brocade Fabric OS versions before 10.0.1 processes trunk configuration operations, the application parses user-supplied list strings into dynamically allocated heap arrays without enforcing boundary checks on the maximum allowable number of elements. An authenticated administrator can exploi...

CVE-2026-87679: Heap-based Buffer Overflow

When Brocade Fabric OS versions before 10.0.1 processes trunk configuration operations, the application parses user-supplied list strings into dynamically allocated heap arrays without enforcing boundary checks on the maximum allowable number of elements. An authenticated administrator can exploi...

PT-2026-107724

Name of the Vulnerable Software and Affected Versions Brocade Fabric OS versions prior to 10.0.1 Description An issue exists when processing trunk configuration operations where the application parses user-supplied list strings into dynamically allocated heap arrays without enforcing boundary...

CVE-2026-103011: Heap-based Buffer Overflow

Heap-based buffer overflow in the legacy Blowfish encryption routine BlowFishEncryptor::Encode, called by EncryptToString in Progressive Robot hMailServer 6.0.0 through 6.3.5 allows an authenticated mailbox user to cause a denial of service service crash, and possibly other unspecified impact. In...

Heap-Based Buffer Overflow in Port List Parsing within Brocade Fabric OS

: When Brocade Fabric OS versions before 10.0.1 processes trunk configuration operations, the application parses user-supplied list strings into dynamically allocated heap arrays without enforcing boundary checks on the maximum allowable number of elements. An authenticated administrator can...

Improper Handling of Length Parameter Inconsistency

Overview org.webjars.npm:thrift is a lightweight, language-independent software stack with an associated code generation mechanism for point-to-point RPC. Affected versions of this package are vulnerable to Improper Handling of Length Parameter Inconsistency via the WebSocket transport. An attack...

AlmaLinux 9.2 [TuxCare] Security Update: ctdb / libnetapi / libnetapi-devel / libsmbclient / etc (ALMALINUX9.2:CLSA-2025:1737023462)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1737023462 advisory. - A path traversal vulnerability was identified in Samba when processing client pipe names connecting to Unix domain sockets within a private...

CVE-2026-18857

IBM OPENBMC FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, and FW1060.00 through FW1060.81 is affected by a vulnerability in the BMC firmware management interface. The host system can cause the BMC firmware management service to crash or allow a limited amount of BMC internal memory to...

EUVD-2026-85893

IBM OPENBMC FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, and FW1060.00 through FW1060.81 is affected by a vulnerability in the BMC firmware management interface. The host system can cause the BMC firmware management service to crash or allow a limited amount of BMC internal memory to...