POC_CVE-2025-29943_Write-what-where-Condition

StackWarp: PoC for CVE-2025-29943 Prueba de concepto para la vulnerabilidad de hardware StackWarp CVE-2025-29943 en procesadores AMD. Esta falla permite a un atacante con privilegios de administrador en un host hipervisor manipular la configuración de la canalización de la CPU para corromper el...

SNMPocalypse-Cisco-Bug-Lets-Hackers-Crash-or-Command-Devices

SNMPocalypse-Cisco-Bug-Lets-Hackers-Crash-or-Command-Devices CVE-2023-20352 es una falla crítica de desbordamiento de pila en el motor SNMP de Cisco IOS/IOS XE. Con solo paquetes SNMP manipulados, los atacantes remotos pueden bloquear sistemas u obtener control root. Todas las versiones de SNMP s...

CVE-2025-26686-poc-A-critical-RCE-vulnerability-in-Windows-TCP-IP-stack

This PoC has been validated in a controlled, air-gapped environment. Sensitive exploit details have been removed cut — contact the maintainer for access if you have written authorization...

encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue

A flaw was found in the encoding/xml package of Go. The DecodeElement function failed to correctly track recursion depth, which could lead to stack exhaustion. A remote attacker could exploit this vulnerability by providing a specially crafted XML input, resulting in a Denial of Service DoS for t...

CVE-2015-8522.RCE

CVE-2015-8522 The Tivoli FastBack Server 6.1.4 application is vulnerable to a stack-based buffer overflow allowing threat-actors to gain Arbitrary Code Execution ACE via a remote TCP-connection. The PoC provided in this repository leverages this vulnerability to both execute CMD.exe on the target...

CVE-2025-5548

🛡️ Análisis y Explotación: CVE-2025-5548 Máster en Ciberseguridad | Módulo 6: Vulnerabilidades 👋 ¡Hola! Bienvenido a mi Taller de Análisis En este repositorio documento mi inmersión práctica en el análisis de vulnerabilidades a nivel de binario y el desarrollo de exploits para entornos Windows. El...

CVE-2025-5548

🐞 CVE-2025-5548: FreeFloat FTP Server 1.0 - Desbordamiento de búfer basado en pila Desbordamiento de búfer en FreeFloat FTP Server 1.0 que ilustra cómo un único manejador inseguro puede generar múltiples entradas CVE en diferentes comandos. 📑 Tabla de contenidos Por qué existe este repositorio Po...

CVE-2022-0435-Poc

CVE-2022-0435stack overflow wget https://releases.ubuntu.com/jammy/ubuntu-22.04.5-live-server-amd64.iso mkdir kernel wget https://kernel.ubuntu.com/mainline/v5.13/amd64/linux-headers-5.13.0-051300-generic5.13.0-051300.202106272333amd64.deb wget...

encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal

A flaw was found in the encoding/asn1 package in Go. An attacker could provide a specially crafted, deeply-nested Abstract Syntax Notation One ASN.1 structure, leading to excessive recursion during the Unmarshal operation. This could result in stack exhaustion and a Denial of Service DoS conditio...

encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal

A flaw was found in the encoding/asn1 package in Go. An attacker could provide a specially crafted, deeply-nested Abstract Syntax Notation One ASN.1 structure, leading to excessive recursion during the Unmarshal operation. This could result in stack exhaustion and a Denial of Service DoS conditio...

asus-i005-cve-2026-43499

asus-i005-cve-2026-43499 CVE-2026-43499 GhostLock 在 ASUS ROG Phone 5S ASUSI005 上的适配研究。 结论：漏洞触发与栈回收完整验证；提权链被 KASLR leak 阻断。 TL;DR 阶段| 内容| 状态 ---|---|--- 0| UAF 触发（3 线程 + CMPREQUEUEPI）| ✅ 1| pselect timeout=0 栈回收（shift=10）| ✅ 1.6| W 内核栈 SP 泄漏（perf PERFSAMPLEREGSINTR）| ✅ 2| 任意地址写（需 KASLR slide）| ❌ —...

EUVD-2026-85726

A vulnerability was identified in Fast FAC1900R 201908272.0.2. The impacted element is the function getaliasname of the component uhttpd. Such manipulation leads to stack-based buffer overflow. The attack may be performed from remote. The exploit is publicly available and might be used. The vendo...

CVE-2026-93263: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: clk: eswin: Zero-initialize stack-allocated clkinitdata eswinclkregisterpll and eswinregisterclkdiv declare a struct clkinitdata on the stack and only initialize some of its fields parentdata respectively parenthws...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: libevent (UTSA-2026-124531)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-124531 advisory. Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, libevent has an off-by-one stack buffer overflow in evdns.c when dnsnametolabels formats ...

RHEL 10 : libxml2 (RHSA-2026:71586)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:71586 advisory. The libxml2 library is a development toolbox providing the implementation of various XML standards. Security Fixes: libxml2: libxml2:...

CVE-2026-88359

libfyaml 0.9.6 contains a stack exhaustion vulnerability in fyatomiterformat. When processing a specially crafted YAML document containing a very large literal or folded block scalar, the function repeatedly grows an internal buffer using alloca inside a loop. The allocated stack memory is not...

EUVD-2026-85909

libfyaml 0.9.6 contains a stack exhaustion vulnerability in fyatomiterformat. When processing a specially crafted YAML document containing a very large literal or folded block scalar, the function repeatedly grows an internal buffer using alloca inside a loop. The allocated stack memory is not...

EUVD-2026-86471

Espruino 2v29 commit bffc6d0 contains a stack-based buffer overflow vulnerability in the JavaScript error stack-trace handling path on 64-bit builds. A remote attacker can supply JavaScript input that triggers an exception and reaches jslPrintTokenLineMarker, which passes the address of a 4-byte...

UBUNTU-CVE-2026-93263

In the Linux kernel, the following vulnerability has been resolved: clk: eswin: Zero-initialize stack-allocated clkinitdata eswinclkregisterpll and eswinregisterclkdiv declare a struct clkinitdata on the stack and only initialize some of its fields parentdata respectively parenthws...

CVE-2026-88359

libfyaml 0.9.6 contains a stack exhaustion vulnerability in fyatomiterformat. When processing a specially crafted YAML document containing a very large literal or folded block scalar, the function repeatedly grows an internal buffer using alloca inside a loop. The allocated stack memory is not...