CVE-2026-41089

🚨 CVE-2026-41089 - Критическая уязвимость Windows Netlogon, приводящая к удаленному выполнению кода RCE ⚠️ Критическая уязвимость Windows Netlogon, позволяющая неаутентифицированным злоумышленникам удаленно выполнять код на контроллерах домена. 📖 Обзор CVE-2026-41089 — это критическая уязвимость,...

CVE-2026-41089

CVE-2026-41089 root@kitploit: ██████╗██╗ ██╗███████╗ ██╗ ██╗ ██╗ ██████╗ ██████╗ ██╔════╝██║ ██║██╔════╝ ██║ ██║███║██╔═████╗██╔═████╗ ██║ ██║ ██║█████╗ ███████║╚██║██║██╔██║██║██╔██║ ██║ ╚██╗ ██╔╝██╔══╝ ██╔══██║ ██║████╔╝██║████╔╝██║ ╚██████╗ ╚████╔╝ ███████╗ ██║ ██║ ██║╚██████╔╝╚██████╔╝ ╚═════...

CVE-2026-41089-LongLogon

LongLogon · CVE-2026-41089 LongLogon — это неаутентифицированная, неразрушающая проверка предусловия для CVE-2026-41089 , столового переполнения буфера до аутентификации в службе Windows Netlogon. Без учетных данных и без отправки переполнения он сообщает, достаточно ли длинно DNS-доменное имя...

setcred

FreeBSD setcred2 — 연구 아티팩트 이 하위 디렉토리는 FreeBSD 14.x 커널의 setcred2 스택 버퍼 오버플로우에 대한 분석 문서와 작동하는 익스플로잇을 수집합니다. 취약점 자체는 setcred.txt에 완전히 문서화되어 있습니다. 간단히 말하면: kernsetcredcopyinsuppgroups는 groups가 gidt 일 때 sizeofgroups를 사용하여 고정 크기 커널 스택 배열로의 copyin에 대해 4바이트가 아닌 8바이트 스트라이드를 생성합니다. 오버플로우는 권한 검사 전에 권한이 없는...

CVE-2026-82593

A flaw has been found in D-Link DIR-825M 1.1.8. This impacts the function sub41802C of the file /boafrm/formLtefotaUpgradeFibocom of the component LTE Module Firmware Upgrade. This manipulation of the argument fotaurl causes stack-based buffer overflow. The attack is possible to be carried out...

CVE-2026-82592

A vulnerability was detected in D-Link DIR-825M 1.1.8. This affects the function sub46725C of the file /boafrm/formDiskFormat of the component Disk Formatting Handler Endpoint. The manipulation of the argument partition results in stack-based buffer overflow. The attack can be executed remotely...

CVE-2026-76070

CVE-2026-76070: Netis NC63 login.cgi의 Base64 디코딩된 비밀번호를 통한 인증되지 않은 사전 인증 스택 버퍼 오버플로로 인한 RCE 연구자: Özcan Ersan @ozcanpng 공개 상태 CVE: CVE-2026-76070 벤더: Netis Systems Co., Ltd. 제품: Netis NC63 Wireless AC1200 Router 테스트된 펌웨어: NC63V3.0.0.3327 영향받는 구성 요소: /bin/netis.cgi 엔드포인트: POST /cgi-bin/login.cgi...

w48crash

WebMod 스택 버퍼 오버플로 CVE-2007-1260 작성: cybermind Kevin Masterson [email protected] WebMod 사이트 아카이브: https://web.archive.org/web/20080517044559/http://djeyl.net/w.php 취약한 버전: 0.48, Win32 및 Linux 모두. 이전 버전도 취약할 수 있습니다. 이것은 HLDS의 모든 버전에서 작동합니다. 취약점 유형: DoS, HLDS가 실행 중인 사용자 권한 하의 원격 코드 실행. 설명: HTTP...

CVE-2022-41220

CVE-2022-41220 설명 md2roff 1.9는 처리할 연속된 문자가 대량으로 포함된 Markdown 파일을 통해 스택 기반 버퍼 오버플로가 발생합니다. 재현 취약점을 재현하려면 취약한 버전의 md2roff버전 1.9를 다운로드하십시오: root@kitploit: git clone https://github.com/nereusx/md2roff.git cd md2roff git checkout 9241b8cfeb687c57099f3ef45f03a8ad3f291cf4 make 프로젝트가 컴파일되면 퍼즈 테스트로 생성된 악성...

CVE-2026-82539

CVE-2026-82539 제출자: Nicola Giuffrida 정보 제조사: TOTOLINK 제조사 웹사이트: TOTOLINK 모델: A720R 펌웨어 버전: V4.1.5cu.630B20250509 펌웨어 다운로드 주소: TOTOLINK 심각도 CVSS v4.0 기본 점수: 8.7 높음 벡터: CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N 취약점 세부 정보 cstecgi.cgi 펌웨어 바이너리에 스택 기반 버퍼 오버플로우가 존재하며, 인증된 관리자가 프로세...

PT-2026-83519

A vulnerability was determined in NASA Trick 19.6.0. This issue affects the function JSONVariableServerThread::parse request of the file trick source/sim services/JSONVariableServer/JSONVariableServerThread.cpp of the component TCP Socket Handler. This manipulation causes stack-based buffer...

CVE-2025-60752

CVE-2025-60752 PoC della CVE-2025-60752 Prodotto interessato: Tinyc Http Server L'articolo completo con i dettagli è disponibile all'indirizzo https://zer0matt.blogspot.com/2026/05/cve-2025-60752-tinyc-http-server-stack.html Descrizione Si verifica un overflow del buffer nello stack quando Tinyc...

EUVD-2026-67944

A pre-authentication stack-based buffer overflow vulnerability exists in the httpgdprdecrypt function of TL-MR100 V3.20 due to insufficient bounds checking of encrypted requests to the /cgi/login endpoint. An adjacent unauthenticated attacker with access to the router's web management interface c...

CVE-2026-75118

A pre-authentication stack-based buffer overflow vulnerability exists in the httpgdprdecrypt function of TL-MR100 V3.20 due to insufficient bounds checking of encrypted requests to the /cgi/login endpoint. An adjacent unauthenticated attacker with access to the router's web management interface c...

CVE-2026-75118

CVE-2026-75118 is a pre-authentication stack-based buffer overflow in the http_gdpr_decrypt function of the TP-Link TL-MR100 V3.20 router, caused by insufficient bounds checking of encrypted requests to the /cgi/login endpoint. An unauthenticated attacker on an adjacent network can trigger memory...

CVE-2026-77217

PLANET GS-4210-16P2S V3 firmware before 3.441b260626 contains authenticated stack buffer overflow and null pointer dereference vulnerabilities in /cgi-bin/dispatcher.cgi. The webradiusSrvpost family of handlers copies the radKey, radKey0, radDftParamKey, radName, and radIp POST parameters into...

CVE-2026-77218

PLANET GS-4210-16P2S V3 firmware before 3.441b260626 contains authenticated stack buffer overflow vulnerabilities in /cgi-bin/dispatcher.cgi. The webloginfirstpost handler copies the usrPass POST parameter into a fixed-size stack buffer without length validation, the websysenablePasswdpost handle...

CVE-2026-75126

PLANET GS-4210-16P2S V3 firmware before 3.441b260626 contains multiple authenticated stack buffer overflow vulnerabilities in /cgi-bin/dispatcher.cgi. The following handlers copy attacker-controlled POST parameters into fixed-size stack buffers without length validation:...

CVE-2026-75124

PLANET GS-4210-16P2S V3 firmware before 3.441b260626 contains a pre-authentication memory corruption vulnerability in the web management interface where the readHttpParam function copies an oversized HTTP query string without guaranteeing NUL termination, allowing parsequerystring to process...

EUVD-2026-66417

A stack-based buffer overflow vulnerability exists in the Dia diagram editor when processing Network Bus objects from Dia XML project files. In objects/network/bus.c, busload reads the number of bus handles from the file attribute "bushandles" using attributenumdata without validating an upper...