CVE-2025-71407 Nokogiri before 1.18.3 Stack Buffer Overflow and Use-After-Free

Nokogiri before 1.18.3 contains a stack buffer overflow vulnerability in libxml2 when reporting DTD validation errors with long QName prefixes, and a use-after-free vulnerability during validation against untrusted XML Schemas. Attackers can trigger these vulnerabilities by providing malicious DT...

EUVD-2025-210774

Nokogiri before 1.18.3 contains a stack buffer overflow vulnerability in libxml2 when reporting DTD validation errors with long QName prefixes, and a use-after-free vulnerability during validation against untrusted XML Schemas. Attackers can trigger these vulnerabilities by providing malicious DT...

CVE-2025-71407

Nokogiri versions before 1.18.3 contain two vulnerabilities in its bundled libxml2 component: a stack buffer overflow triggered when reporting DTD validation errors with long QName prefixes, and a use-after-free during validation against untrusted XML Schemas. An attacker can exploit these by sup...

SNMPocalypse-Cisco-Bug-Lets-Hackers-Crash-or-Command-Devices

SNMPocalypse-Cisco-Fehler-lässt-Hacker-Geräte-zum-Absturz-bringen-oder-steuern CVE-2023-20352 ist ein kritischer Stack-Überlauf-Fehler in der SNMP-Engine von Cisco IOS/IOS XE. Mit nur präparierten SNMP-Paketen können entfernte Angreifer Systeme zum Absturz bringen oder die Root-Kontrolle...

CVE-2025-27480-The-Silent-Gateway-Risk

CVE-2025-27480-Das-stille-Gateway-Risiko Ermöglicht Angreifern, schädlichen Code auszuführen, ohne dass ein geknacktes Passwort, eine Benutzerinteraktion oder sogar ein Fuß im Netzwerk erforderlich ist. Das ist CVE-2025-27480 Es ist spät, du läufst auf Red Bull – wir kennen das alle. Du behebst e...

CVE-2025-11187

CVE-2025-11187 Stack buffer overflow in PKCS12 PBMAC1 PBKDF2 keylength OpenSSL 3.X Ho trovato questo stack buffer overflow circa un anno fa, si è rivelato un duplicato CVE-2025-11187 Il problema si verifica nella gestione di PKCS PBMAC1 di libcrypto quando il keylength di PBKDF2 è controllato...

CVE-2021-27965

CVE-2021-27965 Semplice PoC per sfruttare CVE-2021-27965 per LPE avviando cmd di sistema. https://vulners.com/cve/CVE-2021-27965 È stato scoperto un problema nel driver Windows firmato MICSYS MsIo64.sys che può portare alla compromissione dell'intero sistema locale. La routine di dispatch degli...

tmux-fuzzing

Laboratorio di Fuzzing: Migliorare il Fuzzing per tmux Software Security @ EPFL, Primavera 2025 Abstract In questo laboratorio, abbiamo potenziato le attività di fuzzing per il multiplexer di terminale tmux nell'infrastruttura OSS-Fuzz di Google. Abbiamo innanzitutto stabilito una baseline...

CVE-2010-5301

CVE-2010-5301 Una proof of concept di un overflow SEH con iniezione arbitraria di DLL Descrizione Kolibrì HTTP Server 2.0 è affetto da un buffer overflow basato su stack. Al momento della scoperta, questa vulnerabilità veniva sfruttata semplicemente sovrascrivendo il puntatore all'istruzione con...

nginxpwn

Exploitation Training -- CVE-2013-2028: Nginx Stack-basierter Pufferüberlauf Dieses Repository enthält den Quellcode von nginx 1.4.0 sowie vorkompilierte Binärdateien mit und ohne Stack-Cookies. Es gibt auch eine Vagrantfile für die einfache Einrichtung. Ankündigung und Patch:...

cve-2019-1663

🚀 Exploitation von CVE-2019-1663 🧩 Einleitung Dieses Repository dokumentiert die Ausnutzung von CVE-2019-1663, einer kritischen Schwachstelle zur Remotecodeausführung RCE in den Cisco-Routern RV110W, RV130W und RV215W Wireless-N VPN. Aufgrund unzureichender Eingabevalidierung in der Weboberfläche...

CVE-2025-5548-FreeFloat-FTP-Buffer-Overflow

CVE-2025-5548 — Buffer Overflow in FreeFloat FTP Server 1.0 Labor für Analyse und Exploit-Entwicklung · Exploit Development · Windows x86 Worum geht es in diesem Repository? Dieses Repository dokumentiert vollständig den Prozess der Analyse und Ausnutzung der Sicherheitslücke CVE-2025-5548 , eine...

CVE-2025-40634

CVE-2025-40634 Le routeur TP-Link Archer AX50 est vulnérable à un débordement de tampon basé sur la pile dans sa version de firmware 1.0.14 Build 20240108 rel.426554555, conduisant à une exécution de code à distance à la fois côté LAN et côté WAN. Cette vulnérabilité a la même cause racine que...

CVE-2026-78322

file-roller (GNOME archive manager) is affected by a stack buffer overflow in the parse_progress_line function used by its 7z and RAR handlers . When a victim opens or extracts a crafted archive containing a file entry with an excessively long path, the path is copied into a fixed-size stack buff...

EUVD-2026-65311

A flaw was found in file-roller. When opening or extracting a malicious 7z or RAR archive containing a file entry with an excessively long path, file-roller's progress-line parsing copies the path into a fixed-size stack buffer using an unbounded string copy. This can trigger a stack buffer...

CVE-2026-78322

A flaw was found in file-roller. When opening or extracting a malicious 7z or RAR archive containing a file entry with an excessively long path, file-roller's progress-line parsing copies the path into a fixed-size stack buffer using an unbounded string copy. This can trigger a stack buffer...

CVE-2026-68960

A stack-based buffer overflow vulnerability exists in SKYSEA Client View and SKYMEC IT Manager. If this vulnerability is exploited, an attacker who can log in to a Windows system on which the affected product is installed may be able to execute arbitrary code on another Windows system that has th...

CVE-2026-68960

A stack-based buffer overflow vulnerability affects SKYSEA Client View and SKYMEC IT Manager , two Windows-based IT management products. An authenticated attacker who can log in to a Windows system running the affected software may be able to execute arbitrary code on a different Windows host tha...

cve-2015-7547-public

Server di attacco PoC per la vulnerabilità CVE-2015-7547 in glibc DNS stub resolver Per testare su macchina locale con una versione vulnerabile di glibc: root@kitploit: user@localhost:/$ echo 'nameserver 127.0.0.127' | sudo tee /etc/resolv.conf user@localhost:/$ echo 'nameserver 127.0.0.127' | su...

cve-2024-27130-poc

CVE-2024-27130-poc CVE-2024-27130 ist eine schwerwiegende Sicherheitslücke, die QNAP Network Attached Storage NAS-Geräte betrifft. Die Schwachstelle beruht auf der unsicheren Verwendung der strcpy-Funktion in der Funktion NoSupportACL des share.cgi-Skripts im QTS-Betriebssystem, was zu einem...