CVE-2017-7269

CVE-2017-7269 - IIS 6.0 WebDAV 버퍼 오버플로우 CVE-2017-7269의 POC를 Rust로 구현한 것으로, Microsoft 인터넷 정보 서비스IIS 6.0의 WebDAV 서비스를 대상으로 합니다. 취약점 개요 CVE-2017-7269는 Windows Server 2003 R2에 포함된 Microsoft IIS 6.0의 WebDAV 서비스에서 발견된 심각한 스택 기반 버퍼 오버플로우 취약점입니다. 악용에 성공할 경우, 인증되지 않은 공격자가 대상 서버에서 원격 코드 실행을 할 수 있습니다. 기술적 세...

SNMPocalypse-Cisco-Bug-Lets-Hackers-Crash-or-Command-Devices

SNMPocalypse-Cisco-버그-해커가-장치를-충돌시키거나-제어할-수-있게-하다 CVE-2023-20352는 Cisco IOS/IOS XE의 SNMP 엔진에 존재하는 심각한 스택 오버플로 결함입니다. 조작된 SNMP 패킷만으로 원격 공격자는 시스템을 충돌시키거나 루트 제어권을 장악할 수 있습니다. 모든 SNMP 버전이 취약합니다. 지금 패치하지 않으면 완전한 침해 위험이 있습니다. 작성자: Mark Malllia SNMP 소개 SNMPSimple Network Management Protocol는 네트워크 관리의 기반...

CVE-2015-8522.RCE

CVE-2015-8522 IBM Tivoli FastBack Server 6.1.4 애플리케이션은 스택 기반 버퍼 오버플로우 취약점이 존재하여, 위협 행위자가 원격 TCP 연결을 통해 임의 코드 실행ACE을 달성할 수 있습니다. 이 저장소에서 제공하는 PoC는 이 취약점을 활용하여 대상에서 CMD.exe를 실행하고, 들어오는 연결을 처리하여 리버스 셸을 구축합니다. !NOTE 이 PoC는 이전에 공개된 PoC를 기반으로 하며, ASLR 우회 기능이 추가되었고, 일반적인 소프트웨어 공학 패러다임을 따르는 개선된 아키텍처로...

CVE-2025-5548

🛡️ 분석 및 익스플로잇: CVE-2025-5548 사이버보안 석사 | 모듈 6: 취약점 👋 안녕하세요! 내 분석 워크숍에 오신 것을 환영합니다 이 저장소에서는 바이너리 수준의 취약점 분석 및 Windows 환경을 위한 익스플로잇 개발에 대한 실제적인 몰입을 문서화합니다. 이 실험실의 주요 목표는 CVE-2025-5548 을 익스플로잇하여 메모리 손상 오류스택 버퍼 오버플로우의 초기 발견부터 원격 코드 실행RCE까지의 기술적 방법론을 내재화하는 것입니다. 단순히 도구를 실행하는 것이 아니라 메모리가 어떻게 손상되는지, 실행...

CVE-2025-5548

🐞 CVE-2025-5548: FreeFloat FTP Server 1.0 - 스택 기반 버퍼 오버플로우 FreeFloat FTP Server 1.0의 버퍼 오버플로우: 하나의 안전하지 않은 핸들러가 여러 CVE 항목을 생성할 수 있음을 보여줍니다. 📑 목차 이 저장소가 존재하는 이유 이 취약점이 흥미로운 이유 동일한 버그, 여러 CVE 취약점 정보 충돌 유발 익스플로잇 🎓 이 저장소가 존재하는 이유 이 저장소는 메모리 손상 익스플로잇을 가르칠 때 사용하는 자료의 일부입니다. 본업 외에도 여러 사이버 보안 강좌에서 가르치며 차...

Rocky Linux 9.6 [TuxCare] Security Update: vim-X11 / vim-common / vim-enhanced / vim-filesystem / vim-minimal Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1785426678)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1785426678 advisory. - vim is vulnerable to Heap-based Buffer Overflow CVE-2022-0213 - Access of Memory Location Before Start of Buffer in GitHub...

Rocky Linux 8 [CIQ] Security Update: fwupd / fwupd-debuginfo / fwupd-debugsource Multiple Vulnerabilities (crlsa-2021_2566)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20212566 advisory. grub2: acpi command allows privileged user to load crafted ACPI tables when Secure Boot is enabled CVE-2020-14372 grub2: Use-after-free in rmmod command...

AlmaLinux 9.2 [TuxCare] Security Update: xorg-x11-server-Xwayland / xorg-x11-server-Xwayland-devel Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1782484404)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1782484404 advisory. - A stack-based buffer overflow flaw was found in the X.Org X server and Xwayland. A mismatch between the X server and the libXfont2...

Rocky Linux 8 [CIQ] Security Update: fribidi / fribidi-debuginfo / fribidi-debugsource / fribidi-devel Multiple Vulnerabilities (crlsa-2022_7514)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20227514 advisory. fribidi: Stack based buffer overflow CVE-2022-25308 fribidi: Heap-buffer-overflow in fribidicaprtltounicode CVE-2022-25309 fribidi: SEGV in...

Rocky Linux 9 [CIQ] Security Update: thunderbird / thunderbird-debuginfo / thunderbird-debugsource Multiple Vulnerabilities (crlsa-2023_4499)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20234499 advisory. Mozilla: Offscreen Canvas could have bypassed cross-origin restrictions CVE-2023-4045 Mozilla: Incorrect value used during WASM compilation CVE-2023-4046...

Rocky Linux 8 [CIQ] Security Update: aspnetcore-runtime-6.0 / aspnetcore-targeting-pack-6.0 / dotnet / etc Multiple Vulnerabilities (crlsa-2022_0826)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20220826 advisory. dotnet: ASP.NET Denial of Service via FormPipeReader CVE-2022-24464 dotnet: double parser stack buffer overrun CVE-2022-24512 Tenable has extracted the...

AlmaLinux 9.6 [TuxCare] Security Update: libpq / libpq-devel (ALMALINUX9.6:CLSA-2026:1785227558)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1785227558 advisory. - Use of inherently dangerous function PQfn..., resultisint=0, ... in PostgreSQL libpq loexport, loread, lolseek64, and lotell64 functions...

Rocky Linux 9 [CIQ] Security Update: python3-rrdtool / python3-rrdtool-debuginfo / rrdtool / etc (crlsa-2026_34156)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202634156 advisory. rrdtool: Stack buffer overflow in rrdcached handlerequestcreate allows local privilege escalation via unbounded DS/RRA arguments CVE-2026-43958 Tenable has extract...

AlmaLinux 9.2 [TuxCare] Security Update: opensc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1780711381)

The AlmaLinux 9.2 host has a package installed that is affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1780711381 advisory. - OpenSC before 0.27.0-rc1, fixed in commit 3f24f0b, contains a stack buffer overflow vulnerability in pivprocesshistory in...

Rocky Linux 9.6 [TuxCare] Security Update: opensc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1778674879)

The Rocky Linux 9.6 host has a package installed that is affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1778674879 advisory. - A vulnerability was found in OpenSC, OpenSC tools, PKCS11 module, minidriver, and CTK. An attacker could use a crafted USB Devic...

Rocky Linux 10.0 [CIQ] Security Update: icu / icu-debuginfo / icu-debugsource / libicu / libicu-debuginfo / etc (crlsa-2025_11888)

The Rocky Linux 10.0 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202511888 advisory. icu: Stack buffer overflow in the SRBRoot::addTag function CVE-2025-5222 Tenable has extracted the preceding description block directly from the CIQ security...

Rocky Linux 8 [CIQ] Security Update: firefox / firefox-debuginfo / firefox-debugsource Multiple Vulnerabilities (crlsa-2023_4468)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20234468 advisory. Mozilla: Offscreen Canvas could have bypassed cross-origin restrictions CVE-2023-4045 Mozilla: Incorrect value used during WASM compilation CVE-2023-4046...

Rocky Linux 10.2 [CIQ] Security Update: libxml2 / libxml2-debuginfo / libxml2-debugsource / libxml2-devel / etc (crlsa-2026_39304)

The Rocky Linux 10.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202639304 advisory. libxml2: Stack Buffer Overflow in xmllint Interactive Shell Command Handling CVE-2025-6170 Tenable has extracted the preceding description block directly from t...

AlmaLinux 9.2 [TuxCare] Security Update: vim-X11 / vim-common / vim-enhanced / vim-filesystem / vim-minimal (ALMALINUX9.2:CLSA-2026:1772466351)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1772466351 advisory. - Vim is an open source, command line text editor. Prior to 9.1.2148, a stack buffer overflow vulnerability exists in Vim's NetBeans...

Rocky Linux 9 [CIQ] Security Update: libxml2 / libxml2-debuginfo / libxml2-debugsource / libxml2-devel / etc (crlsa-2026_39317)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202639317 advisory. libxml2: Stack Buffer Overflow in xmllint Interactive Shell Command Handling CVE-2025-6170 Tenable has extracted the preceding description block directly from the...