nginxpwn

Exploitation Training -- CVE-2013-2028: Nginx Stack Based Buffer Overflow This repository contains the nginx 1.4.0 source code as well as precompiled binaries with and without stack cookies. There's also a Vagrantfile for easy setup. Announcement and patch:...

CVE-2017-14980

Exploit-CVE-2017-14980 PoC exploit for CVE-2017-14980 — a stack-based buffer overflow vulnerability in Sync Breeze Enterprise 10.0.28. 📖 Full technical analysis of the exploit: 👉 https://davigsantana.github.io/posts/buffer-overflow/ About This repository contains a proof-of-concept PoC developed...

CVE-2026-53921-PoC-Exploit

CVE-2026-53921 – odhcpd Stack Overflow ⚠️ For educational and authorized testing only. Unauthorized use is illegal. 📖 Vulnerability Overview CVE-2026-53921 is a critical stack buffer overflow in OpenWrt’s odhcpd daemon – the default DHCPv6/DHCPv4/RA server. 🔍 How it works The vulnerability exists...

netgear_r6700v3_circled

Exploiting a Stack Buffer Overflow on the NETGEAR R6700v3 CVE-2022-27646 with the Help of Symbolic Execution Introduction This repository is intended to demonstrate some functionalities of Morion, a proof-of-concept PoC tool to experiment with symbolic execution on real-world ARMv7 binaries. We...

bandiview-7.05-vuln-PoC

bandiview-7.05-vuln-PoC This repository contains a PoC for vulnerabilities uncovered in Bandiview 7.05 using fuzzing CVE-2024-45870 JXR File Parsing DoS Vulnerability CVE-2024-45871 PSD File Parsing DoS Vulnerability CVE-2024-45872 PSD File Parsing Stack Buffer Overflow Details Software: BandiVie...

TORQUE-Resource-Manager-2.5.x-2.5.13-stack-based-buffer-overflow-exploit-CVE-2014-8729-CVE-2014-878

TORQUE-Resource-Manager-2.5.x-2.5.13-stack-based-buffer-overflow-exploit-CVE-2014-8729-CVE-2014-878 Exploit Title: TORQUE Resource Manager 2.5.x-2.5.13 stack based buffer overflow Date: 10 Nov 2014 Exploit Author: @inso - Moussajee Thomas, @socks - Laurenceau Gary Vulnerability discovered by:...

CVE-2025-23266

CVE-2025-23266 Author: Mark Mallia Target platform: Ubuntu 22.04, FastAPI v2.4.3 → patched to v2.5.1 on 2025‑10‑02 1 – In a nutshell: what does this attack involve FastAPI’s parserequest routine copies HTTP request headers into a small buffer that lives on the caller’s stack. If an attacker sends...

kartlanpwn

Kart"LAN"Pwn CVE-2024-45200 Information & Proof-of-Concept for Mario Kart 8 Deluxe's "KartLANPwn" stack-based buffer overflow vulnerability Written by Chad Hyatt | ---|--- CVE| CVE-2024-45200 CVSS 3.1| Undetermined Nintendo.. claims it's a 4.3/10 Bounty Paid| $512 H1 Report| 2611669 Discovered|...

cve-2015-7547

PoC attack server for CVE-2015-7547 vulnerability in glibc DNS resolver To test on local machine with a vulnerable glibc version: user@localhost:/ echo 'nameserver 127.0.0.127' | sudo tee /etc/resolv.conf user@localhost:/ echo 'nameserver 127.0.0.127' | sudo tee -a /etc/resolv.conf user@localhost...

QuickHeal

QuickHeal CVE-2017-5005 for Quick Heal Antivirus Advisory Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability. The software performs operations on a memory buffer, but it can read from or write to a memory location that is outside of the intended boundary of the...

CVE-2021-42756

CVE-2021-42756 Multiple stack-based buffer overflow vulnerabilities CWE-121 in the proxy daemon of FortiWeb 5.x all versions, 6.0.7 and below, 6.1.2 and below, 6.2.6 and below, 6.3.16 and below, 6.4 all versions may allow an unauthenticated remote attacker to achieve arbitrary code execution via...

CTFs

CTF Writeups Hey there, I'm Sean and I enjoy doing CTF problems in my spare time. My current position has me doing a lot of binary exploitation and software reverse engineering so I tend to focus on those categories. Most writeups that I see online suck and I hope these do a better job explaining...

CVE-2025-60854

CVE-2025-60854 D-link AX1500 Vulnerability I recently conducted a vulnerability analysis on a D-Link router and would like to document my findings. Target model: D-Link AX1500 Version : 1.20.01 and below The CVE number for this issue is currently published. The vulnerable function is as follows:...

CVE-2023-0179-PoC

Needle CVE-2023-0179 exploit This repository contains the exploit for my recently discovered vulnerability in the nftables subsystem that was assigned CVE-2023-0179, affecting all Linux versions from 5.5 to 6.2-rc3, although the exploit was tested on 6.1.6. The vulnerability details and writeup c...

Dnstracer-1.9-Fix

Dnstracer-1.9-Fix dnstracer dnstracer determines where a given Domain Name Server DNS gets its information from for a given hostname, and follows the chain of DNS servers back to the authoritative answer. Problem Stack-based buffer overflow in dnstracer through 1.9 allows attackers to execute...

CVE-2025-38676

CVE-2025-38676 — Linux Kernel ≤ 6.17-rc2 AMD IOMMU stack buffer overflow This repo provides safe, non-exploit PoC resources to study CVE-2025-38676: Info-gathering + safety tools QEMU boot harness to exercise long kernel cmdline permutations Hardening guidance GRUB/UEFI/Secure Boot; baseline...

CVE-2010-5301

CVE-2010-5301 A proof of concept of an SEH overflow with arbitrary dll injection Description Kolibrì HTTP Server 2.0 is affected by a stack-based buffer overflow. At the time of discovery this vulnerability was exploited by simply overwriting the instruction pointer with a JMP ESP instruction,...

codeql-buffer-overflow-variant

codeql-buffer-overflow-variant A deliberately vulnerable, 170-line C program used as a CodeQL static-analysis target. It reproduces the bug class of CVE-2020-8597 — the pppd EAP rhostname stack buffer overflow CWE-120 — in a program that shares none of pppd's function names, call depth, or dispat...

tmux-fuzzing

Fuzzing Lab: Enhancing Fuzzing for tmux Software Security @ EPFL, Spring 2025 Abstract In this lab, we enhanced the fuzzing efforts for the tmux terminal multiplexer within Google's OSS-Fuzz infrastructure. We first established a baseline by evaluating the line coverage of the existing input-fuzz...

go-without-bounds-cve-2026-67822-stack-overflow-in-tenda-w6-s-wifissidset

CVE-2026-67822 — Tenda W6-S wifiSSIDset Stack Buffer Overflow PoC Companion PoC for the Hunt-Benito article "GO Without Bounds: CVE-2026-67822 — Stack Overflow in Tenda W6-S'swifiSSIDset Form Handler". CVE-2026-67822 CVSS 9.8 Critical, CWE-121 is a stack-based buffer overflow in formwrlSSIDset, t...