cve-2021-43226PoC

CVE-2021-43226 Reproduction Environment Operating system: Win10 20H2 on Hyper-V, build 19042.508. Found a website https://os.click/en, which has a relatively complete collection of Windows images and no backdoor has been discovered yet. Since the PoC I found was compiled with Visual Studio 2013, ...

Urgent11-Suricata-LUA-scripts

Urgent11-Suricata-LUA-scripts Suricata LUA scripts to detect CVE-2019-12255, CVE-2019-12256, CVE-2019-12258, and CVE-2019-12260 CVE-2019-12255 The script checks for CVE-2019-12255, the packet that is checked needs to have the PSH, ACK, and URG flags set, and have a payload size that exceeds 1500...

CVE-2025-0282

CVE-2025-0282 Ivanti Connect Secure IFT TLS Stack Overflow pre-auth RCE CVE-2025-0282 This is purposefully broken in non-trivial ways and will require effort to work as outlined previously in our exploitation technique blogpost. To understand this vulnerability, you can take a look at our technic...

Elasticsearch-Exploit-CVE-2023-31419

Elasticsearch StackOverflow vulnerability A flaw was discovered in Elasticsearch, affecting the search API that allowed a specially crafted query string to cause a Stack Overflow and ultimately a Denial of Service. Affected Versions: Elasticsearch versions from 7.0.0 to 7.17.12 and from 8.0.0 to...

CVE-2013-2028-Exploit

CVE-2013-2028 Exploit Vulnerability details Vulnerable software: Nginx 1.3.9 -lp 4. Let the exploit find actual value of the canary, and start reverse-shell...

DIR8xx_PoC

phpcgi phpcgi is responsible for processing requests to .php, .asp and .txt pages. Also, it checks whether a user is authorized or not. Nevertheless, if a request is crafted in a proper way, an attacker can easily bypass authorization and execute a script that returns a login and password to a...

CVE-2013-3664_MAC

Sketchup MAC Pict Material Palette Stack Corruption - CVE-2013-3664 SketchUp fails to validate the input when parsing an embedded MACPict texture. Arbitrary code execution is proved possible after a malicious texture or thumbnail or background image triggers a stack overflow. The issue can also b...

sqlite-collate-depth

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · sqlite-collate-depth sqlite-collate-depth Class: Crash Reach: Local SQLite 3.53.4 b09c88c14082339b66c7b7158d609a771e64ca69, SOURCEID 2026-07-24 19:02:57 bf7c7f30031888f4e796e429ab3978879485813aaca6f641c7b33e4e09459bcc...

CVE-2025-46819

CVE-2025-46819 – Redis Lua Long-String Delimiter Out-of-Bounds Read Malformed long-string delimiter causing Lua lexer OOBs read on Redis 8.2.1. Overview Lua's long-string parser in Redis 8.2.1 mishandles malformed =... sequences, returning sentinel values that lead to buffer underflows or excessi...

sqlite-cte-nest

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · sqlite-cte-nest sqlite-cte-nest Class: Crash Reach: Local SQLite 3.53.4 b09c88c14082339b66c7b7158d609a771e64ca69, SOURCEID 2026-07-24 19:02:57 bf7c7f30031888f4e796e429ab3978879485813aaca6f641c7b33e4e09459bcc - Hwaci...

sagemcom-fast-3890-exploit

Sagemcom Fast 3890 exploit This exploit uses the Cable Haunt vulnerability to pop a shell on the Sagemcom F@ST 3890 50.10.19 cable modem, from local network access. Firmware version 50.10.21 or newer should be secure against Cable Haunt. This Proof of concept has specifically been designed to onl...

CVE-2024-27130

CVE-2024-27130 A Proof of Concept developed by @watchTowr to exploit stack overflow vulnerability to obtain RCE on a vulnerable QNAP device. Follow the watchTowr Labs Team for our Security Research https://labs.watchtowr.com/ https://twitter.com/watchtowrcyber...

CVE-2023-3519

Exploit Repository Stack-Overflow on Citrix CVE-2023-3519 Video Demonstration PoC: https://github.com/Mohammaddvd/CVE-2023-3519/assets/108727157/97fde2d9-2110-40bb-ae08-19163927115c Disclaimer This code is intended solely for educational purposes and ethical use in understanding security...

H3C Magic R300-2100M - Remote Code Execution

H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the DeltriggerList interface at /goform/aspForm. id: CVE-2023-33629 info: name: H3C Magic R300-2100M - Remote Code Execution author: DhiyaneshDK severity: high description: | H3C Magic R300 version...

boofuzz

.. image:: https://github.com/jtpereyda/boofuzz/raw/master/artwork/boo-logo-dark.svg :width: 60% :alt: boofuzz logo boofuzz: Network Protocol Fuzzing for Humans .. image:: https://github.com/jtpereyda/boofuzz/actions/workflows/test.yml/badge.svg?branch=master :target:...

libextractor-ole2-rce

CVE-2026-91752: GNU libextractor Stack Overflow via OLE2 Summary A stack-based buffer overflow in GNU libextractor's OLE2 plugin allows remote denial of service crash and code execution when processing a crafted .doc file. The vulnerability is in processstaroffice ole2extractor.c:349 which...

cve-2020-9373-netgear-r6400

CVE-2020-9373 — Netgear R6400 upnpd Stack Overflow Research A complete three-phase study of the historical Netgear R6400 router vulnerability CVE-2020-9373 UPnP upnpd stack buffer overflow, SSDP on UDP port 1900, unauthenticated RCE/DoS. Three Phases 1. Phase 1 · Reproduction : firmware unpacking...

CVE-2018-20343

CVE-2018-20343 This is a PoC for CVE-2018-20343, a vulnerability in Ken Silverman's Build Engine. The generated .map file triggers a buffer overflow and overwrites the stack as shown below: Open Watcom under DosBox 0.74-2: the analyst controls the stack Under FreeDos 1.2: the analyst controls EIP...

cve-2025-0282-ivanti_rce_reproduction

CVE-2025-0282 — Ivanti Connect Secure / Policy Secure / ZTA Gateways Stack-Based Buffer Overflow RCE CVSS 9.0 — CRITICAL | Actively Exploited Zero-Day | Discovered January 2025 Overview CVE-2025-0282 is a stack-based buffer overflow vulnerability CWE-121 / CWE-787 in the IFT/TLS handling componen...

cve-2010-4221-lab

CVE-2010-4221 — ProFTPD TELNET IAC Stack Overflow: From Patch to RCE A fully reproducible lab and a hand-written, raw-socket exploit for CVE-2010-4221 — the pre-authentication stack buffer overflow in ProFTPD's prnetiotelnetgets — built as a learning exercise in vulnerability research and exploit...