CVE-2019-1068

CVE-2019-1068 Análisis de causa raíz y PoC para una vulnerabilidad de desbordamiento de pila en Microsoft SQL Server mediante la ingeniería inversa de “svl.dll”. Enlaces a nuestro trabajo: 1. Ataberk's Blog 2. Fatih's Blog 3. Cem's Blog...

iCSeeU

Este es un conjunto de herramientas/PoCs/exploits que se pueden utilizar en cámaras de videollamada iCSee a través de LAN y quizás también en cámaras que no son de videollamada. Esto podría usarse fácilmente para flashear firmwares alternativos como reemplazo del método de actualización por tarje...

Router-Exploit-Shovel

Pala de Explotación de Routers Generación Automatizada de Aplicaciones para Tipos de Desbordamiento de Pila en Routers Inalámbricos Router exploits shovel es una herramienta automatizada de generación de aplicaciones para tipos de desbordamiento de pila en routers inalámbricos. La herramienta...

cve-2025-0282-ivanti_rce_reproduction

CVE-2025-0282 — Ivanti Connect Secure / Policy Secure / ZTA Gateways Stack-Based Buffer Overflow RCE CVSS 9.0 — CRITICAL | Actively Exploited Zero-Day | Discovered January 2025 Overview CVE-2025-0282 is a stack-based buffer overflow vulnerability CWE-121 / CWE-787 in the IFT/TLS handling componen...

functrace

functrace - A function tracer functrace is a tool that helps to analyze a binary file with dynamic instrumentation using DynamoRIO http://dynamorio.org/. These are some implemented features based on DynamoRIO: disassemble all the executed code disassemble a specific function dump if these are...

CVE-2023-33669

CVE-2023-33669 Exploit Exploit para una vulnerabilidad de desbordamiento de pila en el router Tenda AC8, específicamente dirigido a la versión de firmware USAC8V4.0siV16.03.34.06. Página oficial del producto. Emulación Puedes colocar el archivo 'prepare.sh' en el directorio raíz del firmware y...

boofuzz

.. image:: https://github.com/jtpereyda/boofuzz/raw/master/artwork/boo-logo-dark.svg :width: 60% :alt: boofuzz logo boofuzz: Network Protocol Fuzzing for Humans .. image:: https://github.com/jtpereyda/boofuzz/actions/workflows/test.yml/badge.svg?branch=master :target:...

H3C Magic R300-2100M - Remote Code Execution

H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the DeltriggerList interface at /goform/aspForm. id: CVE-2023-33629 info: name: H3C Magic R300-2100M - Remote Code Execution author: DhiyaneshDK severity: high description: | H3C Magic R300 version...

CVE-2023-3519

Repositorio de Exploits Stack-Overflow en Citrix CVE-2023-3519 Demostración en Video PoC: https://github.com/Mohammaddvd/CVE-2023-3519/assets/108727157/97fde2d9-2110-40bb-ae08-19163927115c Aviso Legal Este código está destinado únicamente a fines educativos y uso ético para comprender las...

stack-overflow-poc

CVE-2018-12086 PoC https://nvd.nist.gov/vuln/detail/CVE-2018-12086 https://opcfoundation.org/SecurityBulletins/OPC%20Foundation%20Security%20Bulletin%20CVE-2018-12086.pdf TL;DR: some OPC UA stacks are vulnerable to a stack overflow when decoding specially crafted requests. Build mvn clean package...

CVE-2023-34924

CVE-2023-34924 Una vulnerabilidad de desbordamiento de búfer del router H3CMagicB1STV100R012 Información de CVE: root@kitploit: • the name of an affected Product: H3C Magic B1STW B1STV100R012 router • the affected or fixed versions: affected version: H3C-Magic-B1STW - H3CMagicB1STV100R012. Fixed...

CVE-2013-2028-Exploit

CVE-2013-2028 Exploit Vulnerability details Vulnerable software: Nginx 1.3.9 -lp...

CVE-2023-25234_Tenda_AC6_stack_overflow

Este repositorio no tiene un README...

CVE-glibc

CVE-glibc CVE-2015-0235 glibc Get Host by Name Issue Copy and paste to get/check root@kitploit: wget https://github.com/alanmeyer/CVE-glibc/raw/master/get-GHOST.sh chmod +x get-GHOST.sh ./get-GHOST.sh References:...

CVE-2013-3664_MAC

Sketchup MAC Pict Material Palette Stack Corruption - CVE-2013-3664 SketchUp fails to validate the input when parsing an embedded MACPict texture. Arbitrary code execution is proved possible after a malicious texture or thumbnail or background image triggers a stack overflow. The issue can also b...

CVE-2026-90472

msgpack-java through 0.9.12 contains a stack overflow vulnerability in MessageUnpacker.unpackValue that recursively deserializes arrays and maps without nesting depth limits. Attackers can craft payloads with deeply nested arrays to exhaust the deserializing thread's stack and trigger...

EUVD-2026-76848

msgpack-java through 0.9.12 contains a stack overflow vulnerability in MessageUnpacker.unpackValue that recursively deserializes arrays and maps without nesting depth limits. Attackers can craft payloads with deeply nested arrays to exhaust the deserializing thread's stack and trigger...

CVE-2026-90472

msgpack-java through version 0.9.12 contains a stack overflow vulnerability in MessageUnpacker.unpackValue(), which recursively deserializes arrays and maps without enforcing nesting depth limits. An unauthenticated, network-based attacker can craft a payload with deeply nested arrays to exhaust ...

CVE-2024-29671-POC

NEXTU FLETA Wifi6 Router RCE Exploit POC Este documento describe cómo se explotó la vulnerabilidad CVE-2024-29671 en el firmware del router NEXTU FLATA AX1500. Entorno de ejecución Este router está basado en la arquitectura MIPS y utiliza el chipset Realtek con Little-Endian. La versión del...

cve-2020-9373-netgear-r6400

CVE-2020-9373 — Netgear R6400 upnpd Stack Overflow Research A complete three-phase study of the historical Netgear R6400 router vulnerability CVE-2020-9373 UPnP upnpd stack buffer overflow, SSDP on UDP port 1900, unauthenticated RCE/DoS. Three Phases 1. Phase 1 · Reproduction : firmware unpacking...