CVE-2025-46819

CVE-2025-46819 – Redis Lua Long-String Delimiter Out-of-Bounds Read Malformed long-string delimiter causing Lua lexer OOBs read on Redis 8.2.1. Overview Lua's long-string parser in Redis 8.2.1 mishandles malformed =... sequences, returning sentinel values that lead to buffer underflows or excessi...

sqlite-cte-nest

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · sqlite-cte-nest sqlite-cte-nest Class: Crash Reach: Local SQLite 3.53.4 b09c88c14082339b66c7b7158d609a771e64ca69, SOURCEID 2026-07-24 19:02:57 bf7c7f30031888f4e796e429ab3978879485813aaca6f641c7b33e4e09459bcc - Hwaci...

sagemcom-fast-3890-exploit

Sagemcom Fast 3890 exploit This exploit uses the Cable Haunt vulnerability to pop a shell on the Sagemcom F@ST 3890 50.10.19 cable modem, from local network access. Firmware version 50.10.21 or newer should be secure against Cable Haunt. This Proof of concept has specifically been designed to onl...

CVE-2024-27130

CVE-2024-27130 A Proof of Concept developed by @watchTowr to exploit stack overflow vulnerability to obtain RCE on a vulnerable QNAP device. Follow the watchTowr Labs Team for our Security Research https://labs.watchtowr.com/ https://twitter.com/watchtowrcyber...

CVE-2023-3519

Exploit Repository Stack-Overflow on Citrix CVE-2023-3519 Video Demonstration PoC: https://github.com/Mohammaddvd/CVE-2023-3519/assets/108727157/97fde2d9-2110-40bb-ae08-19163927115c Disclaimer This code is intended solely for educational purposes and ethical use in understanding security...

boofuzz

.. image:: https://github.com/jtpereyda/boofuzz/raw/master/artwork/boo-logo-dark.svg :width: 60% :alt: boofuzz logo boofuzz: Network Protocol Fuzzing for Humans .. image:: https://github.com/jtpereyda/boofuzz/actions/workflows/test.yml/badge.svg?branch=master :target:...

libextractor-ole2-rce

CVE-2026-91752: GNU libextractor Stack Overflow via OLE2 Summary A stack-based buffer overflow in GNU libextractor's OLE2 plugin allows remote denial of service crash and code execution when processing a crafted .doc file. The vulnerability is in processstaroffice ole2extractor.c:349 which...

cve-2020-9373-netgear-r6400

CVE-2020-9373 — Netgear R6400 upnpd Stack Overflow Research A complete three-phase study of the historical Netgear R6400 router vulnerability CVE-2020-9373 UPnP upnpd stack buffer overflow, SSDP on UDP port 1900, unauthenticated RCE/DoS. Three Phases 1. Phase 1 · Reproduction : firmware unpacking...

CVE-2018-20343

CVE-2018-20343 This is a PoC for CVE-2018-20343, a vulnerability in Ken Silverman's Build Engine. The generated .map file triggers a buffer overflow and overwrites the stack as shown below: Open Watcom under DosBox 0.74-2: the analyst controls the stack Under FreeDos 1.2: the analyst controls EIP...

cve-2025-0282-ivanti_rce_reproduction

CVE-2025-0282 — Ivanti Connect Secure / Policy Secure / ZTA Gateways Stack-Based Buffer Overflow RCE CVSS 9.0 — CRITICAL | Actively Exploited Zero-Day | Discovered January 2025 Overview CVE-2025-0282 is a stack-based buffer overflow vulnerability CWE-121 / CWE-787 in the IFT/TLS handling componen...

cve-2010-4221-lab

CVE-2010-4221 — ProFTPD TELNET IAC Stack Overflow: From Patch to RCE A fully reproducible lab and a hand-written, raw-socket exploit for CVE-2010-4221 — the pre-authentication stack buffer overflow in ProFTPD's prnetiotelnetgets — built as a learning exercise in vulnerability research and exploit...

CVE-2026-73321

CVE-2026-73321: PHP worker stack overflow through nested BBCode XenForo before 2.3.13 can exhaust a PHP worker through deeply nested BBCode. Result The public editor/to-html route sends guest-supplied BBCode through XenForo's recursive parser and renderer. It does not apply a raw-length or nestin...

misfortune-cookie

CVE-2014-9222 "Misfortune Cookie" PoC suite Stack overflow in AllegroSoft RomPager's HTTP cookie handling all versions 4.34. A single unauthenticated request with a crafted Cookie: header corrupts memory. Effects: admin auth bypass, DoS/reboot, and with firmware-specific offsets remote code...

CVE-2023-33669

CVE-2023-33669 Exploit Exploit for a stack overflow vulnerability in the Tenda AC8 router, specifically targeting firmware version USAC8V4.0siV16.03.34.06. Official product page. Emulation You can put 'prepare.sh' file in root directory of firmware and execute it. Also for RCE you have to setup...

tenda-ac8v4-rop

Tenda-Ac8v4-PoC Tenda Ac8v4 Stack-Based Overflow to Remote-Code Execution via execution-flow hijacking & multiple-register manipulation exploitation; CVEs are: CVE-2023-33675 CVE-2023-33673 CVE-2023-33672 CVE-2023-33671 CVE-2023-33670 CVE-2023-33669 Marked as N1 - N7 rop.py make sure you hosted...

iCSeeU

This is a suite of tools/PoCs/exploits that can be used iCSee video-call cameras via LAN and maybe non-video call cameras as well. This could easily be used to flash alternative firmwares as a replacement for the SD card update method. Note: Any memory corruption exploit will only work if your...

CVE-2025-34096

🐞 CVE-2025-34096: Easy File Sharing Web Server 7.2 - Stack-Based Buffer Overflow SEH SEH-based buffer overflow in Easy File Sharing Web Server 7.2, reachable through the password recovery endpoint. 📑 Table of Contents Why this repository exists Why this vulnerability is interesting Context and...

CVE-glibc

CVE-glibc CVE-2015-0235 glibc Get Host by Name Issue Copy and paste to get/check wget https://github.com/alanmeyer/CVE-glibc/raw/master/get-GHOST.sh chmod +x get-GHOST.sh ./get-GHOST.sh References: https://googleonlinesecurity.blogspot.com/2016/02/cve-2015-7547-glibc-getaddrinfo-stack.html...

CVE-2022-0435-Poc

CVE-2022-0435stack overflow wget https://releases.ubuntu.com/jammy/ubuntu-22.04.5-live-server-amd64.iso mkdir kernel wget https://kernel.ubuntu.com/mainline/v5.13/amd64/linux-headers-5.13.0-051300-generic5.13.0-051300.202106272333amd64.deb wget...

CVE-2025-22457

CVE-2025-22457 CVE-2025-22457: Python Exploit POC Scanner to Detect Ivanti Connect Secure RCE This script helps identify Ivanti Connect Secure, Policy Secure, or ZTA Gateways that may be vulnerable to CVE-2025-22457 , a critical unauthenticated stack-based buffer overflow in the web process...