setcred

FreeBSD setcred2 — research artifacts This subdirectory collects the write-up and working exploits for the setcred2 stack buffer overflow in FreeBSD 14.x kernel. The vulnerability itself is fully documented in setcred.txt. The short version: kernsetcredcopyinsuppgroups uses sizeofgroups where...

CVE-2025-32044

CVE-2025-32044 — Moodle Unauthenticated REST API User Data Exposure Stack Trace Args Leak → Names, Emails, Password Hashes Overview CVE-2025-32044 is a high-severity CVSS 7.5 unauthenticated information disclosure vulnerability in Moodle LMS 4.5.0 through 4.5.2. The vulnerability lies in Moodle's...

Urgent11-Suricata-LUA-scripts

Urgent11-Suricata-LUA-scripts Suricata LUA scripts to detect CVE-2019-12255, CVE-2019-12256, CVE-2019-12258, and CVE-2019-12260 CVE-2019-12255 The script checks for CVE-2019-12255, the packet that is checked needs to have the PSH, ACK, and URG flags set, and have a payload size that exceeds 1500...

CVE-2026-101081

A security flaw has been discovered in D-Link DI-8400 16.07. This vulnerability affects the function menunatmoreasp of the file menunatmore.asp of the component Web Administration Service. The manipulation of the argument opt results in stack-based buffer overflow. The attack can be launched...

CVE-2022-30040

Tenda AX1803 v1.0.0.12890 Denial-of-service Vulnerability Overview Manufacturer's website infomation: https://www.tenda.com.cn/profile/contact.html Firmware download address: https://www.tenda.com.cn/download/default.html Vulnerability description The vulnerability lies in rootfs In / goform /...

ghostlock

GhostLock — Sitio de seguimiento de stack-UAF rtmutex/futex del kernel de Linux Fuente para el rastreador de estado de parches GhostLock : un sitio de una sola página que registra qué distribuciones han publicado una corrección para el uso después de liberación use-after-free de pila rtmutex/fute...

CVE-2026-56139

camel-undertow Rest DSL muteException Stack-Trace Disclosure Reproducer CVE-2026-56139 This project demonstrates an information-disclosure issue in Apache Camel's camel-undertow Rest DSL consumer, tracked as CVE-2026-56139. The muteException option controls whether an uncaught processing...

CVE-2026-6789-Stack-Buffer-Overflow-in-Embedded-TLS-Certificate-Parser

9. CVE-2026-6789 – Stack Buffer Overflow in Embedded TLS Certificate Parser Overview A popular lightweight TLS library simulated contains a stack buffer overflow when parsing X.509 certificate Subject Alternative Name extensions with a crafted length field. Severity: Critical RCE on IoT/Industria...

CVE-2026-41089-LongLogon

LongLogon · CVE-2026-41089 LongLogon is an unauthenticated, non-destructive precondition checker for CVE-2026-41089 , a pre-auth stack buffer overflow in the Windows Netlogon service. With no credentials, and without sending the overflow, it reports whether a domain controller's DNS domain name i...

EUVD-2026-88345

A security flaw has been discovered in D-Link DI-8400 16.07. This vulnerability affects the function menunatmoreasp of the file menunatmore.asp of the component Web Administration Service. The manipulation of the argument opt results in stack-based buffer overflow. The attack can be launched...

CVE-2026-101081

The D-Link DI-8400 running firmware version 16.07 is vulnerable to a stack-based buffer overflow in the Web Administration Service . The flaw exists within the menu_nat_more_asp function of the menu_nat_more.asp file, where manipulating the opt argument can trigger the overflow. This vulnerabilit...

cve-2025-0282-ivanti_rce_reproduction

CVE-2025-0282 — Ivanti Connect Secure / Policy Secure / ZTA Gateways Stack-Based Buffer Overflow RCE CVSS 9.0 — CRITICAL | Actively Exploited Zero-Day | Discovered January 2025 Overview CVE-2025-0282 is a stack-based buffer overflow vulnerability CWE-121 / CWE-787 in the IFT/TLS handling componen...

CVE-2026-40345

deepmerge-ts 8.0.0: DoS recursivo por grafo de objetos Reproduje un fallo de agotamiento de pila en las versiones de deepmerge-ts anteriores a 8.0.0. La parte interesante es que el bloqueo no necesita un objeto anidado enorme. Proviene de la identidad del objeto. Si ambos valores que se fusionan ...

CVE-2026-101074

A weakness has been identified in Netcore NR289-GE 1.4.5102. The affected element is the function password-check of the file /bin/boa of the component Authentication. Executing a manipulation of the argument Username can lead to stack-based buffer overflow. The attack may be launched remotely. Th...

Security Bulletin: IBM DataPower Gateway affected by multiple CVEs in p11-kit

Summary IBM DataPower Gateway has addressed multiple vulnerabilities in p11-kit in version 11.0.0.3 Vulnerability Details CVEID:CVE-2026-2100 DESCRIPTION: A flaw was found in p11-kit. A remote attacker could exploit this vulnerability by calling the CDeriveKey function on a remote token with...

CVE-2017-16994

/ disablemapminadd.c / / / include include include include include include include / offsets might differ, kernel was custom compiled you can read vmlinux and caculate the offset when testing / / define OFFSETKERNELBASE 0x000000 / define MMAPMINADDR 0x1101de8 define DACMMAPMINADDR 0xe8e810 / get...

CVE-2026-101074 Netcore NR289-GE Authentication boa password-check stack-based overflow

A weakness has been identified in Netcore NR289-GE 1.4.5102. The affected element is the function password-check of the file /bin/boa of the component Authentication. Executing a manipulation of the argument Username can lead to stack-based buffer overflow. The attack may be launched remotely. Th...

CVE-2026-101074

A stack-based buffer overflow exists in the Authentication component of Netcore NR289-GE version 1.4.5102 . The vulnerability is located within the password-check function of the /bin/boa file. An attacker can trigger the overflow by manipulating the Username argument, potentially leading to remo...

CVE-2025-0282

PoC for CVE-2025-0282 A remote unauthenticated stack based buffer overflow affecting Ivanti Connect Secure, Ivanti Policy Secure, and Ivanti Neurons for ZTA gateways Overview This is a proof of concept exploit to demonstrate exploitation of CVE-2025-0282, and is based upon the exploitation strate...

ripple20-digi-connect-exploit

Ripple20 Exploit: Digi Connect ME 9210 Authors: Moshe Kol, Shlomi Oberman This repository contains a PoC exploit for CVE-2020-11896, a critical heap-based buffer overflow vulnerability in the Track TCP/IP stack part of the Ripple20 vulnerability suite. The exploit achieves remote code execution R...