go-without-bounds-cve-2026-67822-stack-overflow-in-tenda-w6-s-wifissidset

CVE-2026-67822 — Tenda W6-S wifiSSIDset Stack Buffer Overflow PoC Companion PoC for the Hunt-Benito article "GO Without Bounds: CVE-2026-67822 — Stack Overflow in Tenda W6-S'swifiSSIDset Form Handler". CVE-2026-67822 CVSS 9.8 Critical, CWE-121 is a stack-based buffer overflow in formwrlSSIDset, t...

cve-2006-6184

CVE-2006-6184 This is a python-based standalone exploit for CVE-2006-6184. This exploit triggers a stack-based buffer overflow in Allied Telesyn TFTP Server AT-TFTP 1.9, and possibly earlier, allowing remote attackers to cause a denial of service or execute arbitrary code. Instructions Updated fo...

kartlanpwn

Kart"LAN"Pwn CVE-2024-45200 Information & Proof-of-Concept for Mario Kart 8 Deluxe's "KartLANPwn" stack-based buffer overflow vulnerability Written by Chad Hyatt | ---|--- CVE| CVE-2024-45200 CVSS 3.1| Undetermined Nintendo.. claims it's a 4.3/10 Bounty Paid| $512 H1 Report| 2611669 Discovered|...

nginx-1.4.0

nginx-1.4.0 For the analysis of CVE-2013-2028 exploit: exp-nginx.rb binary for rop build: nginx...

CVE-2023-0179-PoC

Needle CVE-2023-0179 exploit This repository contains the exploit for my recently discovered vulnerability in the nftables subsystem that was assigned CVE-2023-0179, affecting all Linux versions from 5.5 to 6.2-rc3, although the exploit was tested on 6.1.6. The vulnerability details and writeup c...

CVE-2026-41089-Netlogon

🛡️ AI Security Tool Module CVE-2026-41089: Netlogon Stack Buffer Overflow Official security verification module for the AI Security Tool Ecosystem 🌐 Demo • 📚 Project Website • 💬 Community Chat Site Navigation: Home • Updates • Downloads • Modules 🧠 Conceptual Overview I am publishing a detailed...

nginxpwn

Exploitation Training -- CVE-2013-2028: Nginx Stack Based Buffer Overflow This repository contains the nginx 1.4.0 source code as well as precompiled binaries with and without stack cookies. There's also a Vagrantfile for easy setup. Announcement and patch:...

CVE-2026-102693 RIOT: Remote Stack Buffer Overflow in ATWINC15x0 driver via unsanitized SSID

RIOT is an open-source microcontroller operating system designed for Internet of Things devices and other embedded systems. Prior to 2026.04, the ATWINC15x0 driver's atwinc15x0stasetcurrentssid function uses strcpy to copy an SSID without checking the destination size. When...

CVE-2026-102693

The RIOT open-source microcontroller operating system is vulnerable to a remote stack buffer overflow in the ATWINC15x0 driver prior to version 2026.04 . The root cause is the use of strcpy within the _atwinc15x0_sta_set_current_ssid function, which copies an SSID without verifying the destinatio...

CVE-2021-47881

CVE-2021-47881 Local stack-based buffer overflow in dataSIMS Avionics ARINC 4.5.3 Data Device Corporation Hi, I'm Kağan Çapar. In February 2020 I found a local stack-based buffer overflow in DDC's dataSIMS avionics databus software and published a proof of concept on Exploit-DB in February 2021...

CVE-2026-68907

libIEC61850 is an open-source implementation of IEC 61850 client and server protocols including MMS, GOOSE, Sampled Values, and R-Session. Prior to 1.6.2, checkDataSetAccess reverses the source and destination arguments to StringUtilscopyStringToBuffer while constructing an MMSASSOCIATIONSPECIFIC...

EUVD-2026-102911

libIEC61850 is an open-source implementation of IEC 61850 client and server protocols including MMS, GOOSE, Sampled Values, and R-Session. Prior to 1.6.2, checkDataSetAccess reverses the source and destination arguments to StringUtilscopyStringToBuffer while constructing an MMSASSOCIATIONSPECIFIC...

cve-2025-22457

CVE-2025-22457 Simulation: Stack-Based Buffer Overflow Analysis This project includes the simulation, reverse engineering analysis, and exploitation of a Stack-Based Buffer Overflow vulnerability in a laboratory environment, caused by the lack of input validation strcpy usage in embedded systems...

kernel: Bluetooth: MGMT: validate LTK enc_size on load

A flaw was found in the Linux kernel's Bluetooth management MGMT component. An attacker could exploit a vulnerability in how Long Term Keys LTK are loaded. By providing an oversized encryption size, a stack buffer overflow can occur, potentially leading to a denial of service...

Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update

An update for kernel is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

kernel: Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync

A flaw was found in the Linux kernel's Bluetooth Host Controller Interface HCI synchronization. A local user could trigger a stack buffer overflow by binding a specific type of Bluetooth socket with an excessive number of Bluetooth Isochronous Stream BIS entries. This memory corruption can lead t...

CVE-2017-15950

CVE-2017-15950 PoC exploit for vulnerability CVE-2017-15950 SyncBreeze XML Parser and/or Sync functionality Stack-Based Buffer Overflow. Usage When running the XML payload generator, the script will output a XML file xplSyncBreeze.xml containing the payload to import using SyncBreeze. python3...

netgear_r6700v3_circled

Exploiting a Stack Buffer Overflow on the NETGEAR R6700v3 CVE-2022-27646 with the Help of Symbolic Execution Introduction This repository is intended to demonstrate some functionalities of Morion, a proof-of-concept PoC tool to experiment with symbolic execution on real-world ARMv7 binaries. We...

CVE-2025-5548

Breaking FreeFloat FTP: analysis and exploitation of CVE-2025-5548 Anderson Steven — Master in Cybersecurity, Module 6 Vulnerabilities Individual assignment: Methodology for vulnerability analysis and exploitation Why this repository I did not want to simply hand in "here is the exploit working"...

CVE-2023-38545

usage git clone https://github.com/imfht/CVE-2023-38545 cd CVE-2023-38545/curl-7.74.0 && ./configure --with-openssl make -j 4 python3 socks.py & export ALLPROXY=socks5h://127.0.0.1:9050 ./curl-7.74.0/src/curl $python3 -c "print'A'10000, end=''" -vvvv proof for details please see: this linkin chin...