system_bt_AOSP10_r33_CVE-2022-20229

Fluoride 蓝牙栈 在 AOSP 上构建和运行 直接构建 AOSP — Fluoride 默认包含在内。 在 Linux 上构建和运行 Ubuntu 使用说明，已在 14.04 Clang 3.5.0 和 16.10 Clang 3.8.0 上测试通过 下载源代码 mkdir /fluoride cd /fluoride git clone https://android.googlesource.com/platform/system/bt 安装依赖（需要 sudo 权限）： cd /fluoride/bt build/installdeps.sh 然后获取第三方依赖： cd...

iCSeeU

这是一套可用的工具/PoC/漏洞利用程序，用于通过局域网（LAN）控制iCSee视频通话摄像头（也可能适用于非视频通话摄像头）。该工具可轻松用于刷写替代固件，以替代SD卡更新方法。 注意： 任何内存破坏漏洞利用仅在摄像头的固件版本为 V5.00.R02.000949U5.10000.141324.0000010 或 V5.00.R02.000807E5.10000.346724.0000010 时有效——这些漏洞利用依赖于固定的偏移量，而偏移量随每次固件构建而变化。 博客 0 枚举、拆解与固件提取 1 学习摄像头的语言 2 发现无用的整数溢出 + 一些有用的漏洞 3 栈溢出之死 +...

USN-8908-1 bluez vulnerabilities

Michael Bommarito discovered that BlueZ incorrectly handled codec capability storage in the A2DP profile. An attacker could possibly use this issue to cause a stack buffer overflow, resulting in a denial of service or arbitrary code execution. This issue only affected Ubuntu 20.04 LTS, Ubuntu 22....

cve-2009-3555-test-server

这是什么？ 这是一个使用Go TLS栈的vendored fork实现的TLS服务器，其中强制禁用了重新协商指示扩展，这将触发OpenSSL 3.0+中针对CVE-2009-3555的缓解措施。注意，它实际上并不容易受到CVE-2009-3555的影响，因为Go TLS栈根本不允许重新协商。 该程序的作用是充当测试服务器，用于测试那些拒绝连接到具有不安全客户端重新协商配置的服务器（例如没有设置SSLOPALLOWUNSAFELEGACYRENEGOTIATION选项的OpenSSL 3.0+）的TLS客户端。...

cve-2020-11651

CVE-2020-11651 这是一个针对 CVE-2020-11651 的 POC，可以在 SaltStack Master 上获取预授权 RCE，以及/或所有相关 Minion。有关该问题的详细信息在此。不包含 2020-11652 的 POC。 通过创建 salt.cmd 运行器并使用 cmd.execcode 函数，在 Master 上获取命令执行权限。没有实现交互性，你需要获取一个反弹 Shell。 使用 在 Debian10 上测试，目标也是 Debian10 实例。需要 ncat 来接收和发送 Shell，以及 pip3 install salt 库用于传输。...

CVE-2026-84035 Multiple vulnerabilities affect the Sniffer component as part of IBM Guardium Data Protection

IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to a stack-based buffer overflow...

CVE-2026-84035

IBM Guardium Data Protection versions 12.0, 12.1, and 12.2 are affected by a stack-based buffer overflow (CWE-121) within the Sniffer component . This vulnerability could allow a remote attacker to execute arbitrary code. To address this, IBM recommends applying the latest Sniffer patch available...

encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal

A flaw was found in the encoding/asn1 package in Go. An attacker could provide a specially crafted, deeply-nested Abstract Syntax Notation One ASN.1 structure, leading to excessive recursion during the Unmarshal operation. This could result in stack exhaustion and a Denial of Service DoS conditio...

domato

Domato 🍅 A DOM fuzzer Written and maintained by Ivan Fratric, [email protected] Copyright 2017 Google Inc. All Rights Reserved. Licensed under the Apache License, Version 2.0 the "License"; you may not use this file except in compliance with the License. You may obtain a copy of the License ...

nemesis

N E M E S I S - 构建与注入 Nemesis 项目旨在为类 UNIX 和 Windows 系统提供一个基于命令行的、可移植的人类 IP 栈。该套件按协议分类，允许通过简单的 shell 脚本对注入的数据包进行有用的脚本化处理。 最新版本始终可在 GitHub 上获取： https://github.com/libnet/nemesis/releases 主要特点 支持 ARP/RARP、DNS、ETHERNET、ICMP、IGMP、IP、OSPF、RIP、TCP 和 UDP 协议 在类 UNIX 系统上进行第 2 层或第 3 层注入 在 Windows 系统上仅支持第 2...

CVE-2026-12109

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow an attacker with administrative privileges and access to the local management interface to execute arbitrary code due to an unbounded write to a fixed-size stack buffer...

CVE-2026-12109 Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow an attacker with administrative privileges and access to the local management interface to execute arbitrary code due to an unbounded write to a fixed-size stack buffer...

EUVD-2026-95265

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow an attacker with administrative privileges and access to the local management interface to execute arbitrary code due to an unbounded write to a fixed-size stack buffer...

CVE-2026-12109

IBM Security Verify Access (10.0 through 10.0.9.2) and IBM Verify Identity Access (11.0 through 11.0.3) are vulnerable to an unbounded write to a fixed-size stack buffer (CWE-787). This flaw could allow an attacker with administrative privileges and access to the local management interface to exe...

nOBEX

nOBEX 简介 nOBEX 允许模拟 PBAP、MAP 和 HFP 配置文件，以测试使用这些配置文件的车辆信息娱乐系统和类似设备。nOBEX 提供 PBAP 和 MAP 客户端，用于从真实手机克隆这些配置文件的真实虚拟文件系统。这意味着可以下载整个电话簿和所有短信。原始 vcard、XML 列表和 MAP BMSG 结构都会被存储，并且可以根据需要进行修改以进行负面测试。然后，nOBEX 可以充当 PBAP 和 MAP 服务器，允许车辆和其他设备连接并检索电话簿和消息信息。Vcard、BMSG 和 XML...

PIE-Stack-Clash-CVE-2017-1000253

PIE-Stack-Clash-CVE-2017-1000253 在容器中演示CVE-2017-1000253。 此演示依赖于在CentOS上执行漏洞利用的Qualys POC代码。 安装一个易受攻击的内核 1.安装 CentOS 7 2.安装 Docker 3.编辑 /etc/yum.repos.d/CentOS-Vault.repo 文件： 1.将每个条目路径更改为包含 7.3.1611： baseurl=http://vault.centos.org/7.3.1611/os/$basearch/...

BIOS-stuff-related-programming

BIOS-stuff-related-programming 最终目标：使用BIOS网络栈实现BIOS Rootkit和RSHELL...

Moderate: Red Hat Security Advisory: glibc security, bug fix, and enhancement update

An update for glibc is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

glibc: Glibc: Denial of Service via stack exhaustion during tilde expansion

A flaw was found in glibc. When processing paths that start with a tilde followed by a username, the wordexp function can be forced to allocate an excessive amount of memory on the program's stack. A remote attacker could exploit this by providing a very long username, leading to a stack exhausti...

BLESuite-CLI

BLESuiteCLI 自述文件 BLESuiteCLI 是一个命令行工具，提供了一种更简便的方式来测试低功耗蓝牙（BLE）设备。该工具使用 BLESuite Python 库，该库利用 pygattlib 和 Bluez 蓝牙协议栈，使我们能够通过属性协议（ATT）上的通用属性配置文件（GATT）对 BLE 设备进行扫描、读取和写入。该工具的目标是创建 Bluez gatttool 的替代方案，gatttool 通常用于通过 GATT/ATT 协议与 BLE 设备通信。 功能： 命令行工具和独立的 Python 包 扫描 BTLE 设备 扫描 BTLE 设备的主要服务和特征...