nginxpwn

تدريب على الاستغلال -- CVE-2013-2028: تجاوز سعة المخزن المؤقت Stack Based Buffer Overflow في Nginx يحتوي هذا المستودع على الكود المصدري لـ nginx 1.4.0 بالإضافة إلى الملفات الثنائية المجمعة مسبقًا مع وبدون ملفات تعريف الارتباط المكدسة stack cookies. يوجد أيضًا ملف Vagrantfile للإعداد السهل. الإعلا...

CVE-2026-107678 FFmpeg through 9.0.2 Stack Exhaustion via Recursive Free of pssh Boxes

FFmpeg through 9.0.2 contains a stack exhaustion vulnerability in avencryptioninitinfofree in libavutil/encryptioninfo.c, which recursively frees AVEncryptionInitInfo linked lists built by the MOV demuxer's movreadpssh. Attackers can supply a crafted MP4 file with tens of thousands of small pssh...

CVE-2026-107678 FFmpeg through 9.0.2 Stack Exhaustion via Recursive Free of pssh Boxes

FFmpeg through 9.0.2 contains a stack exhaustion vulnerability in avencryptioninitinfofree in libavutil/encryptioninfo.c, which recursively frees AVEncryptionInitInfo linked lists built by the MOV demuxer's movreadpssh. Attackers can supply a crafted MP4 file with tens of thousands of small pssh...

EUVD-2026-95083

FFmpeg through 9.0.2 contains a stack exhaustion vulnerability in avencryptioninitinfofree in libavutil/encryptioninfo.c, which recursively frees AVEncryptionInitInfo linked lists built by the MOV demuxer's movreadpssh. Attackers can supply a crafted MP4 file with tens of thousands of small pssh...

CVE-2026-107678

FFmpeg through 9.0.2 contains a stack exhaustion vulnerability in avencryptioninitinfofree in libavutil/encryptioninfo.c, which recursively frees AVEncryptionInitInfo linked lists built by the MOV demuxer's movreadpssh. Attackers can supply a crafted MP4 file with tens of thousands of small pssh...

CVE-2026-107678

Versions of FFmpeg through 9.0.2 are vulnerable to a stack exhaustion vulnerability in the av_encryption_init_info_free() function located in libavutil/encryption_info.c. The issue stems from the recursive freeing of AVEncryptionInitInfo linked lists created by the MOV demuxer's mov_read_pssh() f...

windows_kernel_shadow_stack

إثباتات المفاهيم يهدف هذا المشروع إلى إبراز جوانب معينة من تخفيف حماية المكدس الظل shadow stack المطبَّق من مايكروسوفت في ويندوز 11. الكود مخصص تحديدًا لإصدار ويندوز 11 24H2. قد لا يعمل على إصدارات أخرى من ويندوز 11، بسبب إدارة إزاحات النواة kernel offset management. ينقسم المشروع إلى جزأين: عميل...

Weggli_rules_SSTIC2023

فيما يلي قائمة منسقة لاستعلامات weggli يمكنك قراءتها واستخدامها واحدة تلو الأخرى، أو تشغيلها دفعة واحدة: الاستخدام: $ bash dangerousfunctions.qry code.c $ bash mallocoverflow.qry -e cc sourcedir/ هناك ثلاث فئات: 1. الدوال الخطيرة: مثل strcpy, system، وغيرها.. 2. stack : يحاول اكتشاف النسخ على...

cve-2026-25994_PJSIP

CVE-2026-25994 – تجاوز سعة المخزن المؤقت للمكدس في PJNATH ICE pjsip ≤ 2.16 نظرة عامة CVE-2026-25994 هو ثغرة أمنية من نوع تجاوز سعة المخزن المؤقت للمكدس تؤثر على تنفيذ ICE Interactive Connectivity Establishment في pjsip ≤ 2.16، وتحديدًا داخل مكوّن PJNATH. توجد الثغرة في الدالة:...

CVE-2025-2620-poc

استغلال CVE-2025-2620 إثبات المفهوم نظرة عامة يحتوي هذا المستودع على استغلال متقدم PoC لثغرة CVE-2025-2620 ، وهي ثغرة حرجة من نوع تجاوز سعة المخزن المؤقت القائم على المكدس تم اكتشافها في جهاز التوجيه D-Link DAP-1620 الذي يعمل بإصدار البرنامج الثابت 1.03. تسمح هذه الثغرة للمهاجمين عن بُعد بدون...

CVE-2022-26937

إثبات المفهوم لتعطل نظام ملفات شبكة ويندوز CVE-2022-26937 nt!KeBugCheckEx: fffff8038996efa0 48894c2408 mov qword ptr rsp+8,rcx ss:0018:ffffd000d589ae60=0000000000000139 1: kd !analyze -v Bugcheck Analysis KERNELSECURITYCHECKFAILURE 139 A kernel component has corrupted a critical data structure. T...

CVE-2025-5548-FreeFloat-FTP-Buffer-Overflow

CVE-2025-5548 — FreeFloat FTP Server 1.0 में Buffer Overflow भेद्यता विश्लेषण और शोषण प्रयोगशाला · एक्सप्लॉइट डेवलपमेंट · Windows x86 यह रिपॉजिटरी किस बारे में है? यह रिपॉजिटरी विंडोज के लिए FreeFloat FTP Server 1.0 में मौजूद CVE-2025-5548 भेद्यता के विश्लेषण और शोषण की प्रक्रिया का पूर्ण...

Security Bulletin: Multiple Vulnerabilities affect IBM Cloud Pak System

Summary Multiple Vulnerabilities have been addressed in IBM Cloud Pak System v2.3.5.1. Vulnerability Details CVEID:CVE-2025-69873 DESCRIPTION: ajv Another JSON Schema Validator before 8.18.0 is vulnerable to Regular Expression Denial of Service ReDoS when the $data option is enabled. The pattern...

cve-2024-27130-poc

CVE-2024-27130-poc CVE-2024-27130 एक गंभीर कमजोरी है जो QNAP नेटवर्क अटैच्ड स्टोरेज NAS उपकरणों को प्रभावित करती है। यह कमजोरी QTS ऑपरेटिंग सिस्टम में share.cgi स्क्रिप्ट के NoSupportACL फ़ंक्शन में strcpy फ़ंक्शन के असुरक्षित उपयोग के कारण होती है, जिसके परिणामस्वरूप स्टैक बफर ओवरफ़्लो होता है।...

dsiem

Dsiem Dsiem is a security event correlation engine for ELK stack, allowing the platform to be used as a dedicated and full-featured SIEM system. Dsiem provides OSSIM-style correlation for normalized logs/events, perform lookup/query to threat intelligence and vulnerability information sources, an...

dsiem

Dsiem Dsiem एक सुरक्षा घटना सहसंबंध इंजन security event correlation engine है जो ELK स्टैक के लिए है, जो प्लेटफॉर्म को समर्पित और पूर्ण-सुविधाओं वाली SIEM प्रणाली के रूप में उपयोग करने की अनुमति देता है। Dsiem सामान्यीकृत लॉग/ईवेंट के लिए OSSIM-शैली का सहसंबंध प्रदान करता है, खतरा खुफिया और भेद्य...

CVE-2026-44037

A flaw was found in dcmtk. An attacker can cause a Denial of Service DoS by providing a crafted DICOM Digital Imaging and Communications in Medicine JSON document containing deeply nested sequence values. Processing this input triggers uncontrolled recursion in the JSON parser, causing stack memo...

CVE-2026-44035

A flaw was found in DCMTK. An attacker could exploit this vulnerability by enticing a user or service to process a specially crafted DICOM directory DICOMDIR file containing deeply nested directory records. This issue triggers uncontrolled recursion during record processing, causing stack memory...

CVE-2026-44033

A flaw was found in dcmtk. An attacker can trigger uncontrolled recursion by tricking a user or application into parsing a specially crafted XML document containing deeply nested elements. This flaw leads to stack exhaustion, causing the application to crash and resulting in a Denial of Service D...

CVE-2023-3519

एक्सप्लॉइट रिपॉजिटरी Citrix पर स्टैक ओवरफ़्लो CVE-2023-3519 वीडियो प्रदर्शन PoC: https://github.com/Mohammaddvd/CVE-2023-3519/assets/108727157/97fde2d9-2110-40bb-ae08-19163927115c अस्वीकरण यह कोड केवल शैक्षिक उद्देश्यों और सुरक्षा कमजोरियों को समझने में नैतिक उपयोग के लिए है। किसी भी दुरुपयोग या...