cve-2025-29384

CVE-2025-29384 Proof-of-Concept Exploit Overview This repository contains an advanced proof-of-concept PoC exploit for CVE-2025-29384 , a critical stack-based buffer overflow vulnerability discovered in the Tenda AC9 router running firmware version V15.03.05.14multi. This vulnerability allows...

CVE-2019-17147

CVE-2019-17147: TP-Link TL-WR841N Exploitation Overview This repository documents the comprehensive reverse engineering and exploitation of CVE-2019-17147 , a critical remote code execution RCE vulnerability in the TP-Link TL-WR841N router MIPSEL architecture. The vulnerability resides in the htt...

DrayTek-Exploit

CVE-2022-23093 FreeBSD Stack-Based Overflow Informations ⚠️ The shellcode that is used by default is FreeBSD/x86-64 - execve - 28 bytes from Gitsnik change it and put your own one for starting ⚠️ Details of Vulnerability The ping utility, used to solicit an ICMP ECHORESPONSE from a host or gateway,...

CVE-2026-53921

🚨 CVE-2026-53921 - odhcpd Critical Stack-Based Buffer Overflow in OpenWrt odhcpd A remote unauthenticated stack-based buffer overflow allowing potentialRemote Code Execution RCE with root privileges. 📖 Overview Property| Value ---|--- CVE ID| CVE-2026-53921 Severity| 🔴 Critical CVSS v3.1| 9.8 CWE...

CVE-2020-8249

CVE-2020-8249: Buffer Overflow in Pulse Secure VPN Linux Client The root SUID executable pulsesvc, has a function “doupload” that unsafely calls a “sprintf” which can result in a buffer overflow. Because the “sprintf” writes the values on the stack, if a big enough string is passed to it, then it...

CVE-2025-29338

CVE-2025-29338 — Security Advisory Buffer Overflow in NXP moal.ko Wi-Fi Kernel Driver woalsetupmoduleparam / parsecfggetline Field| Value ---|--- CVE ID| CVE-2025-29338 Severity| High CVSS v3.1 Score| 7.8 CVSS v3.1 Vector| CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H Vulnerability Type| Stack-Bas...

CVE-2026-99142

In the Linux kernel, the following vulnerability has been resolved: tracing: Check operator stack capacity before pushing predicateparse uses the first operator stack entry before processing any opening parentheses. A push then increments top before writing. The existing check still permits that...

CVE-2026-117557

SDLimage through 3.4.8 and through 2.8.12 contains a stack out-of-bounds read vulnerability in IMGLoadLBMIO in src/IMGlbm.c that skips bitplane count validation when HAM mode is set. Attackers can supply a crafted ILBM file with more than 8 HAM bitplanes to read past the colormap stack array,...

cve-2019-1663

🚀 Exploitation of CVE-2019-1663 🧩 Introduction This repository documents the exploitation of CVE-2019-1663, a critical remote code execution RCE vulnerability affecting Cisco RV110W, RV130W, and RV215W Wireless-N VPN routers. Due to insufficient input validation within the web management interfac...

CVE-2006-6184

CVE-2006-6184 This is a python-based standalone exploit for CVE-2006-6184. This exploit triggers a stack-based buffer overflow in Allied Telesyn TFTP Server AT-TFTP 1.9, and possibly earlier, allowing remote attackers to cause a denial of service or execute arbitrary code. Quick Start 0. let...

CVE-2022-0435-Poc

CVE-2022-0435stack overflow wget https://releases.ubuntu.com/jammy/ubuntu-22.04.5-live-server-amd64.iso mkdir kernel wget https://kernel.ubuntu.com/mainline/v5.13/amd64/linux-headers-5.13.0-051300-generic5.13.0-051300.202106272333amd64.deb wget...

CVE-2026-31024

CVE-2026-31024 Vulnerability Report: Steghide Stack-Based Buffer Overflow & Information Disclosure Field| Value ---|--- Target Application| Steghide Linux Binary Affected Version| 0.5.1 Confirmed; earlier versions likely affected Vulnerability Type| Stack-Based Buffer Overflow CWE-121 Impact|...

CVE-2025-26686-poc-A-critical-RCE-vulnerability-in-Windows-TCP-IP-stack

This PoC has been validated in a controlled, air-gapped environment. Sensitive exploit details have been removed cut — contact the maintainer for access if you have written authorization...

CVE-glibc

CVE-glibc CVE-2015-0235 glibc Get Host by Name Issue Copy and paste to get/check wget https://github.com/alanmeyer/CVE-glibc/raw/master/get-GHOST.sh chmod +x get-GHOST.sh ./get-GHOST.sh References: https://googleonlinesecurity.blogspot.com/2016/02/cve-2015-7547-glibc-getaddrinfo-stack.html...

CVE-2025-60752

CVE-2025-60752 PoC of CVE-2025-60752 Affected product: Tinyc Http Server The full writeup article is available at https://zer0matt.blogspot.com/2026/05/cve-2025-60752-tinyc-http-server-stack.html Description A stack buffer overflow occurs when Tinyc receives a crafted input. The overflow occurs...

ghostlock

GhostLock — Linux kernel rtmutex/futex stack-UAF tracking site Source for the GhostLock patch-status tracker: a single-page site recording which distributions have shipped a fix for the rtmutex/futex stack use-after-free in the Linux kernel. Tracking concluded 2026-08-06 : every tracked kernel...

CVE-2023-47459

CVE-2023-47459 Description A vulnerability was discovered in Knovos Discovery v.22.67.0 that allows a remote attacker to access confidential information using the components: /DiscoveryReview/Service/CaseManagement.svc/GetProductSiteName,...

redis-cve-2025-62507

Exploit Scripts — CVE-2025-62507 Directory Structure scripts/ ├── exploitx86.py x86-64 ROP exploit ├── exploitarm64.py ARM64 AArch64 ROP exploit └── gdbwithsymbols.sh GDB debugging helper script Vulnerability Summary Item| Description ---|--- CVE| CVE-2025-62507 Vulnerability Type| Stack Buffer...

CVE-2026-82592

D-Link Router DIR-825M - Buffer Overflow in /boafrm/formDiskFormat Vulnerability Details Detail Information Field| Value ---|--- Vendor| D-Link Product| D-Link DIR-825M and other models sharing the same firmware codebase Affected Version| Firmware v1.1.8 Vulnerability Type| Stack-based Buffer...

CVE-2026-6789-Stack-Buffer-Overflow-in-Embedded-TLS-Certificate-Parser

9. CVE-2026-6789 – Stack Buffer Overflow in Embedded TLS Certificate Parser Overview A popular lightweight TLS library simulated contains a stack buffer overflow when parsing X.509 certificate Subject Alternative Name extensions with a crafted length field. Severity: Critical RCE on IoT/Industria...