CVE-2026-68960

A stack-based buffer overflow vulnerability affects SKYSEA Client View and SKYMEC IT Manager , two Windows-based IT management products. An authenticated attacker who can log in to a Windows system running the affected software may be able to execute arbitrary code on a different Windows host tha...

cve-2015-7547-public

Server di attacco PoC per la vulnerabilità CVE-2015-7547 in glibc DNS stub resolver Per testare su macchina locale con una versione vulnerabile di glibc: root@kitploit: user@localhost:/$ echo 'nameserver 127.0.0.127' | sudo tee /etc/resolv.conf user@localhost:/$ echo 'nameserver 127.0.0.127' | su...

Ivanti Connect Secure - Stack-based Buffer Overflow

Ivanti Connect Secure 22.7R2.5, Ivanti Policy Secure 22.7R1.2, and Ivanti Neurons for ZTA gateways 22.7R2.3 contain a stack-based buffer overflow in the clientCapabilities parameter handling. This vulnerability allows remote unauthenticated attackers to execute arbitrary code through IF-T TLS...

Microweber < 1.2.11 - CRLF Injection

CRLF Injection leads to Stack Trace Exposure due to lack of filtering at https://demo.microweber.org/ in Packagist microweber/microweber prior to 1.2.11. id: CVE-2022-0666 info: name: Microweber 1.2.11 - CRLF Injection author: ritikchaddha severity: high description: | CRLF Injection leads to Sta...

CVE-2019-1068

CVE-2019-1068 Ursachenanalyse und PoC für eine Microsoft SQL Server Stack-Overflow-Sicherheitslücke durch Reverse Engineering von „svl.dll“. Links zu unserer Arbeit: 1. Ataberk's Blog 2. Fatih's Blog 3. Cem's Blog https://msrc.microsoft.com/update-guide/vulnerability/CVE-2019-1068...

cve-2024-27130-poc

CVE-2024-27130-poc CVE-2024-27130 ist eine schwerwiegende Sicherheitslücke, die QNAP Network Attached Storage NAS-Geräte betrifft. Die Schwachstelle beruht auf der unsicheren Verwendung der strcpy-Funktion in der Funktion NoSupportACL des share.cgi-Skripts im QTS-Betriebssystem, was zu einem...

cve-2019-13132-lab

CVE-2019-13132 — libzmq CURVE INITIATE स्टैक ओवरफ़्लो → RCE लैब CVE-2019-13132 के लिए पूर्ण-अंत तक काम करने वाला RCE एक्सप्लॉइट + पुनरुत्पादन योग्य लैब, जो libzmq के CURVE INITIATE हैंडशेक हैंडलर में स्टैक बफ़र ओवरफ़्लो है। एक हमलावर जो सर्वर की दीर्घकालिक सार्वजनिक कुंजी जो डिज़ाइन के अनुसार एक...

CVE-2013-3664_MAC

Sketchup MAC Pict Material Palette Stack Corruption - CVE-2013-3664 SketchUp non convalida l'input durante l'analisi di una texture MACPict incorporata. È dimostrato che l'esecuzione di codice arbitrario è possibile quando una texture, una miniatura o un'immagine di sfondo dannosa innesca un...

sploit

sploit Sploit is a Go package that aids in binary analysis and exploitation. The motivating factor behind the development of sploit is to be able to have a well designed API with functionality that rivals some of the more common Python exploit development frameworks while taking advantage of the ...

CVE-2026-13214

The OCPP 1.6 client in subsys/net/lib/ocpp/ocppj.c contains a stack buffer overflow in parsegetconfigmsg. When handling a GetConfiguration request from the central system, the handler copied the attacker-controlled JSON "key" string into the caller's fixed 50-byte stack buffer skeyCISTR50, declar...

netgear_r6700v3_circled

Sfruttare uno Stack Buffer Overflow sul NETGEAR R6700v3 CVE-2022-27646 con l'aiuto dell'Esecuzione Simbolica Introduzione Questo repository ha lo scopo di dimostrare alcune funzionalità di Morion, uno strumento proof-of-concept PoC per sperimentare con l'esecuzione simbolica su binari ARMv7 reali...

EUVD-2026-65291

The OCPP 1.6 client in subsys/net/lib/ocpp/ocppj.c contains a stack buffer overflow in parsegetconfigmsg. When handling a GetConfiguration request from the central system, the handler copied the attacker-controlled JSON "key" string into the caller's fixed 50-byte stack buffer skeyCISTR50, declar...

CVE-2026-13214

A stack buffer overflow in the Zephyr RTOS OCPP 1.6 client (subsys/net/lib/ocpp/ocpp_j.c, function parse_getconfig_msg()) results from an unbounded strcpy() of an attacker-controlled JSON "key" string into a fixed 50-byte stack buffer (skey[CISTR50]). The key is parsed from a GetConfiguration mes...

CVE-2026-13214 Stack buffer overflow in OCPP GetConfiguration key parsing

The OCPP 1.6 client in subsys/net/lib/ocpp/ocppj.c contains a stack buffer overflow in parsegetconfigmsg. When handling a GetConfiguration request from the central system, the handler copied the attacker-controlled JSON "key" string into the caller's fixed 50-byte stack buffer skeyCISTR50, declar...

go-without-bounds-cve-2026-67822-stack-overflow-in-tenda-w6-s-wifissidset

CVE-2026-67822 — Tenda W6-S wifiSSIDset-Stack-Pufferüberlauf PoC Begleit-PoC zum Hunt-Benito-Artikel "GO Without Bounds: CVE-2026-67822 — Stack-Pufferüberlauf imwifiSSIDset-Formularhandler des Tenda W6-S". CVE-2026-67822 CVSS 9.8 Kritisch, CWE-121 ist ein stack-basierter Pufferüberlauf in...

CVE-2021-47881

CVE-2021-47881 Overflow del buffer locale basato sullo stack in dataSIMS Avionics ARINC 4.5.3 Data Device Corporation Ciao, sono Kağan Çapar. Nel febbraio 2020 ho trovato un overflow del buffer locale basato sullo stack nel software databus avionico dataSIMS di DDC e ho pubblicato una proof of...

CVE-2026-11105-Stack-Buffer-Overflow-in-Custom-Base64-Decoder

CVE-2026-11105 – Estouro de Buffer na Pilha no Decodificador Base64 Personalizado Código do Programa C root@kitploit: // base64vuln.c - Vulnerable Base64 decoder include include include int base64decodeconst char in, sizet inlen, char out, sizet outlen static const char table =...

CVE-2026-6789-Stack-Buffer-Overflow-in-Embedded-TLS-Certificate-Parser

9. CVE-2026-6789 – Overflow del buffer di stack nel parser di certificati TLS integrato Panoramica Una popolare libreria TLS leggera simulata contiene un overflow del buffer di stack durante il parsing delle estensioni Subject Alternative Name dei certificati X.509 con un campo di lunghezza...

system_bt_AOSP10_r33_CVE-2021-0507

Stack Bluetooth Fluoride Compilazione ed esecuzione su AOSP Basta compilare AOSP - Fluoride è incluso per impostazione predefinita. Compilazione ed esecuzione su Linux Istruzioni per Ubuntu, testate su 14.04 con Clang 3.5.0 e 16.10 con Clang 3.8.0 Scarica i sorgenti root@kitploit: mkdir /fluoride...

system_bt_AOSP10_r33_CVE-2021-0435

Fluoride Bluetooth-Stack Erstellen und Ausführen auf AOSP Einfach AOSP bauen - Fluoride ist standardmäßig enthalten. Erstellen und Ausführen unter Linux Anweisungen für Ubuntu, getestet auf 14.04 mit Clang 3.5.0 und 16.10 mit Clang 3.8.0 Quellcode herunterladen root@kitploit: mkdir /fluoride cd...