77778 matches found
CVE-2025-15467
CVE-2025-15467 OpenSSL CMS AuthEnvelopedData 解析におけるスタックバッファオーバーフロー 脆弱性 evpciphergetasn1aeadparams が CMS AuthEnvelopedData コンテンツ内の AEAD 暗号パラメータ(例: AES-GCM)を解析する際に、スタックバッファオーバーフローが存在します。過大なサイズの IV が 16 バイトのスタックバッファをオーバーフローさせ、サービス拒否および潜在的なリモートコード実行を引き起こす可能性があります。 影響を受けるバージョン...
c2-cloud
About The Project The C2 Cloud is a robust web-based C2 framework, designed to simplify the life of penetration testers. It allows easy access to compromised backdoors, just like accessing an EC2 instance in the AWS cloud. It can manage several simultaneous backdoor sessions with a user-friendly...
iCSeeU
Questa è una suite di strumenti/PoC/exploit che possono essere utilizzati con telecamere per videochiamate iCSee via LAN e forse anche con telecamere senza videochiamata. Può essere facilmente usata per flashare firmware alternativi in sostituzione del metodo di aggiornamento tramite scheda SD...
CVE-2015-7547
CVE-2015-7547 glibc getaddrinfo buffer overflow basato su stack...
UBUNTU-CVE-2026-68516
OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. From version 3.4.0 through 3.4.13, a crafted HTJ2K-compressed EXR can crash OpenEXR during normal decode. An HTJ2K-compressed EXR whose JPEG 2000 SIZ fields place the...
PT-2026-81896
A stack-based buffer overflow vulnerability exists in BlueZ, the Linux Bluetooth protocol stack. A remote user within Bluetooth radio range can send a specially crafted Extended Inquiry Response EIR packet that causes a buffer overflow when the target device performs Bluetooth discovery. This...
PT-2026-81893
A security vulnerability has been detected in TOTOLINK N600R 4.3.0cu.7647 B20210106. The affected element is the function setSystemConfig of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Such manipulation of the argument Hostname leads to stack-based buffer overflow. It is possible ...
Wazuh Server 4.5.0 < 4.14.6 Stack Buffer Overflow (CVE-2026-45798)
The version of Wazuh Server on the remote host is at least 4.5.0 and prior to 4.14.6. It is, therefore, affected by a stack buffer overflow vulnerability: - comparewazuhversions copies the attacker-controlled enrollment V: field into a 10-byte stack buffer without explicit null termination. A...
Linux Distros Unpatched Vulnerability : CVE-2026-78475
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the file-pix ESM plugin in GIMP. When processing a specially crafted PIX image file, the plugin allocates a Variable-Length Array VLA on the...
Linux Distros Unpatched Vulnerability : CVE-2026-78322
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in file-roller. When opening or extracting a malicious 7z or RAR archive containing a file entry with an excessively long path, file-roller's...
CVE-2026-75421
aria2 versions up to and including 1.37.0 are affected by a stack-buffer-underflow vulnerability in the IOFile::getLine() function. The flaw is located in the file I/O layer of aria2, a lightweight multi-protocol download utility. A stack-buffer-underflow in this context can potentially lead to m...
Explotando-FreeFloatFTP-CVE-2025-5548
Sfruttando-FreeFloatFTP-CVE-2025-5548 Benvenuto nel mio repository di ricerca e sviluppo di exploit. Questo progetto documenta l'analisi tecnica completa, la preparazione dell'ambiente e lo sfruttamento passo dopo passo della vulnerabilità CVE-2025-5548 Stack-Based Buffer Overflow trovata in...
CVE-2003-0264_EXPLOIT
CVE-2003-0264EXPLOIT تجاوز سعة المخزن المؤقت في Seattle Lab Mail SLmail 5.5 - POP3 تجاوز سعة مخزن مؤقت قائم على المكدس خطوة بخطوة 1 تفحيش التطبيق في الخطوة الأولى سنقوم بتفحيش التطبيق باستخدام سكربت Spike بسيط في الوقت نفسه سيكون لدينا SLmail موصولًا ويعمل بـ Immunity Debugger المزيد عن...
DEBIAN-CVE-2026-68516
OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. From version 3.4.0 through 3.4.13, a crafted HTJ2K-compressed EXR can crash OpenEXR during normal decode. An HTJ2K-compressed EXR whose JPEG 2000 SIZ fields place the...
CVE-2026-68516
OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. From version 3.4.0 through 3.4.13, a crafted HTJ2K-compressed EXR can crash OpenEXR during normal decode. An HTJ2K-compressed EXR whose JPEG 2000 SIZ fields place the...
dsiem
Dsiem Dsiem is a security event correlation engine for ELK stack, allowing the platform to be used as a dedicated and full-featured SIEM system. Dsiem provides OSSIM-style correlation for normalized logs/events, perform lookup/query to threat intelligence and vulnerability information sources, an...
CVE-2026-68516
OpenEXR (the reference implementation for the EXR image format) versions 3.4.0 through 3.4.13 are vulnerable to a denial of service via a crafted HTJ2K-compressed EXR file. A malicious file whose JPEG 2000 SIZ fields place the first tile outside the visible image reaches invalid tile and codebloc...
CVE-2026-68516 OpenEXR: HTJ2K SIZ image-offset gap stack buffer overflow
OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. From version 3.4.0 through 3.4.13, a crafted HTJ2K-compressed EXR can crash OpenEXR during normal decode. An HTJ2K-compressed EXR whose JPEG 2000 SIZ fields place the...
CVE-2026-68516 OpenEXR: HTJ2K SIZ image-offset gap stack buffer overflow
OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. From version 3.4.0 through 3.4.13, a crafted HTJ2K-compressed EXR can crash OpenEXR during normal decode. An HTJ2K-compressed EXR whose JPEG 2000 SIZ fields place the...
CVE-2026-68516 OpenEXR: HTJ2K SIZ image-offset gap stack buffer overflow
OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. From version 3.4.0 through 3.4.13, a crafted HTJ2K-compressed EXR can crash OpenEXR during normal decode. An HTJ2K-compressed EXR whose JPEG 2000 SIZ fields place the...