77787 matches found
CVE-2026-76070
Netis NC63 Wireless AC1200 router firmware through V3.0.0.3327 contains a pre-authentication stack-based buffer overflow in the login handler /bin/netis.cgi. The custom Base64 decoder writes decoded password bytes into a fixed 64-byte stack buffer without capacity checks, allowing an unauthentica...
EUVD-2026-64921
Netis NC63 firmware through V3.0.0.3327 contains a stack-based buffer overflow vulnerability that allows unauthenticated remote attackers to overwrite saved stack state by submitting an oversized Base64-encoded password to the login handler in /bin/netis.cgi. Attackers can exploit the custom Base...
CVE-2026-76070 Netis NC63 V3.0.0.3327 Stack Buffer Overflow via Login Password Parameter
Netis NC63 firmware through V3.0.0.3327 contains a stack-based buffer overflow vulnerability that allows unauthenticated remote attackers to overwrite saved stack state by submitting an oversized Base64-encoded password to the login handler in /bin/netis.cgi. Attackers can exploit the custom Base...
CVE-2026-40345
deepmerge-ts 8.0.0: DoS durch rekursiven Objektgraphen Ich habe einen Stack-Erschöpfungsfehler in deepmerge-ts-Versionen vor 8.0.0 reproduziert. Das Interessante daran ist, dass der Absturz kein riesiges verschachteltes Objekt benötigt. Er entsteht durch Objektidentität. Wenn beide...
gstreamer: GStreamer: Arbitrary code execution via OGG file parsing buffer overflow
A flaw was found in GStreamer. This vulnerability, a stack-based buffer overflow, occurs during the parsing of OGG files due to improper validation of user-supplied data length. A remote attacker could exploit this by tricking a user into visiting a malicious page or opening a malicious file,...
CVE-2017-14980
Exploit-CVE-2017-14980 PoC exploit para CVE-2017-14980 — uma vulnerabilidade de stack-based buffer overflow no Sync Breeze Enterprise 10.0.28. 📖 Análise técnica completa do exploit: 👉 https://davigsantana.github.io/posts/buffer-overflow/ Sobre Este repositório contém um proof-of-concept PoC...
php_filter_chains_oracle_exploit_for_CVE-2023-6199
PHP filter chains: lettura di file da un oracolo basato su errori. Script aggiornato per sfruttare CVE-2023-6199 Una CLI per sfruttare parametri affetti dalla lettura di file causata dall'oracolo basato su errori delle catene di filtri PHP. Può essere utilizzata per divulgare il contenuto di un...
ripple20-digi-connect-exploit
Ripple20 Exploit: Digi Connect ME 9210 Authors: Moshe Kol, Shlomi Oberman Questo repository contiene un exploit PoC per CVE-2020-11896, una critica vulnerabilità di buffer overflow basata su heap nello stack Track TCP/IP parte della suite di vulnerabilità Ripple20. L'exploit consente l'esecuzione...
CVE-2026-45698
A flaw was found in Netatalk. A stack-based buffer overflow in the deletedir function of the afpd daemon can be exploited by a remote attacker. This occurs due to an integer underflow during path construction, which allows attacker-controlled filenames to be copied into a stack buffer without...
CVE-2025-5548
Analisi e sfruttamento di FreeFloat FTP: CVE-2025-5548 Anderson Steven — Master in Cybersicurezza, Modulo 6 Vulnerabilità Consegna individuale: Metodologia di analisi e sfruttamento delle vulnerabilità Perché questo repository Non volevo semplicemente consegnare "ecco l'exploit funzionante". Ques...
CVE-2026-74663
A flaw was found in the Linux kernel. An attacker could create overly deep queueing discipline qdisc hierarchies, leading to excessive recursion in qdisc tree walkers. This can exhaust the kernel stack, resulting in a Denial of Service DoS due to a system crash...
CVE-2026-74656
A flaw was found in the Linux kernel's IPv4 networking stack. A use-after-free vulnerability exists in the fibnhcupdatemtu function due to a race condition during nexthop exception table updates. This allows for a scenario where memory can be freed while still being accessed, which can lead to a...
CVE-2026-74669
A flaw was found in the Linux kernel's IP Virtual Server IPVS component. When processing Internet Control Message Protocol ICMP errors for tunneled packets, the system can incorrectly use a stale IPv4 option offset. A remote attacker could exploit this by sending a specially crafted ICMP packet,...
Astra Linux – Vulnerabilities in Linux, Linux-5.15, Linux-5.10
In the Linux kernel, the following vulnerability has been resolved: Networks: Fixed a stack overflow issue when LRO is disabled for virtual interfaces. When the features of a virtual interface are updated, the updated features are synchronized with its underlying interfaces. This synchronization...
Astra Linux – Vulnerability in exempi
The XMP Toolkit SDK version 2021.07 and earlier is affected by a stack-based buffer overflow vulnerability that may lead to arbitrary code execution within the context of the current user. Exploitation requires user interaction—that is, the victim must open a specially crafted file...
Astra Linux – Vulnerability in Linux 5.15
In the efirtasmwrapper of efi-rt-wrapper.S, there is a possible way to bypass shadow stack protection due to a logical error in the code. This could result in a local escalation of privileges without the need for additional execution privileges. User interaction is not required for exploitation...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: scs: A wrong parameter was fixed in scsmagic. The scsmagic function requires a void variable, but a struct taskstruct is provided instead. taskscstsk represents the starting address of the task’s shadow call stack, and...
Astra Linux – Vulnerability found in Linux 5.15, Linux 6.1
In the Linux kernel, the following vulnerabilities have been resolved: Bluetooth: qca: fixed an issue where information was leaked when fetching the fw build id. Added missing sanity checks and moved the 255-byte build-id buffer off the stack to prevent the leakage of stack data through debugfs, ...
CVE-2022-1015-1016
CVE-2022-1015 & CVE-2022-1026 Questo README.md è una traduzione del blog di David. David ha trovato i CVE 1015 e 1016 nel kernel Linux. Puoi visitare la sua pagina web per leggere il documento originale. Ecco i suoi profili social: Twitter Github Un'analisi delle due nuove vulnerabilità Linux in...
