CVE-2023-50245

CVE-2023-50245 漏洞概述 CVE-2023-50245 CVSS : 9.8 Dec 11, 2023 图像查看器漏洞 漏洞描述 github advisories 任意地址写入漏洞 POC 1 1404.9264: Access violation - code c0000005 first chance First chance exceptions are reported before any exception handling. This exception may be expected and handled. openexrviewer+0x27be4:...

malicious_extension_sentry

Malicious Chrome/Edge Extensions Database An automatically updated database of Chrome extensions removed from the Chrome Web Store for containing malware, policy violation, or bundling unwanted software 🌐 Live Dashboard Real-time search, filtering by threat category, and source reports, built on...

duckdb

Prueba Jepsen DuckDB Pruebas Jepsen para la base de datos DucKDB. Se ejecuta localmente, en lugar de en un clúster remoto. La prueba genera una colección de procesos locales que abren un archivo DuckDB localmente e interactúa con ellos a través de STDIN/STDOUT. Este es un prototipo temprano. Se...

Dolibarr Unauthenticated Contacts Database Theft

An issue in Dolibarr 16 before 16.0.5 allows unauthenticated attackers to perform a database dump and access a company's entire customer file, prospects, suppliers, and employee information if a contact file exists. id: CVE-2023-33568 info: name: Dolibarr Unauthenticated Contacts Database Theft...

functrace

functrace - A function tracer functrace is a tool that helps to analyze a binary file with dynamic instrumentation using DynamoRIO http://dynamorio.org/. These are some implemented features based on DynamoRIO: disassemble all the executed code disassemble a specific function dump if these are...

Sync_Breeze_Enterprise_10_6_24_-DOS

SyncBreezeEnterprise10624-DOS Exploit Title: Sync Breeze Enterprise 10.6.24 - Denial Of Service Vulnerability Date: 03-09-2018 Exploit Author: Ege Balcı Vendor Homepage: http://www.syncbreeze.com Software Link: http://www.syncbreeze.com/setups/syncbreezeentsetupv10.6.24.exe Version: 10.6.24 Teste...

usbrip

usbrip inherited from "USB Ripper", not "USB R.I.P." is a simple forensics tool with command line interface that lets you keep track of USB device artifacts i.e., USB event history on Linux machines. Table of Contents: Description Quick Start Showcase System Log Structure Dependencies deb pip...

V8-sbx-bypass-collection

V8 沙箱逃逸/绕过/违规与漏洞研究（VR）资源合集 一个与 V8 沙箱漏洞研究（VR）和利用相关的链接集合 目录 问题跟踪 文章 论文与幻灯片 设计文档 问题跟踪 2023: "问题编号：40940619，由于 ExternalPointerTable 中的类型标签对于嵌入器对象过于粗糙而导致 V8 沙箱逃逸" 2023: "问题编号：40940623，由于对 Foreigns 的粗糙类型检查导致 V8 沙箱逃逸" 2024: "问题编号：42204606，缓解 RegExp 中的沙箱逃逸" 2024: "问题编号：336507783，V8 沙箱：防止基于 Wasm 的沙箱逃逸 "...

CVE-2018-12018

CVE-2018-12018 Mitre https://vulners.com/cve/CVE-2018-12018 Go以太坊（即geth）1.8.11之前版本中LES协议实现的GetBlockHeadersMsg处理器，由于数组索引的整数有符号性错误，可能导致访问违规，攻击者可通过发送包含-1 query.Skip值的数据包发起拒绝服务攻击。受影响的远程节点会因此立即崩溃，即EPoD（以太坊死亡数据包）问题。 主网 python3 exploit.py --mainnet --enode 'enode' 测试网 python3 exploit.py --enode 'enode'...

CVE-2025-8671-vulnerability-POC-

CVE-2025-8671-vulnerability-POC- CVE-2025-8671 漏洞 PoC CVE-2025-8671 漏洞扫描器 一款用于检测 HTTP/2 服务器中 MadeYouReset 漏洞（CVE-2025-8671）的专业安全研究工具。该扫描器使用多种检测启发式方法，识别易受流记账操纵攻击影响的服务器。 🔍 关于 CVE-2025-8671 MadeYouReset 漏洞利用 HTTP/2 流记账机制，通过畸形的协议违规强制服务器发送 RSTSTREAM 帧，而后端处理仍在继续。这将造成资源耗尽状况，可能导致： 拒绝服务（DoS） - 服务器资源耗尽 后端过...

CVE-2026-24423

CVE-2026-24423 CVE-2026-24423 – Reproduction ⚠️ 仅用于安全研究与授权测试 / For security research and authorized testing only 简介（Overview） 本项目用于复现 CVE-2026-24423 漏洞。 该漏洞存在于 SmarterMail ConnectToHub 功能中，其根本原因是： - 管理级接口未进行身份认证 - 服务端会主动连接用户指定的 Hub（SSRF） - 外部 Hub 返回的数据被直接用于本地系统级操作 该漏洞属于设计级信任边界破坏（Trust Boundary...

CVE-2022-21971

CVE-2022-21971：prauthproviders 中未初始化指针的释放 根本原因 WapAuthProvider::CreateInstance 构造函数分配并初始化了一个 WapAuthProvider 对象（0x78 字节），但未能完全初始化其状态。 偏移量 0x50 处的指针未初始化，并在调用析构函数时被释放（在 WapAuthProvider::WapAuthProvider 中）： prauthproviders!WapAuthProvider::WapAuthProvider+0x38: 00007ffda91f3078 488b4b50 mov rcx,qwor...

CVE-2025-55891

CVE-2025-55891：TIFFCP.EXE（docuPrinter Pro）因畸形TIFF文件导致的堆损坏漏洞 摘要 TIFFCP.EXE（与Neevia docuPrinter Pro捆绑的命令行工具）中存在堆损坏漏洞，原因是使用了过时且存在漏洞的libtiff版本（v3.5.7）。攻击者通过提供特制的TIFF文件，可在LZW解压缩期间触发段错误。 该问题已在Linux（通过libtiff 3.5.7编译的开源tiffcp）和Windows（使用docuPrinter...

Rocky Linux 9.6 [TuxCare] Security Update: ghostscript / ghostscript-doc / ghostscript-gtk / etc (ALMALINUX9.6:CLSA-2026:1786720807)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1786720807 advisory. - An issue was discovered in Artifex Ghostscript before 10.03.1. psi/zmisc1.c, when SAFER mode is used, allows eexec seeds other than the...

Rocky Linux 9 [CIQ] Security Update: freetype / freetype-debuginfo / freetype-debugsource / etc Multiple Vulnerabilities (crlsa-2022_8340)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20228340 advisory. FreeType: Buffer overflow in sfntinitface CVE-2022-27404 FreeType: Segmentation violation via FNTSizeRequest CVE-2022-27405 Freetype: Segmentation violatio...

Rocky Linux 8 [CIQ] Security Update: cargo / cargo-debuginfo / cargo-doc / clippy / clippy-debuginfo / etc Multiple Vulnerabilities (crlsa-2021_1935)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20211935 advisory. rust: use-after-free or double free in VecDeque::makecontiguous CVE-2020-36318 rust: memory safety violation in String::retain CVE-2020-36317 Tenable has...

Rocky Linux 8 [CIQ] Security Update: libsoup / libsoup-debuginfo / libsoup-debugsource / libsoup-devel (crlsa-2026_68266)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202668266 advisory. libsoup: SoupWebsocketConnection: libsoup: WebSocket remote denial of service via oversized control frame protocol violation CVE-2026-15711 Tenable has extracted t...

AlmaLinux 9.6 [TuxCare] Security Update: taglib / taglib-devel (ALMALINUX9.6:CLSA-2026:1777540469)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1777540469 advisory. - TagLib before 2.0 allows a segmentation violation and application crash during tag writing via a crafted WAV file in which an id3 chunk is...

Rocky Linux 9.6 [CIQ] Security Update: expat / expat-devel (ciqsa-2026_1548)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20261548 advisory. This advisory aggregates security fixes for the expat SRPM in CIQ LTS 9.6. It addresses 1 CVE: CVE-2026-93990. Tenable has extracted the preceding description blo...

Rocky Linux 8 [CIQ] Security Update: cargo / cargo-debuginfo / cargo-doc / clippy / clippy-debuginfo / etc Multiple Vulnerabilities (crlsa-2021_3063)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20213063 advisory. rust: optimization for joining strings can cause uninitialized bytes to be exposed CVE-2020-36323 rust: heap-based buffer overflow in readtoend because it...