πNew WriteupβοΈ
βββββββββββββββ
πDate: Sat, 24 Jun 2023 17:42:58 GMT
βββββββββββββββ
βοΈTitle: Optimistic ChallengeβββHack The Box Walkthrough
βββββββββββββββ
πLink: https://medium.com/p/d85e5af8342c
βββββββββββββββ
Tags: #hackthebox_writeup #ghidra #integer_overflow #radare2 #tutorial
βββββββββββββββ
πDate: Sat, 24 Jun 2023 17:42:58 GMT
βββββββββββββββ
βοΈTitle: Optimistic ChallengeβββHack The Box Walkthrough
βββββββββββββββ
πLink: https://medium.com/p/d85e5af8342c
βββββββββββββββ
Tags: #hackthebox_writeup #ghidra #integer_overflow #radare2 #tutorial
Medium
Optimistic Challenge β Hack The Box Walkthrough
Optimistic is a binary exploitation challengeon hach the box that is vulnerable to an integer overflowand shellcode injection.
β€· Title: Integer Overflow Zafiyetini Anlamak
ββββββββββββββββββββββββ
πͺ Author: Emre GΓΌl
ββββββββββββββββββββββββ
β΄΅ Time: Tue, 18 Feb 2025 12:26:38 GMT
ββββββββββββββββββββββββ
β Tags: #c #integer_overflow #cybersecurity
ββββββββββββββββββββββββ
πͺ Author: Emre GΓΌl
ββββββββββββββββββββββββ
β΄΅ Time: Tue, 18 Feb 2025 12:26:38 GMT
ββββββββββββββββββββββββ
β Tags: #c #integer_overflow #cybersecurity
Medium
Integer Overflow Zafiyetini Anlamak
Bir web sitesinde sepete yΓΌzlerce ΓΌrΓΌn eklediΔinizde sepet tutarΔ±nΔ±n β-100 TLβ olduΔunu dΓΌΕΓΌnΓΌn. Ya da programΔ±nΔ±zda boyut(size) kontrolΓΌ yaptΔ±ΔΔ±nΔ±z bir yerin tΓΌm sistemin hacklenmesine sebepβ¦
β€· Title: CVE-2025-23016: Critical FastCGI Heap Overflow Threatens Embedded Devices, PoC Releases
ββββββββββββββββββββββββ
πͺ Author: Ddos
ββββββββββββββββββββββββ
β΄΅ Time: Mon, 28 Apr 2025 00:26:27 +0000
ββββββββββββββββββββββββ
β Tags: #Vulnerability #CVE_2025_23016 #embedded systems security #FastCGI vulnerability #heap overflow #integer overflow #Synacktiv
ββββββββββββββββββββββββ
πͺ Author: Ddos
ββββββββββββββββββββββββ
β΄΅ Time: Mon, 28 Apr 2025 00:26:27 +0000
ββββββββββββββββββββββββ
β Tags: #Vulnerability #CVE_2025_23016 #embedded systems security #FastCGI vulnerability #heap overflow #integer overflow #Synacktiv
Daily CyberSecurity
CVE-2025-23016: Critical FastCGI Heap Overflow Threatens Embedded Devices, PoC Releases
FastCGI CVE-2025-23016 vulnerability allows heap overflow and potential code execution on embedded devices. Users must upgrade to version 2.4.5 or later
β€· Title: Chrome Update Alert: Two High-Severity Flaws (CVE-2025-6191, CVE-2025-6192) Patched
ββββββββββββββββββββββββ
πͺ Author: Ddos
ββββββββββββββββββββββββ
β΄΅ Time: Wed, 18 Jun 2025 00:16:12 +0000
ββββββββββββββββββββββββ
β Tags: #Vulnerability Report #chrome #cybersecurity #google chrome #High Severity #integer overflow #Profiler #security update #use after free #V8 #Vulnerability
ββββββββββββββββββββββββ
πͺ Author: Ddos
ββββββββββββββββββββββββ
β΄΅ Time: Wed, 18 Jun 2025 00:16:12 +0000
ββββββββββββββββββββββββ
β Tags: #Vulnerability Report #chrome #cybersecurity #google chrome #High Severity #integer overflow #Profiler #security update #use after free #V8 #Vulnerability
Daily CyberSecurity
Chrome Update Alert: Two High-Severity Flaws (CVE-2025-6191, CVE-2025-6192) Patched
Google Chrome 137.0.7151.119/.120 is rolling out with crucial security fixes, addressing two high-severity flaws: an integer overflow in V8 and a use-after-free in Profiler.
β€· Title: VirtualBox VM Escape: Integer Overflow Flaw Allows Full Host Takeover, PoC Published
ββββββββββββββββββββββββ
πͺ Author: Ddos
ββββββββββββββββββββββββ
β΄΅ Time: Wed, 06 Aug 2025 10:14:36 +0000
ββββββββββββββββββββββββ
β Tags: #Vulnerability #cybersecurity #integer overflow #rce #Remote Code Execution #virtualbox #virtualization #VM Escape
ββββββββββββββββββββββββ
πͺ Author: Ddos
ββββββββββββββββββββββββ
β΄΅ Time: Wed, 06 Aug 2025 10:14:36 +0000
ββββββββββββββββββββββββ
β Tags: #Vulnerability #cybersecurity #integer overflow #rce #Remote Code Execution #virtualbox #virtualization #VM Escape
Daily CyberSecurity
VirtualBox VM Escape: Integer Overflow Flaw Allows Full Host Takeover, PoC Published
A critical integer overflow in VirtualBox (CVE-2025-30712) allows an attacker to escape the VM and execute code on the host, with a public proof-of-concept available.
β€· Title: Researcher Details Zero-Click RCE in Dolby Audio Decoder Affecting Android, iOS, and macOS
ββββββββββββββββββββββββ
πͺ Author: Ddos
ββββββββββββββββββββββββ
β΄΅ Time: Mon, 20 Oct 2025 00:11:20 +0000
ββββββββββββββββββββββββ
β Tags: #Vulnerability #android #Audio Decoder #Dolby Digital Plus #integer overflow #ios #Project Zero #rce #Zero_Click
ββββββββββββββββββββββββ
πͺ Author: Ddos
ββββββββββββββββββββββββ
β΄΅ Time: Mon, 20 Oct 2025 00:11:20 +0000
ββββββββββββββββββββββββ
β Tags: #Vulnerability #android #Audio Decoder #Dolby Digital Plus #integer overflow #ios #Project Zero #rce #Zero_Click
Daily CyberSecurity
Researcher Details Zero-Click RCE in Dolby Audio Decoder Affecting Android, iOS, and macOS
Google Project Zero disclosed a zero-click RCE flaw (CVE-2025-54957, CVSS 7.0) in Dolby's Audio Decoder. The integer overflow can be triggered by a single audio file and affects Android, iOS, and macOS.
β€· Title: Critical strongSwan Heap Overflow in EAP-MSCHAPv2 Plugin Allows Remote Code Execution
ββββββββββββββββββββββββ
πͺ Author: Ddos
ββββββββββββββββββββββββ
β΄΅ Time: Wed, 29 Oct 2025 04:37:28 +0000
ββββββββββββββββββββββββ
β Tags: #Vulnerability #EAP_MSCHAPv2 #Heap Buffer Overflow #Integer Underflow #rce #strongSwan #VPN Client
ββββββββββββββββββββββββ
πͺ Author: Ddos
ββββββββββββββββββββββββ
β΄΅ Time: Wed, 29 Oct 2025 04:37:28 +0000
ββββββββββββββββββββββββ
β Tags: #Vulnerability #EAP_MSCHAPv2 #Heap Buffer Overflow #Integer Underflow #rce #strongSwan #VPN Client
Daily CyberSecurity
Critical strongSwan Heap Overflow in EAP-MSCHAPv2 Plugin Allows Remote Code Execution
A Critical Heap Overflow in strongSwan's EAP-MSCHAPv2 plugin allows Remote Code Execution on the client. An integer underflow in Failure Request packet processing causes memory corruption.
β€· Title: High-Severity Duc Disk Tool Flaw (CVE-2025-13654) Risks DoS and Information Leak via Integer Underflow
ββββββββββββββββββββββββ
πͺ Author: Ddos
ββββββββββββββββββββββββ
β΄΅ Time: Mon, 08 Dec 2025 00:45:53 +0000
ββββββββββββββββββββββββ
β Tags: #Vulnerability Report #buffer overflow #CVE_2025_13654 #Disk Usage #dos #Duc #Information Disclosure #Integer Underflow #Linux
ββββββββββββββββββββββββ
πͺ Author: Ddos
ββββββββββββββββββββββββ
β΄΅ Time: Mon, 08 Dec 2025 00:45:53 +0000
ββββββββββββββββββββββββ
β Tags: #Vulnerability Report #buffer overflow #CVE_2025_13654 #Disk Usage #dos #Duc #Information Disclosure #Integer Underflow #Linux
Daily CyberSecurity
High-Severity Duc Disk Tool Flaw (CVE-2025-13654) Risks DoS and Information Leak via Integer Underflow
A High-severity flaw (CVE-2025-13654) in the Duc disk usage tool risks DoS and information leaks. An integer underflow in buffer.c allows out-of-bounds memory read. Update to v1.4.6 immediately.
β€· Title: ImageMagick Flaw Risks Arbitrary Memory Disclosure via PSX TIM File Integer Overflow on 32-bit Systems
ββββββββββββββββββββββββ
πͺ Author: Ddos
ββββββββββββββββββββββββ
β΄΅ Time: Mon, 15 Dec 2025 00:05:51 +0000
ββββββββββββββββββββββββ
β Tags: #Vulnerability Report #32_bit #Arbitrary Memory Disclosure #CVE_2025_66628 #ImageMagick #integer overflow #open_source #PSX TIM
ββββββββββββββββββββββββ
πͺ Author: Ddos
ββββββββββββββββββββββββ
β΄΅ Time: Mon, 15 Dec 2025 00:05:51 +0000
ββββββββββββββββββββββββ
β Tags: #Vulnerability Report #32_bit #Arbitrary Memory Disclosure #CVE_2025_66628 #ImageMagick #integer overflow #open_source #PSX TIM
Daily CyberSecurity
ImageMagick Flaw Risks Arbitrary Memory Disclosure via PSX TIM File Integer Overflow on 32-bit Systems
A High-severity (CVSS 7.5) flaw in ImageMagick's PSX TIM parser allows Arbitrary Memory Disclosure on 32-bit systems via an integer overflow. Patch immediately to v7.1.2-10.
β€· Title: The iOS 26.2 Trap: New WebKit Integer Overflow Discovered with PoCβIs Your iPhone at Risk?
ββββββββββββββββββββββββ
πͺ Author: Ddos
ββββββββββββββββββββββββ
β΄΅ Time: Mon, 29 Dec 2025 01:53:21 +0000
ββββββββββββββββββββββββ
β Tags: #Vulnerability Report #Apple #Gigacage #integer overflow #iOS 26.2 #iPhone security #JavaScriptCore #Joseph Goydish #PoC #rce #Remote Code Execution #Safari #Vulnerability #WebKit
ββββββββββββββββββββββββ
πͺ Author: Ddos
ββββββββββββββββββββββββ
β΄΅ Time: Mon, 29 Dec 2025 01:53:21 +0000
ββββββββββββββββββββββββ
β Tags: #Vulnerability Report #Apple #Gigacage #integer overflow #iOS 26.2 #iPhone security #JavaScriptCore #Joseph Goydish #PoC #rce #Remote Code Execution #Safari #Vulnerability #WebKit
Daily CyberSecurity
The iOS 26.2 Trap: New WebKit Integer Overflow Discovered with PoCβIs Your iPhone at Risk?
Joseph Goydish uncovers a critical integer overflow in iOS 26.2βs WebKit. Proof of Concept shows how attackers can crash browsers or trigger RCE.
β€· Title: The Minting Glitch: How a 5-Year-Old Bug Cost Truebit $26 Million
ββββββββββββββββββββββββ
πͺ Author: ddos
ββββββββββββββββββββββββ
β΄΅ Time: Tue, 13 Jan 2026 04:05:04 +0000
ββββββββββββββββββββββββ
β Tags: #Vulnerability #Blockchain Security #DeFi Hack 2026 #Ethereum #Halborn #Integer Overflow #SlowMist #Smart Contract Exploit #Tornado Cash #TRU Token #Truebit Protocol
ββββββββββββββββββββββββ
πͺ Author: ddos
ββββββββββββββββββββββββ
β΄΅ Time: Tue, 13 Jan 2026 04:05:04 +0000
ββββββββββββββββββββββββ
β Tags: #Vulnerability #Blockchain Security #DeFi Hack 2026 #Ethereum #Halborn #Integer Overflow #SlowMist #Smart Contract Exploit #Tornado Cash #TRU Token #Truebit Protocol
Penetration Testing Tools
The Minting Glitch: How a 5-Year-Old Bug Cost Truebit $26 Million
In early January 2026, a sophisticated adversary identified a critical vulnerability within the purchase and minting contract of
β€· Title: Decades-Old Flaw & New Heap Corruption: Critical glibc Bugs Revealed
ββββββββββββββββββββββββ
πͺ Author: Ddos
ββββββββββββββββββββββββ
β΄΅ Time: Mon, 19 Jan 2026 00:01:47 +0000
ββββββββββββββββββββββββ
β Tags: #Vulnerability Report #ASLR Bypass #CVE_2026_0861 #CVE_2026_0915 #glibc #GNU C Library #heap corruption #infosec #integer overflow #Linux Security #Memory Leak
ββββββββββββββββββββββββ
πͺ Author: Ddos
ββββββββββββββββββββββββ
β΄΅ Time: Mon, 19 Jan 2026 00:01:47 +0000
ββββββββββββββββββββββββ
β Tags: #Vulnerability Report #ASLR Bypass #CVE_2026_0861 #CVE_2026_0915 #glibc #GNU C Library #heap corruption #infosec #integer overflow #Linux Security #Memory Leak
Daily CyberSecurity
Decades-Old Flaw & New Heap Corruption: Critical glibc Bugs Revealed
The maintainers of the GNU C Library (glibc), the core library that underpins the vast majority of Linux-based systems, have disclosed details on two security vulnerabilities ranging from high-sevβ¦
β€· Title: HAProxy Patches High-Severity QUIC Flaws That Can Kill the Load Balancer
ββββββββββββββββββββββββ
πͺ Author: Ddos
ββββββββββββββββββββββββ
β΄΅ Time: Mon, 16 Feb 2026 00:11:53 +0000
ββββββββββββββββββββββββ
β Tags: #Vulnerability #ALOHA #Denial of Service #DevOps #HAProxy #Integer Underflow #load balancer #Patch Alert #QUIC Protocol
ββββββββββββββββββββββββ
πͺ Author: Ddos
ββββββββββββββββββββββββ
β΄΅ Time: Mon, 16 Feb 2026 00:11:53 +0000
ββββββββββββββββββββββββ
β Tags: #Vulnerability #ALOHA #Denial of Service #DevOps #HAProxy #Integer Underflow #load balancer #Patch Alert #QUIC Protocol
Daily CyberSecurity
HAProxy Patches High-Severity QUIC Flaws That Can Kill the Load Balancer
HAProxy patches high-severity QUIC flaws CVE-2026-26080 & 26081. Remote attackers can crash servers via malformed packets. Update to v3.0.16 now.