Buffer Overflow | writeups.xyz

Title	Vulnerabilities	Programs	Authors
4 exploits, 1 bug: exploiting cve-2024-20017 4 different ways	RCE Buffer Overflow Memory Corruption	MediaTek	Hyper (@Hyprdude)
CVE-2024-37079:	Integer Underflow Buffer Overflow Memory Corruption	VMware	Grigory Dorodnov Guy Lederfein (@Glederfein)
Vulnerabilities in NodeJS C/C++ add-on extensions	Memory Corruption Memory Leak Out-of-Bounds Read Buffer Overflow Integer Overflow DoS Security Code Review	Node.js Third-Party Modules	Alessio Della Libera
SSD Advisory – Foscam R4M UDTMediaServer Buffer Overflow	Buffer Overflow Memory Corruption Security Code Review	Foscam	Yoseop Kim
17 vulnerabilities in Sharp Multi-Function Printers	Printer Hacking RCE Information Disclosure Memory Corruption Buffer Overflow DoS LFI XSS Hardcoded API Keys Default Credentials Missing Authentication Directory Listing Authentication Bypass LDAP	Sharp Toshiba	Pierre Kim (@PierreKimSec)
Iconv, Set The Charset To RCE: Exploiting The Glibc To Hack The PHP Engine (Part 2)	RCE Buffer Overflow Memory Corruption	GNU C Library (Glibc)	Charles Fol (@Cfreal_)
Multiple vulnerabilities in Eclipse ThreadX	Buffer Overflow Memory Corruption	Microsoft Eclipse Foundation (Eclipse ThreadX)	Marco Ivaldi / Raptor (@0xdea)
Iconv, Set The Charset To RCE: Exploiting The Glibc To Hack The PHP Engine (Part 1)	RCE Buffer Overflow Memory Corruption	GNU C Library (Glibc)	Charles Fol (@Cfreal_)
Linguistic Lumberjack: Attacking Cloud Services via Logging Endpoints (Fluent Bit - CVE-2024-4323)	Cloud Memory Corruption Buffer Overflow	Cloud Native Computing Foundation (Fluent Bit)	Jimi Sebree (@DinoBytes)
Exploiting American Conquest	Reverse Engineering Buffer Overflow Memory Corruption Game Hacking	Undisclosed	Thomas Dubier (@Tomtombinary)
TP-Link TDDP Buffer Overflow Vulnerability	Reverse Engineering Buffer Overflow Memory Corruption DoS	TP-Link	Olivier Laflamme (@Olivier_boschko)
Exploiting embedded mitel phones for unauthenticated remote code execution	RCE Reverse Engineering Buffer Overflow Memory Corruption Authentication Bypass OS Command Injection	Mitel	Kevin Joensen (@Ggisx)
Hacking ISP CPE equipment: FiberHome	Cryptographic Issues Weak Credentials Missing Authentication XSS Buffer Overflow Memory Corruption	FiberHome	Gergely Kalman (@Gergely_kalman)
Technical Advisory: Vulnerabilities Identified within ListServ	CSRF Samesite Cookie Bypass Reflected XSS Stored XSS Unrestricted File Upload DLL Hijacking Local Privilege Escalation Buffer Overflow Memory Corruption	ListServ	Adam Crosser
Rooting Xiaomi WiFi Routers	OS Command Injection Buffer Overflow Memory Corruption Security Code Review	Xiaomi	Julien R. Marin Duroyon
CVE-2023-4039: GCC's -fstack-protector fails to guard dynamic stack allocations on ARM64	Memory Corruption Buffer Overflow	GCC	Tom Hebb
Shambles: The Next-Generation IoT Reverse Engineering Tool to Discover 0-Day Vulnerabilities	IoT Buffer Overflow Command Injection Reverse Engineering	Undisclosed	Olivier Laflamme (@Olivier_boschko)
Finding and Exploiting Citrix NetScaler Buffer Overflow (CVE-2023-3519) (Part 3)	Buffer Overflow Memory Corruption	Citrix Systems (NetScaler)	Dylan Pindur
SSD Advisory – TP-Link TL-WR840N Stack Buffe Overflow DOSy	Buffer Overflow Memory Corruption DoS Security Code Review	TP-Link	Delsploit (@Delsploit)
Uncovering weaknesses in Apple macOS and VMWare vCenter: 12 vulnerabilities in RPC implementation	Kernel Hacking MS-RPC DoS Memory Corruption Use-After-Free Heap Overflow Buffer Overflow	Apple (MacOS) VMware	Aleksandar Nikolic Dimitrios Tatsis
Bee-yond Capacity: Unauthenticated RCE in Extreme Networks/Aerohive Wireless APs - CVE-2023-35803	Memory Corruption Buffer Overflow RCE	Extreme Networks	Lachlan Davidson (@Lachlan2k)
Exploiting the HP Printer without the printer (Pwn2Own 2022)	Printer Hacking Buffer Overflow Memory Corruption	HP	Interrupt Labs (@InterruptLabs)
One mistake, Three bugs: Comprehensive android pentesting.	Android Bruteforce Buffer Overflow Memory Corruption	Undisclosed	Kushal Jain
chonked pt.1: minidlna 1.3.2 http chunk parsing heap overflow (cve-2023-33476) root cause analysis	Memory Corruption Heap Overflow Buffer Overflow RCE	MiniDLNA	Hyper (@Hyprdude)
Anatomy of an IoT Exploit, from Hands-On to RCE	IoT RCE Buffer Overflow Memory Corruption	Wavlink	David Baker

Page 1 of 3