Memory Corruption | writeups.xyz

Title	Vulnerabilities	Programs	Authors
Ghost In The Ppl Part 1: Byovdll	Use-After-Free Memory Corruption LSA Protection Bypass	Undisclosed	Clément Labro (@Itm4n)
4 exploits, 1 bug: exploiting cve-2024-20017 4 different ways	RCE Buffer Overflow Memory Corruption	MediaTek	Hyper (@Hyprdude)
CVE-2024-37079:	Integer Underflow Buffer Overflow Memory Corruption	VMware	Grigory Dorodnov Guy Lederfein (@Glederfein)
Vulnerabilities in NodeJS C/C++ add-on extensions	Memory Corruption Memory Leak Out-of-Bounds Read Buffer Overflow Integer Overflow DoS Security Code Review	Node.js Third-Party Modules	Alessio Della Libera
SSD Advisory – Foscam R4M UDTMediaServer Buffer Overflow	Buffer Overflow Memory Corruption Security Code Review	Foscam	Yoseop Kim
CVE-2024-29510 – Exploiting Ghostscript using format strings	RCE Format String Vulnerability Memory Corruption	Ghostscript	Thomas Rinsma (@Thomasrinsma)
Bytecode Breakdown: Unraveling Factorio's Lua Security Flaws	RCE Memory Corruption	Factorio	Memory Corruption
17 vulnerabilities in Sharp Multi-Function Printers	Printer Hacking RCE Information Disclosure Memory Corruption Buffer Overflow DoS LFI XSS Hardcoded API Keys Default Credentials Missing Authentication Directory Listing Authentication Bypass LDAP	Sharp Toshiba	Pierre Kim (@PierreKimSec)
Preauth RCE on NVIDIA Triton Server	AI RCE Arbitrary File Write Memory Corruption	Nvidia	Zhiniang Peng (@Edwardzpeng)
Iconv, Set The Charset To RCE: Exploiting The Glibc To Hack The PHP Engine (Part 2)	RCE Buffer Overflow Memory Corruption	GNU C Library (Glibc)	Charles Fol (@Cfreal_)
Multiple vulnerabilities in Eclipse ThreadX	Buffer Overflow Memory Corruption	Microsoft Eclipse Foundation (Eclipse ThreadX)	Marco Ivaldi / Raptor (@0xdea)
Iconv, Set The Charset To RCE: Exploiting The Glibc To Hack The PHP Engine (Part 1)	RCE Buffer Overflow Memory Corruption	GNU C Library (Glibc)	Charles Fol (@Cfreal_)
Linguistic Lumberjack: Attacking Cloud Services via Logging Endpoints (Fluent Bit - CVE-2024-4323)	Cloud Memory Corruption Buffer Overflow	Cloud Native Computing Foundation (Fluent Bit)	Jimi Sebree (@DinoBytes)
CVE-2024-21115: An Oracle Virtualbox LPE Used To Win Pwn2Own	Local Privilege Escalation Out-of-Bounds Write Memory Corruption Security Code Review	Oracle (VirtualBox)	Cody Gallagher (@Cogallag)
Exploit Archeology - Exploiting an old unknown Server Side Browser	RCE Memory Corruption	Undisclosed	Alex Chapman (@Ajxchapman)
20 Security Issues Found in Xiaomi Devices	Android OS Command Injection Insecure Intent XSS Memory Corruption Hardcoded Private Key Security Code Review	Xiaomi	Oversecured (@OversecuredInc)
CVE-2024-2887: A Pwn2Own Winning Bug In Google Chrome	V8 JavaScript Engine WebAssembly JS Sandbox Breakout Browser Hacking Memory Corruption RCE	Google (Chrome) Microsoft (Edge)	Manfred Paul (@_Manfp)
Exploiting American Conquest	Reverse Engineering Buffer Overflow Memory Corruption Game Hacking	Undisclosed	Thomas Dubier (@Tomtombinary)
TP-Link TDDP Buffer Overflow Vulnerability	Reverse Engineering Buffer Overflow Memory Corruption DoS	TP-Link	Olivier Laflamme (@Olivier_boschko)
Two Bytes is Plenty: FortiGate RCE with CVE-2024-21762	RCE Out-of-Bounds Write Memory Corruption Patch Diffing	Fortinet	Dylan Pindur
Exploiting embedded mitel phones for unauthenticated remote code execution	RCE Reverse Engineering Buffer Overflow Memory Corruption Authentication Bypass OS Command Injection	Mitel	Kevin Joensen (@Ggisx)
SSD Advisory – TP-LINK NCXXX Authentication Bypass	Authentication Bypass Stack Overflow Memory Corruption Security Code Review	TP-Link	-
Qualys TRU Discovers Important Vulnerabilities in GNU C Library’s syslog()	Memory Corruption Integer Overflow Heap Buffer Overflow Security Code Review	GNU C Library (Glibc)	Qualys Threat Research Unit (TRU)
*nix libX11: Uncovering and exploiting a 35-year-old vulnerability – Part 2 of 2	RCE Memory Corruption Heap Buffer Overflow Security Code Review	X.Org (LibX11)	Yair Mizrahi
Exploring Counter-strike: Global Offensive Attack Surface	Out-of-Bounds Write Memory Corruption Game Hacking Reverse Engineering Security Code Review	Valve (CS:GO)	Victor Cutillas (@V1csec) Louis Jacotot (@Myr463)

Page 1 of 8