Memory Corruption | writeups.xyz

Title	Vulnerabilities	Programs	Authors
Hunting for Android Privilege Escalation with a 32 Line Fuzzer	Android Fuzzing Memory Corruption Local Privilege Escalation	STM Xiaomi	Maksymilian Motyl
Hacking ISP CPE equipment: FiberHome	Cryptographic Issues Weak Credentials Missing Authentication XSS Buffer Overflow Memory Corruption	FiberHome	Gergely Kalman (@Gergely_kalman)
Achieving Remote Code Execution in Steam: a journey into the Remote Play protocol	RCE Reverse Engineering Fuzzing Path Traversal Memory Corruption Heap Overflow Format String Vulnerability	Valve	Valentino Ricotta
OLE object are still dangerous today — Exploiting Microsoft Office	Memory Corruption RCE	Microsoft (Office)	Zhiniang Peng (@Edwardzpeng)
Citrix Bleed: Leaking Session Tokens with CVE-2023-4966	Buffer Over-Read Memory Corruption Security Code Review	Citrix Systems	Dylan Pindur
Technical Advisory: Vulnerabilities Identified within ListServ	CSRF Samesite Cookie Bypass Reflected XSS Stored XSS Unrestricted File Upload DLL Hijacking Local Privilege Escalation Buffer Overflow Memory Corruption	ListServ	Adam Crosser
How I Made A Heap Overflow In Curl	Heap Buffer Overflow Memory Corruption	Internet Bug Bounty (Curl)	Daniel Stenberg (@Bagder)
Rooting Xiaomi WiFi Routers	OS Command Injection Buffer Overflow Memory Corruption Security Code Review	Xiaomi	Julien R. Marin Duroyon
Uncursing the ncurses: Memory corruption vulnerabilities found in library	Memory Corruption	Ncurses	Microsoft Threat Intelligence (@MsftSecIntel)
CVE-2023-4039: GCC's -fstack-protector fails to guard dynamic stack allocations on ARM64	Memory Corruption Buffer Overflow	GCC	Tom Hebb
Chained to hit: Discovering new vectors to gain remote and root access in SAP Enterprise Software	SAP Java RMI RCE JNDI Injection SQL Injection DoS SSRF Missing Authentication HTTP Header Injection Privilege Escalation Information Disclosure Memory Corruption	SAP	Pablo Artuso (@Lmkalg) Yvan Genuer
Finding and Exploiting Citrix NetScaler Buffer Overflow (CVE-2023-3519) (Part 3)	Buffer Overflow Memory Corruption	Citrix Systems (NetScaler)	Dylan Pindur
Shifting boundaries: Exploiting an Integer Overflow in Apple Safari	Integer Overflow Memory Corruption Browser Hacking	Apple	Vignesh Rao
SSD Advisory – TP-Link TL-WR840N Stack Buffe Overflow DOSy	Buffer Overflow Memory Corruption DoS Security Code Review	TP-Link	Delsploit (@Delsploit)
Uncovering weaknesses in Apple macOS and VMWare vCenter: 12 vulnerabilities in RPC implementation	Kernel Hacking MS-RPC DoS Memory Corruption Use-After-Free Heap Overflow Buffer Overflow	Apple (MacOS) VMware	Aleksandar Nikolic Dimitrios Tatsis
Bee-yond Capacity: Unauthenticated RCE in Extreme Networks/Aerohive Wireless APs - CVE-2023-35803	Memory Corruption Buffer Overflow RCE	Extreme Networks	Lachlan Davidson (@Lachlan2k)
Exploiting the HP Printer without the printer (Pwn2Own 2022)	Printer Hacking Buffer Overflow Memory Corruption	HP	Interrupt Labs (@InterruptLabs)
One mistake, Three bugs: Comprehensive android pentesting.	Android Bruteforce Buffer Overflow Memory Corruption	Undisclosed	Kushal Jain
Multiple Vulnerabilities in Fortra Globalscape EFT Administration Server [FIXED]	Out-of-Bounds Read Memory Corruption DoS Information Disclosure Credentials Sent Over Unencrypted Channel	Fortra (Globalscape)	Ron Bowes (@Iagox86)
chonked pt.1: minidlna 1.3.2 http chunk parsing heap overflow (cve-2023-33476) root cause analysis	Memory Corruption Heap Overflow Buffer Overflow RCE	MiniDLNA	Hyper (@Hyprdude)
XORtigate: Pre-authentication Remote Code Execution on Fortigate VPN (CVE-2023-27997)	RCE Heap Overflow Memory Corruption	Fortinet (Fortigate VPN)	Charles Fol (@Cfreal_)
Anatomy of an IoT Exploit, from Hands-On to RCE	IoT RCE Buffer Overflow Memory Corruption	Wavlink	David Baker
Exploring Three Remote Code Execution Vulnerabilities in RPC Runtime	RCE MS-RPC Integer Overflow Memory Corruption	Microsoft (Windows)	Ben Barnea (@Nachoskrnl)
Exploiting The Sonos One Speaker Three Different Ways: A Pwn2Own Toronto Highlight	Memory Corruption RCE Out-of-Bounds Read	Sonos	The ZDI Research Team (@Thezdi)
‘FriendlyName’ Buffer Overflow Vulnerability in Wemo Smart Plug V2	IoT Buffer Overflow Memory Corruption Reverse Engineering	Belkin (Wemo)	Amit Serper (@0xAmit) Reuven Yakar

Page 2 of 8