Alexandria Library

A curated collection of awesome articles

Here are some ressources related to Cve, Vulnerability, Security. Hoping you will find learning material, alternative tools or just some interesting stuff.

Home > Linux, Virtualization, Security, Co... > Cybersecurity, Malware, Encryption,... > Security, Vulnerability, CVE, OpenS... > Cve, Vulnerability, Security

Articles

Sudo: Heap-based overflow with small passwords

See discussion (233 comments, 279 points) - Archive

SHA-3 Buffer Overflow

See discussion (172 comments, 416 points) - Archive

An unexpected Redis sandbox escape affecting Debian-based distros

See discussion (59 comments, 154 points) - Archive

Python 3.x: RCE in Python applications that accept floats as untrusted input

See discussion (69 comments, 217 points) - Archive

Sudo buffer overflow explained, and how to patch (WSL and Linux) [video]

See discussion (37 comments, 90 points) - Archive

Baron Samedit: Heap-based buffer overflow in Sudo (CVE-2021-3156)

See discussion (2 comments, 120 points) - Archive

Heap-Based Buffer Overflow in Sudo

See discussion (2 comments, 94 points) - Archive

Heap-based buffer overflow in Sudo

See discussion (317 comments, 400 points) - Archive

15 years later: remote code execution in qmail

See discussion (159 comments, 259 points) - Archive

Local Privilege Escalation in OpenBSD's Dynamic Loader

See discussion (15 comments, 141 points) - Archive

Show HN: Enter your URL and view CVEs affecting your stack over last 6 months

See discussion (48 comments, 144 points) - Archive

Exim – remote attacker can execute programs with root privileges

See discussion (69 comments, 142 points) - Archive

VLC 3.0.7 and security

See discussion (69 comments, 196 points) - Archive

The Stack Clash

See discussion (69 comments, 279 points) - Archive

IKEv1 Information Disclosure Vulnerability in Multiple Cisco Products

See discussion (27 comments, 94 points) - Archive

SSL Labs in 2016 and Beyond

See discussion (20 comments, 204 points) - Archive

A tale of a DNS exploit: CVE-2015-7547

See discussion (14 comments, 107 points) - Archive

Glibc getaddrinfo stack-based buffer overflow

See discussion (456 comments, 502 points) - Archive

Cisco buffer overflow vulnerability with remote code execution

See discussion (20 comments, 111 points) - Archive

CVE-2015-8126: Multiple buffer overflows in libpng

See discussion (84 comments, 205 points) - Archive

PuTTY 0.66 fixes security vulnerability

See discussion (52 comments, 115 points) - Archive

Redis Hot Patch

See discussion (9 comments, 92 points) - Archive

An overhyped GHOST

See discussion (28 comments, 96 points) - Archive

CVE-2015-0235 – GHOST: glibc gethostbyname buffer overflow

See discussion (241 comments, 531 points) - Archive

Systemd-resolved DNS cache poisoning

See discussion (90 comments, 93 points) - Archive

Bash bug: apply the unofficial patch now (CVE-2014-6277)

See discussion (45 comments, 124 points) - Archive

Bash bug: the other two RCEs, or how we chipped away at the original fix

See discussion (20 comments, 152 points) - Archive

3rd Shellshock Vulnerability Found

See discussion (42 comments, 101 points) - Archive

Re: CVE-2014-6271 – remote code execution through bash

See discussion (51 comments, 108 points) - Archive

CVE-2014-7169: Bash Fix Incomplete, Still Exploitable

See discussion (210 comments, 557 points) - Archive

CVE-2014-6271: Remote code execution through bash

See discussion (416 comments, 905 points) - Archive

Massive Number of Vulnerabilities Found in X.Org

See discussion (107 comments, 197 points) - Archive

Libcurl remote code execution

See discussion (60 comments, 129 points) - Archive

Terminal scrollback written to local disk, including remote ssh sessions.

See discussion (35 comments, 83 points) - Archive

Format string vulnerability found in 'sudo'

See discussion (32 comments, 171 points) - Archive

Multiple programming languages vulnerable to DoS via hash algorithm collision

See discussion (39 comments, 152 points) - Archive

Apache vulnerable to easy DOS attack - workaround available

See discussion (22 comments, 111 points) - Archive

I got accidental code execution via glibc?

See discussion (7 comments, 89 points) - Archive

CVE-2023-40547 – avoid incorrectly trusting HTTP headers

See discussion (108 comments, 256 points) - Archive

Bytecode Breakdown: Unraveling Factorio's Lua Security Flaws

See discussion (122 comments, 466 points) - Archive