I'm a sercurity researcher and coder ๐ญ my blog
CNVD = Chinese National Vulnerability Database ID
I don't like CVE ID, because nowadays you can apply for a CVE ID even without providing any POC, and even the provided code snippet doesn't contain any vulnerabilities
id | company | model | vul type | method |
---|---|---|---|---|
X | tenda | Ac6 | RCE | reverse |
x | vigorfly | 200 | RCE | reverse |
x | vigorfly | 2960 | RCE | reverse |
CNVD-2023-52338 | dlink | 615 | overflow | reverse + rcall |
CNVD-2023-52238 | dlink | 615 | overflow | reverse + rcall |
CNVD-2023-56319 | dlink | 615 | overflow | reverse + rcall |
CNVD-2023-53593 | dlink | 615 | overflow | reverse + rcall |
CNVD-2023-53542 | dlink | 615 | overflow | reverse + rcall |
CNVD-2023-53541 | dlink | 615 | overflow | reverse + rcall |
.... hundreds of overflow
id | company | model | vul type | method |
---|---|---|---|---|
CNVD-2021-21860 | Valve | steam | Dll Hijacking | dllfuzzer |
CNVD-2021-18307 | tencent | yehu | Dll Hijacking | dllfuzzer |
x | sangfor | edr | Dll Hijacking | dllfuzzer |
x | tencent | null pointer derefer | jackalope + tinyInst | |
x | microsoft | win32cacl | null pointer derefer | rust + Mesos |
.... hundreds of Dll Hijacking found by dllfuzzer
id | company | model | vul type | method |
---|---|---|---|---|
X | GIMP | libbabl | SEGV | AFL++ |
SEGV found by AFL++ in libbabl
id | company | model | vul type | method |
---|---|---|---|---|
CVE-2020-16610 | Hoosk CMS | x | CSRF | code audit |
A very simple tool that can find hundreds of dll Hijacking vulnerabilities, which is developed in rust
to be public ....
A tool that can help researcher find lots of potential vulnerabilities in IOT firmware inspired by @alexjplaskett
to be public ....