5498 matches found
dheater
DHEater DHEater 是 DHEat 攻击（CVE-2002-20001）的概念验证实现。有关该攻击的更多信息，请访问 项目页面 或阅读 完整技术论文（刊载于 IEEE Access）。 免责声明 DHEater 是一个概念验证的拒绝服务工具，仅 用于防御性安全测试、缓解措施验证和研究。请仅在您拥有或已获得明确书面授权的系统上运行。在未经许可的系统上使用该工具可能违法，并且很可能导致目标服务中断。作者按原样提供代码，不提供任何担保，并且对任何误用或损害不承担责任。 使用方法 DHEater 是一个命令行工具。--protocol 选项和目标 uri 是必填项： 对 TLS...
dheat_dos_attack_poc
DHeat DoS 攻击 POC CVE-2002-20001 用于测试 SSH 服务中 DHEat DoS 攻击 CVE-2002-20001 是否存在的 POC 使用方法 命令: python3 dheatdosattackpoc.py : 替换为你有权测试的 SSH 服务器的实际 IP 地址或主机名。 : 运行 SSH 服务的目标端口号。 执行步骤: 在 Ubuntu、Kali 等系统上安装 Python 3 的基本命令如下： $ sudo apt update $ sudo apt install python3 下载并更改文件权限： $ git clone...
SquirrelMail 1.2.6/1.2.7 - Cross-Site Scripting
The Virtual Keyboard plugin for SquirrelMail 1.2.6/1.2.7 is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. id: CVE-2002-1131 info: name: SquirrelMail 1.2.6/1.2.7 - Cross-Site Scripting author: dhiyaneshDk,s4e-io severity: high description:...
Binary-Exploitation-and-Kernel-Escalation
Binary-Exploitation-and-Kernel-Escalation Acceso a nivel root asegurado mediante la identificación y explotación de configuraciones incorrectas y software desactualizado. Vulnerabilidad de desbordamiento de búfer en una versión desactualizada de modssl CVE-2002-0082. La escalada de privilegios se...
CVE-2002-2154
此存储库没有 README。...
CVE-2002-1614
CVE-2002-1614 此利用仅用于教育目的或您合法的渗透测试过程。 来源：https://www.exploit-db.com/exploits/281 编译 gcc exploit.c 输出文件：a.out 用法 执行权限：chmod +x a.out 执行：./a.out...
CVE-2002-0612
creationtimestamp| type| source ---|---|--- 2026-08-16 19:00:06+00:00| seen| Telegram/yqEzuQzuMzDdZeKit41hYOMMMZUTpzZydC0qSWzVPb9MaYA 2026-08-17 00:00:08+00:00| seen| Telegram/yqEzuQzuMzDdZeKit41hYOMMMZUTpzZydC0qSWzVPb9MaYA...
PT-2026-71153
Name of the Vulnerable Software and Affected Versions Microsoft UFO versions prior to 3.0.8 Description An issue exists where the is blocked ip function in ufo/utils/url security.py fails to block specific IPv6 prefixes, including NAT64 64:ff9b::/96 and 64:ff9b:1::/48, 6to4 2002::/16, and Teredo...
Sitemio WISECP 跨站请求伪造漏洞
Sitemio WISECP is an automated management and billing platform developed by the Turkish company Sitemio, aimed at hosting services and domain name services. Versions of Sitemio WISECP from 2002 to 2026 had a cross-site request forgeing vulnerability. This vulnerability stems from cross-site reque...
CVE-2002-0059
creationtimestamp| type| source ---|---|--- 2026-03-09 17:15:08+00:00| seen| https://gist.github.com/verdurin/ec4ecbbbe37c7ae1f4a79c34dbdb6793...
CVE-2002-1614
creationtimestamp| type| source ---|---|--- 2026-02-27 07:25:02+00:00| seen| https://gist.github.com/ghh-jb/61f35d015c4e180bbddcf324be113e26...
MiracleLinux 7 : kernel-3.10.0-1160.118.1.el7 (AXSA:2024-7723:11)
The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2024-7723:11 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security fixes: kernel: use after free in unixstreamsendpage...
SUSE CVE-2002-0657
Buffer overflow in OpenSSL 0.9.7 before 0.9.7-beta3, with Kerberos enabled, allows attackers to execute arbitrary code via a long master key...
CVE-2021-4467
Positive Technologies MaxPatrol 8 and XSpider contain a remote denial-of-service vulnerability in the client communication service on TCP port 2002. The service generates a new session identifier for each incoming connection without adequately limiting concurrent requests. An unauthenticated remo...
CVE-2021-4467 Positive Technologies MaxPatrol 8 & XSpider Remote DoS
Positive Technologies MaxPatrol 8 and XSpider contain a remote denial-of-service vulnerability in the client communication service on TCP port 2002. The service generates a new session identifier for each incoming connection without adequately limiting concurrent requests. An unauthenticated remo...
CVE-2021-4467
CVE-2021-4467 affects Positive Technologies MaxPatrol 8 and XSpider, where the client communication service listening on TCP port 2002 accepts new session IDs per connection without adequately throttling concurrent requests. An unauthenticated attacker could issue repeated HTTPS requests to cause...
CVE-2021-4467: Uncontrolled Resource Consumption
Positive Technologies MaxPatrol 8 and XSpider contain a remote denial-of-service vulnerability in the client communication service on TCP port 2002. The service generates a new session identifier for each incoming connection without adequately limiting concurrent requests. An unauthenticated remo...
EUVD-2002-2079
Malware in sbrugna...