nhi-zero-trust-bypass

Project: Exploiting Protocol Vulnerabilities to Manipulate NHI Secrets and Bypass Zero-Trust Policies Screenshots Below are real screenshots from the demonstration. For more, see screenshots/README.md. 1. DNS Exploit BIND Crash A. Exploit Packet Sent Scapy sends a malformed TSIG DNS packet to BIN...

sysctl_coalition_get_pid_list-dos

sysctlcoalitiongetpidlist-dos The sysctlcoalitiongetpidlist function in bsd/kern/syscoalition.c uses the coalitiongetpidlist function to collect a list of PIDs in a coalition. This function will return the number of PIDs if successful or a negative errno on failure. However, the...

CVE-2015-5374-DoS-PoC

CVE-2015-5374 Siemens SIPROTEC 4 and SIPROTEC Compact EN100 Ethernet Module CVE-2015-5374 Siemens SIPROTEC 4 and SIPROTEC Compact EN100 Ethernet Module ... Done, say goodbye! Metasploit Module This module sends a specially crafted packet to Port 50000/UDP could cause a denial of service of the...

CVE-2017-3881-exploit-cisco-

A vulnerability in the Cisco Cluster Management Protocol CMP processing code in Cisco IOS and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a reload of an affected device or remotely execute code with elevated privileges. The Cluster Management Protocol utilizes...

CVE-2026-98128

A flaw was found in the Linux kernel's mpi3mr driver. This vulnerability can lead to a Denial of Service DoS due to kernel memory exhaustion. When an error occurs during Serial Attached SCSI SAS port addition, the driver fails to properly release an acquired reference count on the target device...

CVE-2020-5236

Waitress 1.4.2 ReDoS - CVE-2020-5236 Waitress version 1.4.2 allows a DOS attack When waitress receives a header that contains invalid characters. When a header like "Bad-header: xxxxxxxxxxxxxxx\x10" is received, it will cause the regular expression engine to catastrophically backtrack causing the...

CVE-2026-93815

A flaw was found in the Linux kernel's Au1000 Ethernet driver. This vulnerability allows a privileged local user to cause a Denial of Service DoS when disabling or closing the network interface. The issue occurs because the driver executes a sleepable interrupt cleanup routine while holding an...

CVE-2026-93283

A flaw was found in the Linux kernel's I3C Improved Inter-Integrated Circuit master subsystem. This issue can result in a Denial of Service DoS caused by a system crash. When device registration fails, the driver frees the device object but fails to clear internal pointers referencing the freed...

CVE-2013-5211

CVE-2013-5211 PoC Network Time Protocol Daemon ntpd monlist Command Enabled DoS This Python script is used to detect CVE-2013-5211, a vulnerability found in NTP Network Time Protocol servers. Using the ntpd monlist command, this vulnerability could allow an attacker to send a series of UDP packet...

CVE-2026-93814

A flaw was found in the Linux kernel's Serial Peripheral Interface SPI subsystem. When a system suspend is initiated while an SPI controller operating in target mode has an active data transfer, the ongoing transfer is not cleanly aborted. This issue allows a local user to cause a Denial of Servi...

IOFireWireFamily-null-deref

IOFireWireFamily-null-deref IOFireWireFamily-null-deref is a proof-of-concept exploit for CVE-2017-2388, a NULL pointer derefererence in IOFireWireUserClient that was fixed in macOS Sierra 10.12.4. This vulnerability can be triggered to cause denial of service on devices with a FireWire port...

CVE-2026-93813

A flaw was found in the Linux kernel's Btrfs file system. The file system validation mechanism fails to properly verify file name lengths in file reference entries, leading to an out-of-bounds memory access when processing corrupted data. A local attacker can exploit this issue by mounting or...

CVE-2026-93281

A flaw was found in the Linux kernel's Realtek Wi-Fi driver rtw89. This vulnerability may allow an attacker within wireless range to cause a Denial of Service DoS via a system crash. By transmitting a crafted wireless frame with malformed capability information, an attacker can trigger an imprope...

CVE-2026-74765

A flaw was found in Net::IDN::Punycode. An integer overflow vulnerability in the encodepunycode function, specifically within the XS backend, allows a remote attacker to cause an out-of-bounds read. By supplying a specially crafted string, an attacker can trigger the overflow, leading to either t...

CVE-2016-2569

Hello there, Thank you for reading my first blog entry. Today we will go with exploit creation for one of the open-source tool Squid Caching proxy server. So What Is Squido? Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. It reduces bandwidth and improves response time...

CVE-2022-24122

CVE-2022-24122 Simple Denial of Service using CVE-2022-24122 It works with 1 core system and it has 80% probability of success with 2 cores...

CVE-2026-37065

CVE-2026-37065 Veno File Manager Project 4.4.9 is vulnerable to Arbitrary File Deletion. To exploit the vulnerability, an authenticated attacker with the role of superadmin can send a specially crafted POST request to the affected endpoint using the url parameter remove to control the file to be...

CVE-2020-13935

Exploit for WebSocket Vulnerability in Apache Tomcat CVE-2020-13935 In the corresponding blog post the analysis and exploitation of the vulnerability is explained in detail. Usage Clone the repository, then build the tcdos binary. Run the program as follows to test whether a particular WebSocket...

CVE-2026-98122

A flaw was found in the Linux kernel's Virtual Extensible LAN VXLAN driver. A local unprivileged attacker can cause a denial of service DoS or potentially escalate privileges through memory corruption. This vulnerability occurs because the Multicast Database MDB subsystem improperly validates...

CVE-2026-93280

A flaw was found in the Linux kernel's Greybus audio subsystem. An attacker connecting a malicious Greybus device can trigger a Denial of Service DoS or unauthorized information disclosure by providing a crafted audio topology descriptor. Because the driver fails to verify that internal section...