EUVD-2026-67048

opensslencrypt pip: openssl-encrypt versions 1.4.8 and earlier fail to validate the 36-bit STREAMINFO totalsamples field of FLAC files before using it to size an allocation np.random.randintsize=totalsamples, channels. A 50-byte crafted FLAC file declaring 100 million samples causes a...

CVE-2026-81687

openssl_encrypt versions before 1.4.9 are vulnerable to a denial-of-service condition caused by the absence of a time ceiling on key derivation function (KDF) iteration counts embedded in file metadata. An attacker can craft a file with an extremely high iteration count, forcing the application t...

CVE-2026-81686

openssl_encrypt 1.4.x before 1.4.9 ships an optional D-Bus crypto service whose org.freedesktop.DBus.Properties.Set method performs neither a polkit authorization check nor value validation. Any local user on the system bus can set MaxConcurrentOperations to 0/negative (blocking all subsequent op...

EUVD-2026-67042

opensslencrypt 1.4.x before 1.4.9 contains an optional D-Bus crypto service whose org.freedesktop.DBus.Properties.Set method performs neither a polkit authorization check nor value validation. Any local user on the system bus can call Set without authorization and set MaxConcurrentOperations to...

CVE-2026-81686 openssl_encrypt before 1.4.9 D-Bus Properties Authorization Bypass

opensslencrypt 1.4.x before 1.4.9 contains an optional D-Bus crypto service whose org.freedesktop.DBus.Properties.Set method performs neither a polkit authorization check nor value validation. Any local user on the system bus can call Set without authorization and set MaxConcurrentOperations to...

CVE-2026-81334

darknet through 6.0 is vulnerable to an out-of-bounds read and write in its .cfg parser. The layer array in src-lib/darknet_network.cpp is sized to the declared number of layer sections, but the shortcut, scale_channels, and sam sections (via their from field) and the route section (via its layer...

CVE-2026-81334 darknet through 6.0 Out-of-Bounds Read and Write via Unchecked Layer Index in .cfg Parser

darknet subscripts its layer array with an index taken from a configuration file without checking it against the array's length. The array is allocated in src-lib/darknetnetwork.cpp as xcallocnet.n, sizeofDarknet::Layer, sized to exactly the number of layer sections the file declares. The shortcu...

sockstress

sockstress Sockstress CVE-2008-4609 implementazione in Go Installazione root@kitploit: go get github.com/marcelki/sockstress Utilizzo root@kitploit: Usage: sockstress options... Options: -p The destination port to attack. -i The network interface to use. -d The delay between SYN packets You can...

CVE-2026-80579

A flaw was found in the Linux kernel's fbdev component. A local user could exploit a use-after-free vulnerability by manipulating video modes. When a mode is deleted, the fbinfo-mode pointer might not be cleared, leading to a stale pointer dereference during subsequent system file system sysfs...

CVE-2024-47176

CVE-2024-47176 !CAUTION Solo per uso educativo/difensivo, utilizza solo dove sei autorizzato, usa a tuo rischio! Come usare python3 scanner.py CIDR SCANNER IP Esempio python3 scanner.py 192.168.0.0/16 192.168.5.100 Moduli Richiesti tqdm Installa tramite pip3/apt: $ pip3 install tqdm $ sudo apt...

CVE-2020-5236

Waitress 1.4.2 ReDoS - CVE-2020-5236 La versione 1.4.2 di Waitress consente un attacco DoS quando Waitress riceve un header contenente caratteri non validi. Quando viene ricevuto un header come "Bad-header: xxxxxxxxxxxxxxx\x10", provoca un backtracking catastrofico nel motore delle espressioni...

CVE-2020-27223

CVE-2020-27223 Uso root@kitploit: $ mvn spring-boot:run 9.4.36.v20210114 root@kitploit: $ ./poc/cve-2020-27223-poc1.sh "timens":"58,557","acceptlanguage":"aab" real 0m0.093s 🐇 user 0m0.006s sys 0m0.007s "timens":"18,461,763,438","acceptlanguage":"ahn" real 0m35.339s 🐢 user 0m0.006s sys 0m0.006s...

CVE-2024-35333

CVE-2024-35333 Esiste una vulnerabilità di stack buffer overflow nella gestione dei charset di html2xhtml versione 1.3. Un attaccante può sfruttare questa vulnerabilità fornendo un input appositamente predisposto, che porterebbe all'overflow della variabile 'buf' situata nello stack. Lo...

CVE-2021-23017

CVE-2021-23017 PoC Scanner Verifica della vulnerabilità di overflow DNS di NGINX - CVE-2021-23017 PoC Questo script in Python verifica se un server nginx è potenzialmente vulnerabile alla vulnerabilità critica CVE-2021-23017 , che colpisce il resolver DNS integrato in nginx e può provocare un...

CVE-2025-6998-CalibreWeb-0.6.24-ReDoS

CVE-2025-6998-CalibreWeb-0.6.24-ReDoS Exploit per la ReDoS di CalibreWeb v0.6.24...

CVE-2018-16890

CVE-2018-16890 Foi encontrada uma falha de leitura fora dos limites na forma como o curl lidava com cabeçalhos do tipo 2 do NTLMv2. Ao conectar a um servidor remoto malicioso que usa autenticação NTLM, a falha poderia fazer o curl travar. Um script simples para verificar o seu curl...

CVE-2025-71406

A flaw was found in Nokogiri, which bundles a vulnerable version of libxslt. This vulnerability involves a use-after-free condition that can be triggered by processing specially crafted Extensible Stylesheet Language Transformations XSLT. A remote attacker could exploit this to cause memory...

CVE-2023-31606

CVE-2023-31606 Vulnerabilità È stato scoperto un problema di Denial of Service tramite Espressione Regolare ReDoS nella funzione sanitizehtml della gemma redcloth = v4.0.0. Questa vulnerabilità consente agli aggressori di causare un Denial of Service DoS fornendo un payload appositamente...

CVE-2022-24122

CVE-2022-24122 Einfacher Denial of Service mit CVE-2022-24122 Es funktioniert mit einem 1-Kern-System und hat bei 2 Kernen eine Erfolgswahrscheinlichkeit von 80 %...

CVE-2023-54354

A flaw was found in Nokogiri, specifically in its bundled libxml2 library when processing XML schemas. An attacker can exploit this by providing a specially crafted XML schema, leading to a NULL pointer dereference. This can cause the application to crash, resulting in a denial of service...