CVE-2024-35333

CVE-2024-35333 Esiste una vulnerabilità di stack buffer overflow nella gestione dei charset di html2xhtml versione 1.3. Un attaccante può sfruttare questa vulnerabilità fornendo un input appositamente predisposto, che porterebbe all'overflow della variabile 'buf' situata nello stack. Lo...

CVE-2021-23017

CVE-2021-23017 PoC Scanner Verifica della vulnerabilità di overflow DNS di NGINX - CVE-2021-23017 PoC Questo script in Python verifica se un server nginx è potenzialmente vulnerabile alla vulnerabilità critica CVE-2021-23017 , che colpisce il resolver DNS integrato in nginx e può provocare un...

CVE-2025-6998-CalibreWeb-0.6.24-ReDoS

CVE-2025-6998-CalibreWeb-0.6.24-ReDoS Exploit per la ReDoS di CalibreWeb v0.6.24...

CVE-2018-16890

CVE-2018-16890 Foi encontrada uma falha de leitura fora dos limites na forma como o curl lidava com cabeçalhos do tipo 2 do NTLMv2. Ao conectar a um servidor remoto malicioso que usa autenticação NTLM, a falha poderia fazer o curl travar. Um script simples para verificar o seu curl...

CVE-2025-71406

A flaw was found in Nokogiri, which bundles a vulnerable version of libxslt. This vulnerability involves a use-after-free condition that can be triggered by processing specially crafted Extensible Stylesheet Language Transformations XSLT. A remote attacker could exploit this to cause memory...

CVE-2023-31606

CVE-2023-31606 Vulnerabilità È stato scoperto un problema di Denial of Service tramite Espressione Regolare ReDoS nella funzione sanitizehtml della gemma redcloth = v4.0.0. Questa vulnerabilità consente agli aggressori di causare un Denial of Service DoS fornendo un payload appositamente...

CVE-2022-24122

CVE-2022-24122 Einfacher Denial of Service mit CVE-2022-24122 Es funktioniert mit einem 1-Kern-System und hat bei 2 Kernen eine Erfolgswahrscheinlichkeit von 80 %...

CVE-2023-54354

A flaw was found in Nokogiri, specifically in its bundled libxml2 library when processing XML schemas. An attacker can exploit this by providing a specially crafted XML schema, leading to a NULL pointer dereference. This can cause the application to crash, resulting in a denial of service...

CVE-2022-50998

A flaw was found in Nokogiri, a Ruby gem for parsing XML and HTML documents. This vulnerability arises from issues within its bundled libxml2 library, specifically involving data corruption from entity reference cycles and integer overflows when processing large XML files. A remote attacker could...

CVE-2021-47996

A flaw was found in Nokogiri, specifically within its bundled libxml2 library. A remote attacker could exploit multiple vulnerabilities, including memory leaks, buffer over-reads, heap-based buffer overflows, and out-of-bounds reads, by processing specially crafted XML documents. This could lead ...

CVE-2025-21574-Exploit

CVE-2025-21574-Exploit Caratteristiche principali di questo exploit Black-Box: 1. Brute-Forcing delle credenziali: Testa 12+ combinazioni comuni predefinite di nome utente/password Controlla 5 database di sistema comuni Rileva automaticamente credenziali valide 2. Tentativo di accesso anonimo:...

PX4-Military-UAV-Autopilot-1.12.3-Stack-Buffer-Overflow-Exploit-CVE-2025-5640-

PX4 Military UAV Autopilot =1.12.3 Stack-Pufferüberlauf-Exploit CVE-2025-5640 Autor: Mohammed Idrees Banyamer @banyamersecurity GitHub: https://github.com/mbanyamer Datum: 2025-06-21 Getestet auf: Ubuntu 20.04 LTS + PX4 SITL jMAVSim CVE: CVE-2025-5640 Typ: Denial of Service DoS durch...

CVE-2019-14678

CVE-2019-14678: Entità Esterna XML in SAS XML Mapper La versione 9.45 di SAS XML Mapper presenta una vulnerabilità di tipo Entità Esterna XML XXE che può essere sfruttata da malintenzionati in molteplici modi. Alcuni esempi sono la lettura locale di file, l'esfiltrazione di file fuori banda, il...

CVE-2019-11287

CVE-2019-11287: DoS via Estouro de Heap no Plugin de Gerenciamento Web do RabbitMQ Pivotal RabbitMQ, versões 3.7.x anteriores a 3.7.21 e 3.8.x anteriores a 3.8.1, e RabbitMQ for Pivotal Platform, versões 1.16.x anteriores a 1.16.7 e 1.17.x anteriores a 1.17.4, contêm um plugin de gerenciamento we...

kernel: net: ipv6: use-after-free in fib6_rule_suppress due to stale res->rt6 pointer

A use-after-free vulnerability was found in the Linux kernel's IPv6 FIB rule lookup path. In fib6rulesuppress, when a route is suppressed and released via ip6rtputflags, the res-rt6 pointer is not cleared. If no later rule supplies a replacement route, fib6rulelookup returns the stale freed rt6in...

CVE-2023-29409

CVE-2023-29409 root@kitploit: $ openssl genrsa -out ca-key.pem 2048 $ openssl req -x509 -new -nodes -key ca-key.pem -sha256 -days 100000 -out ca.pem \ -addext 'keyUsage=keyCertSign' \ -subj '/CN=Root CA' $ go run main.go server in the background $ go run main.go client causes high cpu load on...

PoC-CVE-2025-8671-MadeYouReset-HTTP-2

PoC-CVE-2025-8671-MadeYouReset-HTTP-2 PoC per validare la vulnerabilità MadeYouReset Questo repository contiene una PoC controllata sviluppata per validare se un'infrastruttura è potenzialmente vulnerabile alla CVE-2025-8671 MadeYouReset. Il codice non è un exploit completo e non esegue un vero D...

CVE-2026-80589

A flaw was found in the Linux kernel's block subsystem. This vulnerability occurs when a disk's initialization fails before it is fully integrated, causing a critical timer to remain active even after the associated memory is released. This improper handling of memory can lead to a use-after-free...

CVE-2026-80570

A flaw was found in the synaptics-rmi4 component of the Linux kernel. This vulnerability occurs when an error in processing a report request or command leads to an incorrect size being used for subsequent data operations. A local user could exploit this by manipulating the video format, causing t...

CVE-2026-80528

A flaw was found in the Linux kernel's Ceph filesystem. When the kernel handles replies and fills inode and dentry caches, a memory allocation can trigger a memory reclamation process. This process can incorrectly interpret Ceph-specific data as a journal handle if it interacts with another...