BC-WHY-NOT-LEARN-NEW-STUFF-

BC-WHY-NOT-LEARN-NEW-STUFF- HACKING SIP/PJSIP far crashare istanze asterisk remote : https://github.com/asterisk/asterisk/security/advisories/GHSA-v428-g3cw-7hv9...

BUGS_OOM_NULL_PTR_DEREF

BUGSOOMNULLPTRDEREF BUG SU ANDROID NULL PTR DEREF, OOM SOLO PER LE RISATE...

CVE-2021-21341

CVE-2021-21341 XStream DoS Offizielle Ankündigung von XStream CVE-2021-21341 Sicherheitslücke CVE-2021-21341: XStream kann einen Denial of Service verursachen. Betroffene Versionen Alle Versionen bis einschließlich Version 1.4.15 sind betroffen, wenn die Version standardmäßig verwendet wird. Kein...

Iot_Hacking_Camera_0day

IotHackingCamera0day Fotocamera IoT 0day AHD DVR ADN-448 è soggetto a un buffer overflow non autenticato sull'interfaccia http. Basta navigare sull'interfaccia del server web e inserire una stupida quantità di dati nel nome utente e nella password, e guarda come la fotocamera si riavvia. Per favo...

Linux-Kernel-local-DoS

Linux-Kernel-local-DoS DoS locale del kernel Linux basato su memleak da un utente non privilegiato, basta prima fare una prctl PRTIMERCREATERESTOREIDSON come da https://x.com/spendergrsec/status/1990887509664928062...

NtCreateFile-DoS-Windows-POC

Questo repository non contiene un README...

RowHammer-Exploit

RowHammer-Exploit RowHammer Based-Exploit Hintertür für syssuid mithilfe von Rowhammer Muss noch überarbeitet werden... herausfinden, warum Dinge nicht richtig funktionieren... root@kitploit: Current stage... Denial fails with the following stack trace... UG: unable to handle kernel paging reques...

CVE-2026-68929 FastGPT: Unauthenticated WeChat channel hijack and denial of service via shareId-only authorization

FastGPT is an open-source LLM platform for building AI applications on a knowledge base. In versions prior to 4.15.2, the WeChat iLink share-channel endpoints authorize requests using only the public shareId, with no authenticated identity or team-ownership check. As a result, an unauthenticated...

CVE-2026-68929

FastGPT , an open-source LLM platform, is vulnerable to unauthenticated WeChat channel hijack and denial of service in versions prior to 4.15.2 . The WeChat (iLink) share-channel endpoints authorize requests using only the publicly exposed shareId , with no authenticated identity or team-ownershi...

CVE-2026-68929 FastGPT: Unauthenticated WeChat channel hijack and denial of service via shareId-only authorization

FastGPT is an open-source LLM platform for building AI applications on a knowledge base. In versions prior to 4.15.2, the WeChat iLink share-channel endpoints authorize requests using only the public shareId, with no authenticated identity or team-ownership check. As a result, an unauthenticated...

CVE-2026-81893

A flaw was found in gdk-pixbuf. When loading a specially crafted JPEG image containing chunked ICC profile markers, an error during ICC profile parsing can leave stale size metadata after the profile buffer is freed. A subsequent allocation in the same decode can cause an out-of-bounds write,...

CVE-2026-59320

When a container-level ErrorHandler is configured the mitigation for finding 221000, each delivery whose processing throws still permanently consumes one link credit. After initialCredits default 100 failing messages the receiver's credit reaches zero and the broker stops delivering, leaving the...

CVE-2026-59315

The Spring Cloud Config Monitor is susceptible to Denial of Service attacks via malicious payloads. Spring Cloud Config 5.0.0 - 5.0.4 Spring Cloud Config 4.3.0 - 4.3.4 Spring Cloud Config 4.0.0 - 4.2.8 Spring Cloud Config 3.1.14 and earlier...

CVE-2026-59289

Spring for GraphQL's Spring Data pagination support resolves arguments of a scrollable query and forwards the client-supplied values to the underlying repository. An attacker can forge a malicious query for a Connection field that can exhaust application memory or place significant, prolonged loa...

CVE-2026-59287

Spring for GraphQL is vulnerable to Denial of Service attacks when using the WebSocket client with keepAlive enabled. Spring for GraphQL 2.0.0 - 2.0.4 Spring for GraphQL 1.4.0 - 1.4.6 Spring for GraphQL 1.3.0 - 1.3.9...

CVE-2026-53580

Trilium is an open-source hierarchical note-taking application. In versions prior to 0.104.0, the automatic image-download feature accepts file:// URLs in a note's img tags and reads the referenced local file with no path validation, allowing any authenticated user to disclose arbitrary files...

CVE-2026-37198

An integer overflow in the SMF component of Open5GS v2.7.6 allows attackers to cause a Denial of Service DoS via supplying a crafted GTP packet...

CVE-2026-34620

DNG SDK versions 1.7.1 2502 and earlier are affected by an out-of-bounds write vulnerability that could lead to application denial-of-service. An attacker could leverage this vulnerability to corrupt memory, causing the application to crash or become unresponsive. Exploitation of this issue...

cve-2015-5477

PoC per il DoS da assert TKEY di BOND9 CVE-2015-5477 Questo exploit verifica se un server BIND9 è vulnerabile inviando l'exploit per vedere se va in crash. È codice C che si compila nel modo normale su Unix/Window, ad esempio: root@kitploit: gcc tkill.c -o tkill Funzionerà sia su IPv4 che su IPv6...

CVE-2020-24089

CVE-2020-24089 Elevazione dei privilegi in Windows È stato scoperto un problema in ImfHpRegFilter.sys di IOBit Malware Fighter versione 8.0.2, che consente a utenti malintenzionati locali di causare un denial of service DoS. Link CVE - https://vulners.com/cve/CVE-2020-24089...