yersinia

Spanning Tree 1: Attacco DoS inviando BPDU di configurazione root@kitploit: Inviamo alcune BPDU di configurazione dichiarandoci root!!! Inviando continuamente BPDU di configurazione con root pathcost 0, un bridge ID generato casualmente e quindi lo stesso root ID, e alcuni valori predefiniti per...

cve-2021-3449

CVE-2021-3449 OpenSSL Dieses Problem wurde am 17. März 2021 von Nokia an OpenSSL gemeldet. Der Fix wurde von Peter Kästle und Samuel Sapalski von Nokia entwickelt. Abhilfe Der einzige bekannte Fix ist die Aktualisierung von...

CVE-2026-53580

Trilium is an open-source hierarchical note-taking application affected in versions prior to 0.104.0 . The automatic image-download feature accepts file:// URLs in tags within text notes and performs a filesystem read with no path validation . Because the HTML sanitizer allows the file scheme, a...

EUVD-2026-67229

Trilium is an open-source hierarchical note-taking application. In versions prior to 0.104.0, the automatic image-download feature accepts file:// URLs in a note's img tags and reads the referenced local file with no path validation, allowing any authenticated user to disclose arbitrary files...

CVE-2026-53580 Trilium arbitrary file read and denial of service via file:// URLs in the automatic image-download feature

Trilium is an open-source hierarchical note-taking application. In versions prior to 0.104.0, the automatic image-download feature accepts file:// URLs in a note's img tags and reads the referenced local file with no path validation, allowing any authenticated user to disclose arbitrary files...

CVE-2026-53580 Trilium arbitrary file read and denial of service via file:// URLs in the automatic image-download feature

Trilium is an open-source hierarchical note-taking application. In versions prior to 0.104.0, the automatic image-download feature accepts file:// URLs in a note's img tags and reads the referenced local file with no path validation, allowing any authenticated user to disclose arbitrary files...

CVE-2026-4253-Scanner

CVE-2026-42530 — Safe-Check Scanner Nicht-destruktiver Massen-Scanner für den NGINX HTTP/3 QUIC Use-after-Free Ermitteln Sie, welche Ihrer Hosts exponiert sind – ohne den Fehler jemals auszulösen. ⚠️ Haftungsausschluss Dieses Tool ist ausschließlich für autorisierte Sicherheitstests bestimmt – für...

G3-Loop-DoS

G3-Loop-DoS Script Python per il rilevamento automatizzato delle vulnerabilità Loop DoS e CVE-2024-2169 Descrizione: Questo script Python automatizza il processo di scansione dei sistemi potenzialmente vulnerabili all'attacco Loop DoS e all'ipotetica vulnerabilità CVE-2024-2169. Si concentra sull...

cve-2026-49975-http2bomb_reproduction

CVE-2026-49975 HTTP/2 Bomb Guida completa alla riproduzione Basata sull'advisory CERT di QiAnXin + ricerca originale di Calif ================================================================ I. Panoramica della vulnerabilità CVE-2026-49975 è una vulnerabilità critica di denial-of-service DoS nell...

CVE-2020-28488

CVE-2020-28488 Denial of Service DoS - jQuery UI 1.12.1 - Exploit Payload root@kitploit: for var i = 0; i DoS - jQuery UI 1.12.1 DoS - jQuery UI 1.12.1 Exploit PoC by Rafael Cintra Lopes function exploit for var i = 0; i...

CVE-2006-20001

CVE-2006-20001 Un header di richiesta If: accuratamente predisposto può causare una lettura in memoria, o la scrittura di un singolo byte zero, in una posizione di memoria del pool heap oltre il valore dell'header inviato. Ciò potrebbe causare il crash del processo. Questo problema riguarda Apach...

CVE-2023-4220

CVE-2023-4220...

CVE-2020-0796-PoC

CVE-2020-0796 PoC noto anche come CoronaBlue e SMBGhost Utilizzo ./CVE-2020-0796.py servername Questo script si connette all'host di destinazione e comprime la richiesta di autenticazione con un campo offset errato impostato nell'intestazione di trasformazione, causando un buffer overflow nel...

iOS-Kernel-Crash

CVE-2018-4407 Corruzione della memoria La vulnerabilità è un heap buffer overflow nel codice di rete del kernel del sistema operativo XNU. XNU è utilizzato sia da iOS che da macOS, ed è per questo che iPhone, iPad e Macbooks sono tutti interessati. Il mio exploit PoC sovrascrive semplicemente...

CVE-2024-22532

CVE-2024-22532 Beschreibung XnSoft XnView Classic 2.51.5 und NConvert 7.163 sind anfällig für einen heap-basierten Pufferüberlauf mittels einer präparierten .xwd-Datei Anbieter XnSoft Betroffene Produkte XnView Classic 2.51.5 NConvert 7.163 Auswirkungen Denial of Service Remote Code Execution PoC...

CVE-2026-81893

A flaw was found in gdk-pixbuf. When loading a specially crafted JPEG image containing chunked ICC profile markers, an error during ICC profile parsing can leave stale size metadata after the profile buffer is freed. A subsequent allocation in the same decode can cause an out-of-bounds write,...

CVE-2026-81893 Gdk-pixbuf: gdk-pixbuf: invalid write in jpeg icc profile parser on error recovery

A flaw was found in gdk-pixbuf. When loading a specially crafted JPEG image containing chunked ICC profile markers, an error during ICC profile parsing can leave stale size metadata after the profile buffer is freed. A subsequent allocation in the same decode can cause an out-of-bounds write,...

EUVD-2026-67215

DNG SDK versions 1.7.1 2502 and earlier are affected by an out-of-bounds write vulnerability that could lead to application denial-of-service. An attacker could leverage this vulnerability to corrupt memory, causing the application to crash or become unresponsive. Exploitation of this issue...

CVE-2026-34620 DNG SDK | Out-of-bounds Write (CWE-787)

DNG SDK versions 1.7.1 2502 and earlier are affected by an out-of-bounds write vulnerability that could lead to application denial-of-service. An attacker could leverage this vulnerability to corrupt memory, causing the application to crash or become unresponsive. Exploitation of this issue...

CVE-2026-34620

DNG SDK versions 1.7.1 2502 and earlier are vulnerable to an out-of-bounds write (CWE-787) that can corrupt memory, leading to application crash or unresponsiveness (denial-of-service). Exploitation requires local user interaction —a victim must open a malicious file. The CNA-assigned CVSS 3.1 sc...