CVE-2026-81686 openssl_encrypt before 1.4.9 D-Bus Properties Authorization Bypass

opensslencrypt 1.4.x before 1.4.9 contains an optional D-Bus crypto service whose org.freedesktop.DBus.Properties.Set method performs neither a polkit authorization check nor value validation. Any local user on the system bus can call Set without authorization and set MaxConcurrentOperations to...

EUVD-2026-67042

opensslencrypt 1.4.x before 1.4.9 contains an optional D-Bus crypto service whose org.freedesktop.DBus.Properties.Set method performs neither a polkit authorization check nor value validation. Any local user on the system bus can call Set without authorization and set MaxConcurrentOperations to...

CVE-2026-81334

darknet through 6.0 is vulnerable to an out-of-bounds read and write in its .cfg parser. The layer array in src-lib/darknet_network.cpp is sized to the declared number of layer sections, but the shortcut, scale_channels, and sam sections (via their from field) and the route section (via its layer...

CVE-2026-81334 darknet through 6.0 Out-of-Bounds Read and Write via Unchecked Layer Index in .cfg Parser

darknet subscripts its layer array with an index taken from a configuration file without checking it against the array's length. The array is allocated in src-lib/darknetnetwork.cpp as xcallocnet.n, sizeofDarknet::Layer, sized to exactly the number of layer sections the file declares. The shortcu...

sockstress

sockstress Sockstress CVE-2008-4609 implementazione in Go Installazione root@kitploit: go get github.com/marcelki/sockstress Utilizzo root@kitploit: Usage: sockstress options... Options: -p The destination port to attack. -i The network interface to use. -d The delay between SYN packets You can...

CVE-2026-80579

A flaw was found in the Linux kernel's fbdev component. A local user could exploit a use-after-free vulnerability by manipulating video modes. When a mode is deleted, the fbinfo-mode pointer might not be cleared, leading to a stale pointer dereference during subsequent system file system sysfs...

CVE-2024-47176

CVE-2024-47176 !CAUTION Solo per uso educativo/difensivo, utilizza solo dove sei autorizzato, usa a tuo rischio! Come usare python3 scanner.py CIDR SCANNER IP Esempio python3 scanner.py 192.168.0.0/16 192.168.5.100 Moduli Richiesti tqdm Installa tramite pip3/apt: $ pip3 install tqdm $ sudo apt...

CVE-2020-5236

Waitress 1.4.2 ReDoS - CVE-2020-5236 La versione 1.4.2 di Waitress consente un attacco DoS quando Waitress riceve un header contenente caratteri non validi. Quando viene ricevuto un header come "Bad-header: xxxxxxxxxxxxxxx\x10", provoca un backtracking catastrofico nel motore delle espressioni...

CVE-2020-27223

CVE-2020-27223 Uso root@kitploit: $ mvn spring-boot:run 9.4.36.v20210114 root@kitploit: $ ./poc/cve-2020-27223-poc1.sh "timens":"58,557","acceptlanguage":"aab" real 0m0.093s 🐇 user 0m0.006s sys 0m0.007s "timens":"18,461,763,438","acceptlanguage":"ahn" real 0m35.339s 🐢 user 0m0.006s sys 0m0.006s...

CVE-2024-35333

CVE-2024-35333 Esiste una vulnerabilità di stack buffer overflow nella gestione dei charset di html2xhtml versione 1.3. Un attaccante può sfruttare questa vulnerabilità fornendo un input appositamente predisposto, che porterebbe all'overflow della variabile 'buf' situata nello stack. Lo...

CVE-2021-23017

CVE-2021-23017 PoC Scanner Verifica della vulnerabilità di overflow DNS di NGINX - CVE-2021-23017 PoC Questo script in Python verifica se un server nginx è potenzialmente vulnerabile alla vulnerabilità critica CVE-2021-23017 , che colpisce il resolver DNS integrato in nginx e può provocare un...

CVE-2025-6998-CalibreWeb-0.6.24-ReDoS

CVE-2025-6998-CalibreWeb-0.6.24-ReDoS Exploit per la ReDoS di CalibreWeb v0.6.24...

CVE-2018-16890

CVE-2018-16890 Foi encontrada uma falha de leitura fora dos limites na forma como o curl lidava com cabeçalhos do tipo 2 do NTLMv2. Ao conectar a um servidor remoto malicioso que usa autenticação NTLM, a falha poderia fazer o curl travar. Um script simples para verificar o seu curl...

CVE-2025-71406

A flaw was found in Nokogiri, which bundles a vulnerable version of libxslt. This vulnerability involves a use-after-free condition that can be triggered by processing specially crafted Extensible Stylesheet Language Transformations XSLT. A remote attacker could exploit this to cause memory...

CVE-2023-31606

CVE-2023-31606 Vulnerabilità È stato scoperto un problema di Denial of Service tramite Espressione Regolare ReDoS nella funzione sanitizehtml della gemma redcloth = v4.0.0. Questa vulnerabilità consente agli aggressori di causare un Denial of Service DoS fornendo un payload appositamente...

CVE-2023-54354

A flaw was found in Nokogiri, specifically in its bundled libxml2 library when processing XML schemas. An attacker can exploit this by providing a specially crafted XML schema, leading to a NULL pointer dereference. This can cause the application to crash, resulting in a denial of service...

CVE-2022-50998

A flaw was found in Nokogiri, a Ruby gem for parsing XML and HTML documents. This vulnerability arises from issues within its bundled libxml2 library, specifically involving data corruption from entity reference cycles and integer overflows when processing large XML files. A remote attacker could...

CVE-2021-47996

A flaw was found in Nokogiri, specifically within its bundled libxml2 library. A remote attacker could exploit multiple vulnerabilities, including memory leaks, buffer over-reads, heap-based buffer overflows, and out-of-bounds reads, by processing specially crafted XML documents. This could lead ...

CVE-2025-21574-Exploit

CVE-2025-21574-Exploit Caratteristiche principali di questo exploit Black-Box: 1. Brute-Forcing delle credenziali: Testa 12+ combinazioni comuni predefinite di nome utente/password Controlla 5 database di sistema comuni Rileva automaticamente credenziali valide 2. Tentativo di accesso anonimo:...

PX4-Military-UAV-Autopilot-1.12.3-Stack-Buffer-Overflow-Exploit-CVE-2025-5640-

PX4 Military UAV Autopilot =1.12.3 Stack-Pufferüberlauf-Exploit CVE-2025-5640 Autor: Mohammed Idrees Banyamer @banyamersecurity GitHub: https://github.com/mbanyamer Datum: 2025-06-21 Getestet auf: Ubuntu 20.04 LTS + PX4 SITL jMAVSim CVE: CVE-2025-5640 Typ: Denial of Service DoS durch...