cve

CVE Declaração do problema: Stackoverflow Estou tentando construir meu projeto no Docker. Para isso, estou usando o Docker Desktop. Quando crio a imagem, recebo isto como uma das minhas vulnerabilidades: root@kitploit: CVE-2024-26308 CWE-770 7.5 H Allocation of Resources Without Limits or...

CVE-2022-21907

CVE-2022-21907 Beschreibung 1. Dieses Repository erkennt ein System, das anfällig für CVE-2022-21907 CVSS:3.1 9.8 ist, und schützt bei Bedarf vor dieser Schwachstelle. Ich biete 2 PowerShell-Codes in einer Zeile an. 2. Ich biete reine Python-, PowerShell- und Ruby-Skripte sowie Metasploit- und...

cve-2023-44487-demo

⚡ CVE-2023-44487 Demo – HTTP/2 Rapid Reset Attack Dieses Projekt demonstriert die HTTP/2 „Rapid Reset“-Sicherheitslücke CVE-2023-44487, die es Angreifern ermöglicht, Server mit RSTSTREAM-Frames zu überlasten und einen Denial-of-Service DoS zu verursachen. Es beinhaltet: ✅ Exploit-Test mit...

ban-exploitable-bitcoin-nodes

ban-exploitable-bitcoin-nodes अपने नोड CVE-2018-17144 से सभी सेवा-निषेध-हमला भेद्यता शोषण योग्य नोड्स पर प्रतिबंध लगाएं bash स्क्रिप्ट ban.sh के लिए आवश्यकताएँ कमांड-लाइन JSON प्रोसेसर jq डेबियन-आधारित लिनक्स पर इंस्टॉल करें root@kitploit: sudo apt-get install jq स्क्रिप्ट डाउनलोड करें और उपयोग...

rsc-security-auditor

🛡️ RSC Auditor di Sicurezza Rileva le vulnerabilità di sicurezza critiche CVE-2025-66478, CVE-2025-55184 nel tuo stack Next.js e React Server Components. 🚨 Urgente: Recenti divulgazioni Dic 2025 hanno rivelato vulnerabilità critiche DoS e RCE nei React Server Components. Questo strumento ti aiuta ...

Linux Distros Unpatched Vulnerability : CVE-2026-74542

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netfs: Fix folioqueue ENOMEM in writeback by adding a mempool Fix the handling of folioqueue allocation failure in writeback by adding a mempool and passing in...

Linux Distros Unpatched Vulnerability : CVE-2026-72497

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RDMA/bnxtre: Add a max slot check for SQ The variable WQE mode must be validated against the maximum slots supported by HW. The max supported value is 64K. Addi...

Cisco Adaptive Security Appliance (ASA) Remote Access SSL VPN DoS (cisco-sa-asaftd-vpn-dos-dzv4mQFF)

According to its self-reported version, the Cisco ASA software is affected by a denial of service vulnerability. A flaw exists due to insufficient error checking when processing HTTP requests. An unauthenticated, remote attacker can exploit this issue, via a crafted HTTP request to the Remote...

CVE-2026-11932 Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 and IBM Verify Identity Access Container 11.0 through 11.0.3 is vulnerable to a denial of service attack...

Security update for nodejs24 (important)

openSUSE security update: security update for nodejs24 ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21546-1 Rating: important References: bsc1272882 bsc1272941 bsc1272942 bsc1272943 bsc1272944 bsc1272945 bsc1272946 bsc1272947 bsc1272948 bsc127294...

CVE-2026-70348 Windows Management Services Denial of Service Vulnerability

...

Astra Linux – Vulnerability in containerd-app

The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which can lead to a Denial-of-Service DoS attack if an attacker provides specially crafted HTML content...

Astra Linux – Vulnerability in Firefox and Thunderbird

DoS attack in the WebRTC signaling component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9...

Astra Linux – Vulnerability in Firefox

DoS attack in the Libraries component in NSS. This vulnerability has been fixed in Firefox 149 and Thunderbird 149...

Linux Distros Unpatched Vulnerability : CVE-2026-68299

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - vmxnet3: fix BUGON in vmxnet3gethdrlen for Geneve packets vmxnet3gethdrlen assumes gdesc-rcd.v4/v6/tcp always describe the outer header, but for a...

EUVD-2026-54578

Hono is a Web application framework that provides support for any JavaScript runtime. From 4.12.0 to 4.12.33, the languageDetector middleware is vulnerable to algorithmic complexity denial of service when processing a crafted language tag containing a large number of hyphen separated subtags. To...

Linux Distros Unpatched Vulnerability : CVE-2026-71436

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Mermaid is a JavaScript tool that uses Markdown-inspired text to create and modify diagrams and charts. From version 10.6.0 until 10.9.8 and 11.16.1, Mermaid XY...

CVE-2026-71310

A flaw was found in rclone. A remote attacker, by controlling a malicious or compromised proxy server or acting as an on-path attacker for a plaintext HTTP proxy connection, could send oversized HTTP CONNECT response headers. The rclone application's HTTP CONNECT helper processes these responses...

CVE-2026-48834 Apache Answer: Denial of service via crafted Accept-Language header parsing

Improper Handling of Length Parameter Inconsistency vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.1. Unauthenticated attackers can cause a denial of service via a specially crafted Accept-Language header that triggers excessive CPU consumption during parsing. Users...

EUVD-2026-53290

A denial-of-service vulnerability was identified in multiple TLS listeners in Rancher. Both the cattle-cluster-agent component running in downstream clusters and the Rancher server itself use the dynamiclistener library to serve TLS traffic. Without an effective CN filter configured,...