CVE-2022-21907

CVE-2022-21907 描述 1. 该仓库用于检测系统是否存在 CVE-2022-21907（CVSS:3.1 9.8 ）漏洞，并可选择对此漏洞进行防护。我提供了 2 个单行的 PowerShell 代码。 2. 我提供了纯 Python、PowerShell、Ruby 脚本以及 Metasploit、Nmap 模块，用于攻击存在漏洞的 IIS Web 服务器（执行 DoS 攻击使其崩溃（蓝屏））。 检测与防护 脚本 该脚本运行 2 个用于检测的单行代码和 2 个用于防护的单行代码。 root@kitploit: cmd powershell...

cve

CVE 问题描述：Stackoverflow 我正尝试在 Docker 中构建项目，因此使用 Docker Desktop 来构建我的项目。在构建镜像时，我遇到了以下漏洞之一： root@kitploit: CVE-2024-26308 CWE-770 7.5 H Apache Commons Compress 中存在无限制或节流资源分配漏洞。该问题影响 Apache Commons Compress 1.21 至 1.26 之前版本。建议用户升级到修复该问题的 1.26 版本。 CVSS 评分：7.5 CVSS...

ban-exploitable-bitcoin-nodes

ban-exploitable-bitcoin-nodes 从你的节点封禁所有可利用的拒绝服务漏洞节点 CVE-2018-17144 Bash脚本（ban.sh）的要求 命令行JSON处理器 jq。 在基于Debian的Linux上安装 root@kitploit: sudo apt-get install jq 下载并使用脚本 git clone https://github.com/iioch/ban-exploitable-bitcoin-nodes.git 运行： root@kitploit: cd ban-exploitable-bitcoin-nodes chmod u+x...

opentelemetry-collector security update

An update is available for opentelemetry-collector. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Collector with the supported components for a Rocky Enterpri...

cve-2023-44487-demo

⚡ CVE-2023-44487 演示 – HTTP/2 快速重置攻击 本项目演示 HTTP/2 "快速重置"（Rapid Reset）漏洞（CVE-2023-44487），该漏洞允许攻击者使用 RSTSTREAM 帧淹没服务器，造成拒绝服务（DoS）。内容包括： ✅ 使用基于 Golang 的工具进行漏洞利用测试 ✅ 通过 Docker 部署存在漏洞的 Apache HTTP/2 环境 ✅ 使用 Webmin 进行实时监控 ✅ 基于 IPTables 防火墙的缓解措施 📁 文件夹结构 Setup/setupguide.md – 环境搭建（攻击机与受害机）...

CVE-2026-49315

DoS vulnerability in the input device module. Impact: Successful exploitation of this vulnerability may affect availability...

rsc-security-auditor

🛡️ RSC 安全审计工具 检测您的Next.js和React Server Components栈中的关键安全漏洞（CVE-2025-66478, CVE-2025-55184）。 🚨 紧急： 最近的披露（2025年12月）揭示了React Server Components中的严重DoS和RCE漏洞。此工具可帮助您立即审计您的package.json。 ⚡ 功能特性 🔒 隐私优先： 100%客户端运行。您的package.json数据永远不会 离开您的浏览器。 🧠 智能分析： 检测next、react和react-dom的特定受影响的版本范围。 🩹 自动修复：...

freerdp security update

An update is available for freerdp. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released...

Security Bulletin: Security Vulnerability in Apache Struts affects IBM Sterling B2B Integrator and IBM Sterling File Gateway (CVE-2025-64775)

Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway have addressed vulnerability due to Apache Struts Vulnerability Details CVEID:CVE-2025-64775 DESCRIPTION: Denial of Service vulnerability in Apache Struts, file leak in multipart request processing causes disk exhaustion. This issu...

Security Bulletin: Security Vulnerability in Spring MVC affects IBM Sterling B2B Integrator and IBM Sterling File Gateway (CVE-2024-38828)

Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway have addressed vulnerability due to Spring MVC Vulnerability Details CVEID:CVE-2024-38828 DESCRIPTION: Spring MVC controller methods with an @RequestBody byte method parameter are vulnerable to a DoS attack. CWE:CWE-400: Uncontroll...

Astra Linux – Vulnerability in Firefox and Thunderbird

DoS attack in the WebRTC signaling component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9...

Astra Linux – Vulnerability in Firefox

DoS attack in the Libraries component in NSS. This vulnerability has been fixed in Firefox 149 and Thunderbird 149...

Astra Linux – Vulnerability in Apache2

The Apache HTTP Server protocol handler for the HTTP/2 protocol checks the received request headers against the size limitations configured for the server. These restrictions are also applied to the HTTP/1 protocol. If any violations occur, an HTTP response is sent to the client with a status cod...

Astra Linux – Vulnerabilities in Python 2.7, Python 3.11, Python 3.7

The html.parser.HTMLParser class has worst-case quadratic complexity when processing certain malformed inputs, which could potentially lead to a heightened denial-of-service attack...

Astra Linux – Vulnerability in Firefox and Thunderbird

DoS attack due to an invalid pointer in the Audio/Video: Web Codecs component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100095)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100095 advisory. In the Linux kernel, the following vulnerability has been resolved: ibmveth: Disable GSO for packets with small MSS Some physical adapters on Power systems do not...

Linux Distros Unpatched Vulnerability : CVE-2026-74542

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netfs: Fix folioqueue ENOMEM in writeback by adding a mempool Fix the handling of folioqueue allocation failure in writeback by adding a mempool and passing in...

Linux Distros Unpatched Vulnerability : CVE-2026-72497

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RDMA/bnxtre: Add a max slot check for SQ The variable WQE mode must be validated against the maximum slots supported by HW. The max supported value is 64K. Addi...

Cisco Adaptive Security Appliance (ASA) Remote Access SSL VPN DoS (cisco-sa-asaftd-vpn-dos-dzv4mQFF)

According to its self-reported version, the Cisco ASA software is affected by a denial of service vulnerability. A flaw exists due to insufficient error checking when processing HTTP requests. An unauthenticated, remote attacker can exploit this issue, via a crafted HTTP request to the Remote...

CVE-2026-11932 Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 and IBM Verify Identity Access Container 11.0 through 11.0.3 is vulnerable to a denial of service attack...