NFSundown

Aperçu Exploit de preuve de concept pour NFSundown CVE-2025-38089. Il peut déclencher à distance un crash du noyau sur un serveur NFS. Détails Un attaquant distant peut déclencher un déréférencement de pointeur nul du noyau et planter le noyau en envoyant une requête RPC spécialement conçue. Cela...

CVE-2026-16265

CVE-2026-16265 — WP Maps Этот репозиторий предназначен как технический справочник по уже раскрытой уязвимости. Он не содержит готового скрипта для проведения атаки отказа в обслуживании. Обзор Пункт| Детали ---|--- CVE| CVE-2026-16265 Продукт| WP Maps Уязвимые версии| 4.9.7 Исправленная версия|...

CLEANSTART-2026-FS57151 In Micrometer, it is possible for a user to provide specially crafted HTTP requests that may cause a denial-of-service (DoS) condition

Security vulnerability affects the apache-nifi package. In Micrometer, it is possible for a user to provide specially crafted HTTP requests that may cause a denial-of-service DoS condition...

cve-2025-24035-rds-websocket-dos-test

CVE-2025-24035 Test de stress WebSocket Sûr 🚨 AVERTISSEMENT : Ceci n'est PAS une exploitation. Ce script est une simulation et ne doit être utilisé qu'à des fins éducatives dans un environnement de laboratoire sécurisé. Objectif Ce test envoie un en-tête WebSocket délibérément surdimensionné pour...

CVE-2026-18464

CVE-2026-18464 — WP Maps Pro Этот репозиторий предназначен в качестве технического справочника по уже раскрытой уязвимости. Он не содержит готового скрипта для отказа в обслуживании. Обзор Пункт| Детали ---|--- CVE| CVE-2026-18464 Продукт| WP MAPS PRO Уязвимые версии| 6.1.3 Исправленная версия|...

CVE-2019-7609

CVE-2019-7609 Kibana versions before 5.6.15 and 6.6.1 contain an arbitrary code execution flaw in the Timelion visualizer https://nvd.nist.gov/vuln/detail/CVE-2019-7609 CVE-2019-7609 Эта уязвимость — загрязнение прототипов Prototype Pollution, обнаруженная в Kibana. Её эксплуатация может привести...

http-stalling-detector

HTTP 스톨링 탐지기 HTTP 스톨링 DoS 공격은 웹 서버가 원격 클라이언트가 단순히 느린 링크로 연결된 것인지, 아니면 원격 클라이언트가 웹 서버가 타임아웃을 수행하고 로컬 시스템 리소스를 보존하기 위해 연결을 종료하는 것을 피하려고 의도적으로 데이터를 매우 느리게 보내는 것인지 판단할 수 없는 점을 악용합니다. 공격자에게서 일반적으로 나타나는 행동은 많은 연결을 열고 웹 서버가 연결을 타임아웃시키지 못하도록 데이터를 천천히 흘려보내는 것입니다. 웹 서버가 비교적 작은 작업자 풀을 사용하는 경우, 이러한 리소스 고갈 상태...

smm_usbrt_poc

UsbRt SMM Privilege Elevation Это Proof-of-Concept код, демонстрирующий эксплуатацию уязвимости CVE-2017-5721. Данный PoC приводит к полному зависанию системы из-за возникшего Machine Check Exception. Всё, что вам нужно — это установленный фреймворк CHIPSEC Framework. И не забудьте добавить...

CVE-2022-0778

CVE-2022-0778 Участники 정준수@jeongjunsoo Краткое описание Уязвимость CVE-2022-0778 затрагивает функцию BNmodsqrt, вычисляющую квадратный корень по модулю простого числа в OpenSSL. Когда эта функция обрабатывает сертификаты, основанные не на простом числе, а злонамеренно изменённые, незапатченные...

node-cve-2018-4407

node-cve-2018-4407 Code d'exploitation PoC Node.js pour CVE-2018-4407 Auteur : Sam Decrock Ce script est basé sur le script scapy fourni par Zuk : iOS 12 / OS X Remote Kernel Heap Overflow CVE-2018-4407 POC in a tweet: pip install scapy sudo scapy sendIPdst=“Target...

CVE-2020-36109-POC

CVE-2020-36109-POC 13 февраля 2021, Altin Thartori, github.com/tin-z Детали уязвимости Прошивка маршрутизатора ASUS RT-AX86U ниже версии 9.0.0.4386 имеет переполнение буфера в функции blockingrequest.cgi модуля httpd, которое может привести к выполнению кода, когда злоумышленник создает вредоносн...

CVE-2026-85769

CVE-2026-85769 Heap out-of-bounds read in libtpms TPM 2.0 volatile-state deserialization. An unbounded optional-block skip in blockskipread advances the unmarshal cursor by an attacker-controlled 16-bit length and drives the signed remaining-size counter negative. Every downstream bounds check th...

Nginx UI: Unauthenticated signed-request body staging can exhaust temporary storage

Summary In Nginx UI versions 2.5.0 through 2.5.x, the node-signature authentication path staged an attacker-controlled request body in a temporary file and synchronized it to disk before validating the body digest and cryptographic signature. An unauthenticated remote client that can reach the AP...

Vikunja: Planka migration retains an unbounded aggregate of attacker-served attachments and can OOM the API

Planka migration retains an unbounded aggregate of attacker-served attachments and can OOM the API Summary The always-registered Planka migration lets any ordinary user select a Planka server. Although Vikunja caps each JSON response, pagination loop, and attachment independently, it has no...

GHSA-WQ92-8X3R-FM38 Vikunja: Planka migration retains an unbounded aggregate of attacker-served attachments and can OOM the API

Planka migration retains an unbounded aggregate of attacker-served attachments and can OOM the API Summary The always-registered Planka migration lets any ordinary user select a Planka server. Although Vikunja caps each JSON response, pagination loop, and attachment independently, it has no...

GHSA-PQF9-H8G4-8GMH Vikunja: Unbounded CSV row cardinality permits API process termination

Unbounded CSV row cardinality permits API process termination Summary The authenticated v2 CSV migration route caps upload bytes but not parsed row cardinality. It reads every record into a string and then materializes a full task object for every row before insertion. Two million one-cell rows f...

EUVD-2026-78644

Vikunja: Unbounded nested task-filter recursion permits API process termination...

Vikunja: Denial of service via decompression bomb in the data import

Summary Vikunja lets you export your data as a zip and import it back. The import doesn't limit how large the archive expands to, how many files it contains, or how much storage one user can consume, and it appears to hold the whole archive in memory while processing it. Because the archive is...

CVE-2026-108106

A flaw was found in snappy-java. A remote attacker can exploit this unbounded memory allocation vulnerability by providing crafted compressed input with an excessively large declared uncompressed size during decompression. Successful exploitation allows the attacker to exhaust available system...

autodeauth

autodeauth Un outil/service conçu pour déauthentifier automatiquement les réseaux locaux Testé sur Raspberry Pi OS et Kali Linux Setup $ chmod +x setup.sh $ sudo ./setup.sh Cela peut être modifié en éditant /etc/systemd/system/autodeauth.service ? Entrez votre interface WiFi à utiliser avec le...