CVE-2023-4683-Test

CVE-2023-4683-Test Questa repo contiene un POC di facile utilizzo per CVE-2023-4683. Basta clonare questa repo con git ed estrarre webp-test oppure eseguire setup-webp-test.sh. webp-test contiene già i file necessari commit git 7ba44f80f3b94fc0138db159afea770ef06532a0 di...

EUVD-2026-95926

OWASP Coraza WAF is a golang modsecurity compatible web application firewall library. From 3.0.0 until 3.8.0, ProcessResponse in internal/bodyprocessors/json.go passes the ignoreJSONRecursionLimit value of -1 to readJSON, while the recursive guard only stops at zero. A network attacker who can...

CVE-2017-4490-

CVE-2017-4490 Ho fatto alcuni esperimenti, sono riuscito a sfruttare il file .basgrc, specializzato nello scrivere e decorare il terminale. Ho creato una vulnerabilità nel file .bashrc e sono riuscito a bloccare il terminale. La vulnerabilità funziona su tutti i sistemi Linux perché figlet funzio...

POC-CVE-2025-48988-CVE-2025-48976

CVE-2025-48988 & CVE-2025-48976 Informazioni Questo progetto esegue un semplice endpoint di upload file con Tomcat 10.1.41 e un Jakarta Servlet. L'exploit esegue, di default, 1000 richieste multipart parallelizzate con 1000 parti e 50 header per parte, da 50 worker. Eseguire il POC Compila ed...

CVE-2020-15999

CVE-2020-15999 CVE-2020-15999 Schriftart mit SBIX-Tabelle hinzugefügt basierend auf Arial - https://docs.microsoft.com/en-us/typography/opentype/spec/sbix Stürzt in ftview ab asan.png, aber Chrome kann irgendwie nicht zum Absturz gebracht werden Die Flags werden ebenfalls nicht korrekt gesetzt,...

CVE-2026-75347

EIPStackGroup OpENer v2.3 and master up to commit 76b95cf contain an expired pointer dereference vulnerability in the EtherNet/IP Common Packet Format CPF handling logic. This allows a remote attacker to cause a denial of service...

CVE-2026-107815

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the CONNECT engine's DOS table type used an incorrect boundary check that permitted a one-byte null write beyond a stack buffer at an attacker-controlled offset...

A-xex

A-xex Questo progetto fa parte di un lavoro scolastico incentrato sulla sicurezza di rete. L'autore non è responsabile per l'uso malevolo. Il progetto è in continuo aggiornamento Informazioni sul Framework A-xex A-xex is a simple and intuitive tool, it joins many important tools that can help in ...

CVE-2026-98311

A flaw was found in the Linux kernel's virtwifi driver. A local user can exploit this vulnerability by attempting to create a virtual network interface with an invalid name while the underlying network device is dormant. Due to improper initialization handling, the system prematurely frees memory...

CVE-2026-83632

A flaw was found in Apache Thrift. An integer overflow and lack of resource limits can cause a heap-based buffer overflow, where incoming data exceeds allocated memory boundaries. A remote attacker could exploit this vulnerability by sending specially crafted requests to corrupt memory, resulting...

CVE-2026-108039

A flaw was found in Apache CXF. By default, the XML parsing utility does not enforce limits on the total number of elements or characters within an incoming XML document. A remote attacker could exploit this vulnerability by sending an excessively large XML request, causing the application to...

CVE-2026-107937

A flaw was found in Apache CXF. A remote, unauthenticated attacker can cause a Denial of Service DoS by sending a crafted multipart request containing excessively large or repeated attachment headers. Because the parser fails to properly enforce size and count limits on multi-line and repeated...

CVE-2026-78384

A flaw was found in Apache CXF. A remote attacker can trigger a Denial of Service DoS by submitting specially crafted compressed data during token processing. Because the system decompresses incoming data without enforcing a maximum output size limit, a small payload can consume excessive heap...

CVE-2026-75346

A flaw was found in OpENer. An out-of-bounds read vulnerability in the server-side Common Industrial Protocol CIP SetAttributeList service allows a remote attacker to cause a Denial of Service DoS. By sending specially crafted network requests, an attacker can trigger an invalid memory read,...

EUVD-2026-95910

pyLoad is a free and open-source download manager written in Python. Prior to 0.5.0b3.dev101, the API rpc function in apiblueprint.py handles multipart/form-data uploads by reading the whole content of the uploaded file into memory with file.read. This occurs before the data is sent to the...

AZL-106919 CVE-2026-102554 affecting package guava 33.0.0-1

Allocation of resources without limits or throttling CWE-770 during Java object deserialization in Google Guava versions 4.0 through 33.7.1 allows an attacker to cause a Denial of Service via OutOfMemoryError. When deserializing CompactHashMap, CompactHashSet, or MapMakerInternalMap instances,...

CVE-2026-107815 MariaDB: one byte OOB write in DOS tables of the CONNECT engine

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the CONNECT engine's DOS table type used an incorrect boundary check that permitted a one-byte null write beyond a stack buffer at an attacker-controlled offset...

CVE-2026-107815

The MariaDB server (versions 10.6.1 through 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2) contains a one-byte out-of-bounds (OOB) write in the CONNECT engine 's DOS table type. The vulnerability is caused by an incorrect boundary check , allowing an attacker-controlled offset to trigger...

DoS-PoC-for-CVE-2020-0796-SMBGhost-

Questo repository non contiene un README...

CVE-2019-16279

CVE-2019-16279 （CVE-2019-16279）dos Questo bug sfrutta un errore di memoria quando si inviano troppi \r\n in una singola connessione. Esempio $ curl http://127.0.0.1:8080 HELLO! $ ./CVE-2019-16279.sh 127.0.0.1 8080 $ curl http://127.0.0.1:8080 curl: 7 Failed to connect to 127.0.0.1 port 8080:...