Zimbra-CVE-2017-8802-Hotifx

CVE-2017-8802 This Zimlet fixes CVE-2017-8802 by disabling the "Show Fragment" / Snippet functionality. For further information see: https://wiki.zimbra.com/wiki/ZimbraSecurityAdvisories How to deploy Zimlets https://www.zimbra.com/docs/os/6.0.10/administrationguide/Zimlets.11.4.html...

python-uncompyle6

|buildstatus| |Pypi Installs| |Latest Version| |Supported Python Versions| |packagestatus| .. contents:: uncompyle6 ネイティブなPythonクロスバージョン逆コンパイラおよびフラグメント逆コンパイラです。 decompyle、uncompyle、uncompyle2の後継です。 BlackHat Asia 2024 でこの件について講演しました。 はじめに uncompyle6 はPythonバイトコードを同等のPythonソースコードに変換します。...

python-uncompyle6

|buildstatus| |Pypi Installs| |Latest Version| |Supported Python Versions| |packagestatus| .. contents:: uncompyle6 A native Python cross-version decompiler and fragment decompiler. The successor to decompyle, uncompyle, and uncompyle2. I gave a talk on this at BlackHat Asia 2024 . Introduction...

fhex

Fhex - 완전한 기능을 갖춘 16진수 편집기 이 프로젝트는 가볍지만 유용한 도구를 개발하기 위해 탄생했습니다. 그 이유는 기존의 16진수 편집기들이 몇 가지 다른 제한 사항이 있기 때문입니다예: 너무 많은 의존성, 16진수 색상 기능 부족 등. 이 프로젝트는 qhexedit2 , capstone 및 keystone 엔진을 기반으로 합니다. 향후 새로운 기능이 추가될 수 있으며, PR을 환영합니다. 기능 청크 로더 - 대용량 파일의 일부만 로드하여 메모리를 소모하지 않도록 사용됩니다 청크 간 이동은 alt + 왼쪽/오른쪽 화...

killasa

killasa CVE-2016-1287（Cisco ASA の不正なIKEフラグメント長）の脆弱性テスト Cisco フラグメンテーションを有効にして IKEv2 SA をネゴシエートし、その後、2つの IKE フラグメントを送信します。そのうちの1つは、1オクテットという不正な長さを持ちます。...

LiteLLM Proxy < 1.84.0 - Host Header Authentication Bypass

LiteLLM Proxy before 1.84.0 derives its public-route authorization check from a URL reconstructed with the unvalidated Host header. A Host value containing a fragment can make a protected request appear to target the public root route, bypassing the API-key check. Version 1.84.0 derives the route...

HAProxy-CVE-2023-45539-PoC

HAProxy-CVE-2023-45539-PoC HAProxy before 2.8.2 accepts as part of the URI component, which might allow remote attackers to obtain sensitive information or have unspecified other impact upon misinterpretation of a pathend rule, such as routing index.html.png to a static server. What gets misroute...

PoC-Exploit-CVE-2024-20467

Exploit for Cisco IOS XE CVE-2024-20467 Vulnerability Overview This exploit targets a vulnerability in the IPv4 fragment assembly code found in Cisco IOS XE Software. The vulnerability allows an unauthenticated remote attacker to cause a denial of service DoS condition on vulnerable devices...

CVE-2026-11102-OAuth2-Implicit-Grant-Fragment-Hijacking

CVE-2026-11102 – OAuth2 暗黙的グラントのフラグメントハイジャック プログラムコード（Node.js + エクスプロイト） // oauthserver.js - OAuth2 provider issuing tokens in fragment const express = require'express'; const app = express; app.get'/authorize', req, res = const redirectUri = req.query.redirecturi; const state = req.query.state |...

SG-2026-0024

Dirty Frag プリミティブ専用PoC CVE-2026-43284 XFRM/ESP および CVE-2026-43500 RxRPC/RXKAD 向けの読み取り可能なN4Cデモンストレーター。 このPoCは一つの問いに答えます: 特権のないプロセスが、共有されたskbuff フラグメントを通じて、root所有の読み取り専用ファイルのページキャッシュを変更できるか? これは /usr/bin/su や /etc/passwd を上書きせず、ペイロードをインストールせず、PAM/NSSを呼び出さず、シェルを起動しません。完全な公開エクスプロイトは exploit...

CVE-2026-27384

CVE-2026-27384 CVE-2026-27384 — W3 Total Cache mfunc/eval RCE スキャナー プラグイン: W3 Total Cache プラグインスラッグ: w3-total-cache CVE ID: CVE-2026-27384 CVSS スコア: 9.8 クリティカル CVSS ベクター: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 脆弱性タイプ: 認証不要の任意コード実行 eval によるコードインジェクション 影響を受けるバージョン: W3TC...

Rocky Linux 8 [CIQ] Security Update: ctdb / ctdb-debuginfo / libsmbclient / libsmbclient-debuginfo / etc Multiple Vulnerabilities (crlsa-2021_5082)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20215082 advisory. samba: Active Directory AD domain user could become root on domain members CVE-2020-25717 samba: SMB1 client connections can be downgraded to plaintext...

Rocky Linux 8 [CIQ] Security Update: kernel-rt / kernel-rt-core / kernel-rt-debug / kernel-rt-debug-core / etc Multiple Vulnerabilities (crlsa-2026_0760)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20260760 advisory. kernel: smb: client: Fix use-after-free in cifsfilldirent CVE-2025-38051 kernel: smb: client: let recvdone verify dataoffset, datalength and...

DEBIAN-CVE-2026-71971

U-Boot before 2026.10-rc3 with CONFIGIPDEFRAG enabled contains an out-of-bounds write vulnerability in the netdefragment function in net/net.c. Remote attackers can send a crafted IP fragment with non-zero offset and More-Fragments flag set during netboot to corrupt adjacent memory and crash the...

CVE-2026-71971

The U-Boot bootloader (versions before 2026.10-rc3 ) is vulnerable to an out-of-bounds write in the ‘net_defragment‘ function within net/net.c when CONFIG_IP_DEFRAG is enabled. A remote attacker can trigger this by sending a crafted IP fragment with a non-zero offset and the More-Fragments flag s...

CVE-2026-71971 U-Boot before 2026.10-rc3 Out-of-Bounds Write in IP Fragment Reassembly

U-Boot before 2026.10-rc3 with CONFIGIPDEFRAG enabled contains an out-of-bounds write vulnerability in the netdefragment function in net/net.c. Remote attackers can send a crafted IP fragment with non-zero offset and More-Fragments flag set during netboot to corrupt adjacent memory and crash the...

CVE-2026-42772 Potential CPU DoS via O(n^2) Fragment Reassembly in QUIC

Issue summary: The QUIC stream reassembly algorithm performance deteriorates progressively as packets are arriving out of order. The worst case has a quadratic complexity proportional to the number of stream frames kept in the buffer for the received stream data. Impact summary: A remote QUIC pee...

CVE-2026-42772 Potential CPU DoS via O(n^2) Fragment Reassembly in QUIC

Issue summary: The QUIC stream reassembly algorithm performance deteriorates progressively as packets are arriving out of order. The worst case has a quadratic complexity proportional to the number of stream frames kept in the buffer for the received stream data. Impact summary: A remote QUIC pee...

CVE-2026-42772

A flaw in OpenSSL allows a remote attacker to cause a Denial of Service (DoS) by exploiting an inefficient QUIC stream reassembly algorithm. When packets arrive out of order, the software falls back to a head-to-tail linear search for fragments in a doubly-linked list. By manipulating sequence of...

CVE-2026-42772 Potential CPU DoS via O(n^2) Fragment Reassembly in QUIC

Issue summary: The QUIC stream reassembly algorithm performance deteriorates progressively as packets are arriving out of order. The worst case has a quadratic complexity proportional to the number of stream frames kept in the buffer for the received stream data. Impact summary: A remote QUIC pee...