CVE-2021-31166

CVE-2021-31166 왜 최근에 CVE-2021-31166에 대한 익스플로잇을 작성했습니다. 이 익스플로잇은 CVE-2021-31166을 악용합니다. 펜테스터는 https://github.com/mauricelambert/CVE-2021-31166 을 사용해야 하지만, SOC 팀에서는 취약점을 제대로 수정하기 위해 특정 취약점을 알아야 합니다. 그래서 이 익스플로잇을 작성했습니다. 설명 취약한 IIS 웹 서버를 공격하기 위해 순수 파이썬, 파워셸, 루비 스크립트와 메타스플로잇, nmap 모듈을 제공합니다 서버를 다운시키기...

HTTP3ONSTEROIDS

Содержание Описание уязвимости Обзор исходного кода Настройка лаборатории Выявление проблемы Ссылки Описание уязвимости Реализация HTTP/3 в HAProxy не блокирует некорректное имя поля HTTP-заголовка , и при развёртывании перед сервером, который неправильно обрабатывает такой некорректный заголовок...

tar: Node-tar: Denial of Service via malformed tar archive header

A flaw was found in node-tar, a tar archive manipulation library for Node.js. A remote attacker could exploit this vulnerability by providing a specially crafted tar archive with a negative entry size in its header. This malformed header causes the archive scanner to enter an infinite loop,...

netty-codec-haproxy: Netty-codec-haproxy: Denial of Service via malformed HAProxy message

A flaw was found in netty-codec-haproxy, a component of the Netty network application framework. A remote attacker can exploit this vulnerability by sending a specially crafted HAProxy message with a malformed PP2TYPESSL TLV Type-Length-Value header. This can lead to an IndexOutOfBoundsException...

tar: Node-tar: Denial of Service via malformed tar archive header

A flaw was found in node-tar, a tar archive manipulation library for Node.js. A remote attacker could exploit this vulnerability by providing a specially crafted tar archive with a negative entry size in its header. This malformed header causes the archive scanner to enter an infinite loop,...

SAP NetWeaver Memory Corruption (3747649)

The version of the SAP NetWeaver kernel detected on the remote host is affected by a memory corruption vulnerability as referenced in SAP Security Note 3747649: - A memory safety vulnerability exists in the Extended Passport Protocol EPP processing library. Under specific conditions, an...

CVE-2020-25613

POC root@kitploit: POST / HTTP/1.1 Host: 127.0.0.1:1080 Content-Type: text/html Content-Length: 129 Connection: keep-alive Transfer-Encoding: 0xb chunked 1 A 0 POST /flag HTTP/1.1 Host: 127.0.0.1:1080 Content-Length: 180 Connection: keep-alive Content-Type: text/html URI:...

CVE-2026-44756

A memory safety vulnerability exists in the Extended Passport Protocol EPP processing library. Under specific conditions, an unauthenticated attacker could exploit a crafted network request containing a malformed EPP header, potentially resulting in undefined behavior and abnormal program...

CVE-2026-44756

CVE-2026-44756 is a memory safety vulnerability in the SAP Extended Passport Protocol (EPP) processing library . A malformed EPP header in a crafted network request can trigger undefined behavior and abnormal program termination. The vulnerability is rated CVSS 10.0 (Critical) with a changed scop...

EUVD-2026-72572

A memory safety vulnerability exists in the Extended Passport Protocol EPP processing library. Under specific conditions, an unauthenticated attacker could exploit a crafted network request containing a malformed EPP header, potentially resulting in undefined behavior and abnormal program...

CVE-2026-44756 Memory Corruption vulnerability in SAP Extended Passport (EPP) Processing

A memory safety vulnerability exists in the Extended Passport Protocol EPP processing library. Under specific conditions, an unauthenticated attacker could exploit a crafted network request containing a malformed EPP header, potentially resulting in undefined behavior and abnormal program...

PT-2026-86947

Detailed: • OpenAI claims an internal model solved the Navier-Stokes Millennium Prize problem after 10,000 agents ran for 88 hours, triggering a dispute with researchers over priority. • Mistral raised €3 billion at a valuation above €21 billion, the largest European tech equity round, to expand...

CVE-2020-35669

CVE-2020-35669 тестовый сервер пожалуйста, запустите тестовый сервер, используя первый терминал root@kitploit: sudo nc -l 127.0.0.1 80 примените приведенный diff root@kitploit: diff --git a/main.dart b/main.dart index 8c78291..a46f4d0 100644 --- a/main.dart +++ b/main.dart @@ -4,7 +4,7 @@ import...

tar: Node-tar: Denial of Service via malformed tar archive header

A flaw was found in node-tar, a tar archive manipulation library for Node.js. A remote attacker could exploit this vulnerability by providing a specially crafted tar archive with a negative entry size in its header. This malformed header causes the archive scanner to enter an infinite loop,...

Improper Check for Unusual or Exceptional Conditions

Overview Affected versions of this package are vulnerable to Improper Check for Unusual or Exceptional Conditions via the DeadLetterPublishingRecovererFactory. An attacker can cause repeated failures and stall partition consumption by attaching a malformed retrytopic-original-timestamp header suc...

CVE-2026-73418

NextAuth.js vulnerability CVE-2026-73418: The getToken() helper in next-auth/jwt and @auth/core/jwt can throw an uncaught exception when parsing a malformed Authorization: Bearer header, leading to a per-request denial of service. This occurs when no session cookie is present and the bearer value...

tar: Node-tar: Denial of Service via malformed tar archive header

A flaw was found in node-tar, a tar archive manipulation library for Node.js. A remote attacker could exploit this vulnerability by providing a specially crafted tar archive with a negative entry size in its header. This malformed header causes the archive scanner to enter an infinite loop,...

RLSA-2026:48033 Important: nodejs22 security update

Node.js is a platform built on Chrome's JavaScript runtime \ for easily building fast, scalable network applications. \ Node.js uses an event-driven, non-blocking I/O model that \ makes it lightweight and efficient, perfect for data-intensive \ real-time applications that run across distributed...

RockyLinux 10 : nodejs24 (RLSA-2026:48034)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:48034 advisory. brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity CVE-2026-13149 tar: Node-tar: Denial of Service via malformed ta...

tar: Node-tar: Denial of Service via malformed tar archive header

A flaw was found in node-tar, a tar archive manipulation library for Node.js. A remote attacker could exploit this vulnerability by providing a specially crafted tar archive with a negative entry size in its header. This malformed header causes the archive scanner to enter an infinite loop,...