CVE-2017-3881-exploit-cisco-

A vulnerability in the Cisco Cluster Management Protocol CMP processing code in Cisco IOS and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a reload of an affected device or remotely execute code with elevated privileges. The Cluster Management Protocol utilizes...

CVE-2026-24061

Exploit RCE Telnet CVE-2026-24061 - Di SafeBreach Labs Questo script sfrutta la vulnerabilità CVE-2026-24061 nei server Telnet utilizzando una variabile d'ambiente USER malformata. Utilizzo Esegui lo script con un host di destinazione: root@kitploit: python telnetrce.py -p Argomenti host: Indiriz...

PoC-CVE-2025-69421

Riproduttore solo crash CVE-2025-69421 Questo repository contiene un file PKCS12 malformato minimale che riproduce la CVE-2025-69421 in un ambiente di laboratorio isolato. Il PFX generato contiene un EncryptedData il cui EncryptedContentInfo omette il campo opzionale encryptedContent. Le versioni...

CVE-2023-40294-and-CVE-2023-40295

Mentre eseguivo boron nel mio ambiente, mi sono imbattuto in 2 heap buffer overflow in libboron libboron.so.2 versione 2.0.8 durante l'elaborazione di input leggermente malformati. Questo è stato testato ufficialmente sia su Mac x8664 che su Linux x8664: Files for reproduction reproduction.zip...

CVE-2026-47888 Spring Framework Memory Leak via SETUP Frame in RSocketMessageHandler

A Spring RSocket application is exposed to a memory leak via a malformed SETUP frame. Spring Framework 7.0.0 - 7.0.8 Spring Framework 6.2.0 - 6.2.19 Spring Framework 6.1.0 - 6.1.28 Spring Framework 6.0.0 - 6.0.30 Spring Framework 5.3.0 - 5.3.49 Spring Framework 5.2.0.RELEASE - 5.2.25.RELEASE...

CVE-2026-47888

CVE-2026-47888 affects the RSocketMessageHandler component of Spring Framework, where a malformed SETUP frame causes a memory leak in RSocket applications. The vulnerability is exploitable over the network with no privileges or user interaction required, leading to high availability impact (CVSS ...

EUVD-2026-66856

A Spring RSocket application is exposed to a memory leak via a malformed SETUP frame. Spring Framework 7.0.0 - 7.0.8 Spring Framework 6.2.0 - 6.2.19 Spring Framework 6.1.0 - 6.1.28 Spring Framework 6.0.0 - 6.0.30 Spring Framework 5.3.0 - 5.3.49 Spring Framework 5.2.0.RELEASE - 5.2.25.RELEASE...

CVE-2026-47881 Denial of Service in Spring Batch FlatFileItemReader via Malformed Input File

Spring Batch's FlatFileItemReader supports files where a single logical record spans multiple physical lines — for example, a CSV field that contains embedded newlines wrapped in quotes. A specially crafted input file could exploit the way the reader assembles those multi-line records to consume...

CVE-2026-47881

Spring Batch's FlatFileItemReader is vulnerable to a Denial of Service via a specially crafted input file. Because the reader supports logical records spanning multiple physical lines (e.g., quoted CSV fields with embedded newlines), a malicious file can exploit the record-assembly logic to consu...

EUVD-2026-66757

HCL BigFix Quantum Risk Analyzer has a certain validation process that provides overly descriptive error messages when it encounters malformed input which can allow an attacker to conduct more efficient reconnaissance and fine-tune automated fuzzing tools to produce valid input...

CVE-2026-21809

HCL BigFix Quantum Risk Analyzer has a certain validation process that provides overly descriptive error messages when it encounters malformed input which can allow an attacker to conduct more efficient reconnaissance and fine-tune automated fuzzing tools to produce valid input...

CVE_2019_19844

djangocve201919844poc PoC para CVE-2019-19844 Configuração 1. docker-compose run --service-ports web python manage.py migrate --no-input 2. docker-compose run --service-ports web python manage.py createsuperuser [email protected] --username 0xsha 3. Acesse...

PT-2026-82202

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A remote peer can send a malformed Data Sequence Signal DSS with an incorrect size, followed by another DSS or Multipath TCP MPTCP Control MPC and Data. This sequence causes the first...

CVE-2025-60751

CVE-2025-60751: Stack-basierter Pufferüberlauf in GeographicLib 📌 Dieses Repository enthält die Analyse und technische Dokumentation der Schwachstelle CVE-2025-60751 , eines stapelbasierten Pufferüberlaufs Stack-based Buffer Overflow in der C++-Bibliothek GeographicLib. 📝 Beschreibung Die...

Astra Linux – Vulnerability in CGal

There are multiple code execution vulnerabilities in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could result in code execution. An attacker can provide malicious input to trigger...

Astra Linux – Vulnerability in Raptor2

A malformed input file can lead to a segfault due to an out of bounds array access in raptorxmlwriterstartelementcommon...

grpc-js: @grpc/grpc-js: Server crash via malformed HTTP/2 stream initiation

A flaw was found in @grpc/grpc-js, a pure JavaScript gRPC client and server library. An invalid incoming HTTP/2 stream initiation can cause a server process to crash. This vulnerability affects all servers created using @grpc/grpc-js, and no workaround is available. An unauthenticated remote...

libcupsfilters: cups-filters: libcupsfilters: CUPS image filter process abort via malformed PNG

A flaw was found in libcupsfilters and cups-filters. The PNG image reading function creates a libpng reader without installing an error recovery handler, causing the CUPS image filter process to abort when processing a malformed PNG file. An unauthenticated attacker could exploit this by submitti...

CVE-2026-75145

FFmpeg before commit b4c199c contains an incorrect integer narrowing conversion in the AV1 RTP packetizer libavformat/rtpencav1.c. The OBU size is cast to long before comparison against the remaining frame size. On targets where long is 32 bits, including 64-bit Windows, sufficiently large OBU si...

PT-2026-78525

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to commit 9d786e4 Description A stack buffer overflow exists in the MPEG-PS muxer within the libavformat/mpegenc.c file. This occurs when the software processes input containing more streams than the muxer's fixed-size...