CVE-2007-2447

رحلة ExploitDev 6 | CVE-2007-2447 | Samba 3.0.20 3.0.25rc 'Username' map script' تنفيذ الأوامر الاستغلال الأصلي: https://www.exploit-db.com/exploits/16320 اسم الاستغلال: Samba username map script RCE CVE : 2007-2447 المختبر: Lame - HackTheBox الوصف هناك ثغرة أمنية في إصدارات Samba الأقل من 3.0.25...

CVE-2002-0748

ملخص Gold exploit - خادم الويب البعيد عرضة لهجوم رفض الخدمة. الوصف كان من الممكن قتل خادم الويب عن طريق إرسال طلب ينتهي بحرفي LF بدلاً من التسلسل الطبيعي CR LF CR LF CR = carriage return, LF = line feed. يمكن للمهاجم استغلال هذه الثغرة لإسقاط هذا الخادم وجميع تطبيقات LabView. مركز أبحاث Gleen |...

cve-2022-21907

CVE-2022-21907 ستقوم هذه الحزمة بكشف استغلالات CVE-2022-21907 https://corelight.com/blog/detecting-cve-2022-21907 طريقة الكشف: HTTP يجب أن تكون بيانات HTTP = 1750 بايت، و لا يُلاحَظ HTTP/1.1 في نهاية طلب HTTP الاستغلالي. الاستخدام: root@kitploit: $ zeek -Cr your.pcap packages $ cat notice.log...

CVE-2026-67184-Unauthenticated-NULL-Pointer-Dereference-Crashes-the-Server-TinyWeb-

Avis de sécurité : un déréférencement de pointeur NULL sans authentification fait planter le serveur TinyWeb Identifiant CVE attribué : CVE-2026-67184 Résumé Lorsque TinyWeb échoue à analyser la ligne de requête, il renvoie une erreur mais laisse le pointeur URL de la requête à NULL. L'appelant...

CVE-2020-35391

CVE-2020-35391 ثغرة Tenda f3 في معالجة ترويسة طلب HTTP غير صالحة. التشغيل root@kitploit: python3 CVE-2020-35391.py --help python3 CVE-2020-35391.py python3 CVE-2020-35391.py -i http://127.0.0.1:8080 python3 CVE-2020-35391.py -l ip.txt Tenda F3 بحث Shodan الاستغلال...

CVE-2023-38434

CVE-2023-38434 xHTTP commit 72f812d وما دونه يعاني من ثغرة تحرير مزدوج double free في دالة closeconnection في الملف xhttp.c، السطر 595. root@kitploit: ifconn-request.public.headers.list != NULL freeconn-request.public.headers.list; لتأكيد الثغرة، قم بتجميع خادم xHTTP المضمن في هذا المستودع مع رمو...

CVE-2026-16687

IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 is affected by a vulnerability in the ASMI web interface. An unauthenticated attacker with network access can send the FSP a malformed request, allowing arbitrary code...

UBUNTU-CVE-2026-59902

Netty is an asynchronous, event-driven network application framework. Prior to 4.1.137.Final and 4.2.17.Final, io.netty.handler.codec.sctp.SctpMessageCompletionHandler limits incomplete messages and fragment counts but not maxBufferedBytes, allowing unauthenticated peers to exhaust memory with...

CVE-2026-18846

IBM i 7.6, 7.5, 7.4, and 7.3 s vulnerable to a buffer overflow from improperly validating client data. By sending malformed requests to one of the host servers, a remote attacker could leverage this vulnerability to cause a denial-of-server DoS for that server...

CVE-2026-18846

CVE-2026-18846 – IBM i host servers Affected products/versions: IBM i 7.3, 7.4, 7.5, 7.6. Root cause and impact: The vulnerability is a buffer overflow caused by improper validation of client data, which can be exploited by sending malformed requests to a host server to cause a denial of service ...

CVE-2026-65936

A malformed Bluetooth connection request message can cause the RS9116W/SiWx917 to leak potentially sensitive information. See vulnerability B-E4 in the related paper below...

CVE-2026-65936

A malformed Bluetooth connection request message can cause the RS9116W/SiWx917 to leak potentially sensitive information. See vulnerability B-E4 in the related paper below...

EUVD-2026-53449

A vulnerability in the Simple Network Management Protocol SNMP subsystem of Cisco IOS XE Software could allow an authenticated, remote attacker to cause an affected device to reload, resulting in a denial of service DoS condition. This vulnerability is due to improper error handling when parsing...

CVE-2026-67304

FreeRDP had a null pointer dereference vulnerability in the smartcard device control request cleanup when reader-state decoding fails (affects FreeRDP prior to 3.29.0). An attacker can send malformed smartcard IRP requests with non-zero cReaders and truncated reader-state data to crash the proces...

CVE-2026-67184

TinyWeb through 0.0.8 contains a null pointer dereference vulnerability that allows unauthenticated remote attackers to crash worker processes by sending a malformed HTTP request line with an invalid version string. The HttpParser::execute function fails to allocate the Url object when version...

CVE-2026-67184 TinyWeb 0.0.8 Null Pointer Dereference DoS via Malformed HTTP Request

TinyWeb through 0.0.8 contains a null pointer dereference vulnerability that allows unauthenticated remote attackers to crash worker processes by sending a malformed HTTP request line with an invalid version string. The HttpParser::execute function fails to allocate the Url object when version...

EUVD-2026-45513

In the Linux kernel, the following vulnerability has been resolved: NFSv4/pNFS: reject zero-length raddr in nfs4decodempdsaddr nfs4decodempdsaddr decodes the rnetid and raddr opaques of a netaddr4 from a GETDEVICEINFO multipath-DS body, then immediately calls strrchrbuf, '.' to locate the port...

CVE-2026-48068 @grpc/grps-js: A malformed request can cause a server crash

@grpc/grps-js implements the core functionality of gRPC purely in JavaScript, without a C++ addon. Prior to 1.9.16, 1.10.12, 1.11.4, 1.12.7, 1.13.5, and 1.14.4, an invalid incoming HTTP/2 stream initiation can cause a server process created using @grpc/grpc-js to crash. This issue is fixed in...

CVE-2026-51599

An insufficient input validation vulnerability in the RTSP service of MERCURY MIPC252W v1.0.5 Build 230306 Rel.79931n allows an unauthenticated remote attacker to render an individual TCP connection temporarily unusable via sending an RTSP request with a Content-Length header but no corresponding...

CVE-2026-51599

CVE-2026-51599 affects MERCURY MIPC252W v1.0.5 Build 230306 Rel.79931n. The issue is an insufficient input validation in the RTSP service where an RTSP request with a Content-Length header but no body causes the RTSP parser to enter a body-waiting state, leading to the connection being silently c...