CVE-2026-24061

CVE-2026-24061 Exploit de RCE en Telnet - Por SafeBreach Labs Este script explota la vulnerabilidad CVE-2026-24061 en servidores Telnet mediante una variable de entorno USER malformada. Uso Ejecute el script con un host de destino: root@kitploit: python telnetrce.py -p Argumentos host: Dirección ...

CVE-2017-3881-exploit-cisco-

Una vulnerabilidad en el código de procesamiento del Protocolo de Gestión de Clústeres CMP de Cisco en Cisco IOS y Cisco IOS XE Software podría permitir que un atacante remoto no autenticado provoque una recarga del dispositivo afectado o ejecute código de forma remota con privilegios elevados. E...

CVE_2019_19844

djangocve201919844poc CVE-2019-19844 的概念验证（PoC） CVE-2019-19844 设置 1. docker-compose run --service-ports web python manage.py migrate --no-input 2. docker-compose run --service-ports web python manage.py createsuperuser [email protected] --username 0xsha 3. 访问...

Astra Linux – Vulnerability in CGal

There are multiple code execution vulnerabilities in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could result in code execution. An attacker can provide malicious input to trigger...

Astra Linux – Vulnerability in Raptor2

A malformed input file can lead to a segfault due to an out of bounds array access in raptorxmlwriterstartelementcommon...

kernel: wifi: cfg80211: validate PMSR FTM preamble range

A flaw was found in the cfg80211 component of the Linux kernel's Wi-Fi subsystem. This vulnerability allows the PMSR FTM request parser to accept preamble values outside the defined nl80211 range. An attacker could exploit this by providing malformed input, potentially leading to unexpected syste...

CVE-2026-33962

CVE-2026-33962 affects the Wi-Fi subsystem in Samsung Mobile Processor models Exynos 850, 1280, 1330, 1380, 1480, 2400, W920, and W930. A malformed Netlink command can trigger an out-of-bounds read , potentially leading to information leakage . The CVSS 3.1 base score is 2.8 (LOW) with a local at...

CVE-2026-89701

In the Linux kernel, the following vulnerability has been resolved: nfsd: validate nseconds in TIMEDELEG decode paths The xdrgen-based TIMEDELEGACCESS and TIMEDELEGMODIFY decode arms store a raw uint32t nseconds directly into tvnsec without enforcing nseconds NSECPERSEC. The legacy...

CVE-2026-89606

In the Linux kernel, the following vulnerability has been resolved: ecryptfs: reject too-small tag 70 packets ecryptfsparsetag70packet subtracts fixed metadata fields from the parsed packet body size to derive the encrypted filename size. A malformed packet with a body smaller than those fixed...

CVE-2026-89505 RDMA/uverbs: Guard legacy bundles without method_elm

In the Linux kernel, the following vulnerability has been resolved: RDMA/uverbs: Guard legacy bundles without methodelm The legacy write path dispatches through a uverbsapiwritemethod, but the uverbsattrbundle passed to provider code does not have an ioctl method element. If malformed provider...

PoC-CVE-2025-69421

Repositorio de solo caída CVE-2025-69421 Este repositorio contiene un archivo PKCS12 malformado mínimo que reproduce el CVE-2025-69421 en un entorno de laboratorio aislado. El PFX generado contiene EncryptedData cuyo EncryptedContentInfo omite el campo opcional encryptedContent. Las versiones...

CVE-2026-49837

GoBGP is an open source Border Gateway Protocol BGP implementation in the Go Programming Language. Versions prior to 4.6.0 contain a BGP OPEN capability parsing issue where several concrete capability decoders may parse data from the full remaining capability buffer instead of the slice bounded b...

CVE-2025-60751

CVE-2025-60751: GeographicLib Stack-based Buffer Overflow 📌 Este repositorio contiene el análisis y la documentación técnica de la vulnerabilidad CVE-2025-60751 , un fallo de desbordamiento de búfer basado en la pila Stack-based Buffer Overflow localizado en la biblioteca C++ GeographicLib. 📝...

CVE-2023-40294-and-CVE-2023-40295

Mientras ejecutaba boron en mi entorno, me topé con 2 desbordamientos de búfer en el montón en libboron libboron.so.2 versión 2.0.8 al procesar entradas ligeramente malformadas. Esto ha sido probado oficialmente tanto en Mac x8664 como en Linux x8664: Archivos para la reproducción reproduction.zi...

xmldom: Parser silently accepts a not-well-formed end tag whose name is followed by a line break and trailing content

Summary xmldom's parser silently accepts a not-well-formed end tag whose valid name is followed by trailing content — e.g. . The element is closed, the trailing content is discarded, and no error is reported, even though the XML end-tag production allows only optional whitespace after the name an...

xmldom: Quadratic-time parsing via the malformed-input recovery path — `parseElementStartPart` re-scan and `normalize()` adjacent-text merge

Summary xmldom's malformed-input error-recovery path has two quadratic-time On² behaviors that a single crafted input triggers together, so a tiny, highly compressible document tens of KB stalls the Node.js event loop for multiple seconds. It is reachable from DOMParser.parseFromString under...

CVE-2026-86287 Net::IP::LPM versions before 1.12 for Perl accept malformed prefix lengths

Net::IP::LPM versions before 1.12 for Perl accept malformed prefix lengths. Non-numeric and non-ASCII prefix lengths are accepted and treated as 0. Integers over 31 bits are silently truncated. A single malformed mask will poison the lookup table. The result is that the lookup will silently succe...

Colord: Slow rejection of oversized malformed color strings

...

CVE-2026-85730 smol-toml: Denial of Service via malformed TOML documents

smol-toml is a small, fast, and correct TOML parser and serializer. Prior to 1.7.1, parse can enter an infinite loop when a value inside an array or inline table is followed by a comment with no trailing newline. In src/util.ts, skipUntil calls indexOfNewline, receives -1 at the end of input, and...

CVE-2026-85730 smol-toml: Denial of Service via malformed TOML documents

smol-toml is a small, fast, and correct TOML parser and serializer. Prior to 1.7.1, parse can enter an infinite loop when a value inside an array or inline table is followed by a comment with no trailing newline. In src/util.ts, skipUntil calls indexOfNewline, receives -1 at the end of input, and...