CVE-2020-35391

CVE-2020-35391 Tenda f3 잘못된 HTTP 요청 헤더 처리 취약점. 실행 root@kitploit: python3 CVE-2020-35391.py --help python3 CVE-2020-35391.py python3 CVE-2020-35391.py -i http://127.0.0.1:8080 python3 CVE-2020-35391.py -l ip.txt Tenda F3 Shodan 검색어 익스플로잇...

CVE-2002-0748

概要 Gold エクスプロイト - リモートWebサーバーはサービス拒否攻撃に対して脆弱です。 説明 通常のシーケンス CR LF CR LF の代わりに、2つのLF文字で終わるリクエストを送信することで、Webサーバーを停止させることが可能でした。CR = キャリッジリターン、LF = ラインフィード 攻撃者はこの脆弱性を悪用して、このサーバーとすべてのLabViewアプリケーションをクラッシュさせることができます。 Gleen Research Center | NASA - LabVIEW Webサーバー DoS脆弱性 解決策 LabView...

cve-2022-21907

CVE-2022-21907 Этот пакет обнаруживает попытки эксплуатации CVE-2022-21907 https://corelight.com/blog/detecting-cve-2022-21907 Метод обнаружения: HTTP Данные HTTP должны быть = 1750 байт, и HTTP/1.1 не обнаружен в конце эксплойтного HTTP-запроса. Использование: root@kitploit: $ zeek -Cr your.pcap...

CVE-2007-2447

ExploitDev 여정 6 | CVE-2007-2447 | Samba 3.0.20 3.0.25rc 'Username' map script' 명령 실행 원본 익스플로잇: https://www.exploit-db.com/exploits/16320 익스플로잇 이름: Samba username map script RCE CVE : 2007-2447 랩 : Lame - HackTheBox 설명 Samba 3.0.25 미만 버전에는 공격자가 SMB 서버에 사용자 이름으로 잘못된 형식의 요청을 보내 시스템 명령을 실행할 수 있게 하는...

CVE-2023-38434

CVE-2023-38434 xHTTP 커밋 72f812d 이하 버전에서는 xhttp.c의 595행에 있는 closeconnection에서 이중 해제double free 취약점이 발생합니다. root@kitploit: ifconn-request.public.headers.list != NULL freeconn-request.public.headers.list; 취약점을 확인하려면 이 저장소에 포함된 xHTTP 서버를 디버그 심볼과 address sanitizer를 사용하여 컴파일하세요: root@kitploit: unzip...

CVE-2026-67184-Unauthenticated-NULL-Pointer-Dereference-Crashes-the-Server-TinyWeb-

보안 권고: 인증되지 않은 NULL 포인터 역참조로 서버 크래시 TinyWeb 할당된 CVE ID: CVE-2026-67184 요약 TinyWeb이 요청 라인을 파싱하지 못하면 오류를 반환하지만 요청의 URL 포인터를 NULL로 남겨둡니다. 호출자는 오류를 무시하고 요청을 응답 빌더에 전달하며, 응답 빌더는 해당 NULL 포인터를 역참조하여 워커를 크래시시킵니다. 잘못된 형식의 요청 몇 개만으로도 전체 서버가 다운되며, 복구되지 않습니다. 영향을 받는 소프트웨어 프로젝트: TinyWeb...

CVE-2026-16687

IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 is affected by a vulnerability in the ASMI web interface. An unauthenticated attacker with network access can send the FSP a malformed request, allowing arbitrary code...

UBUNTU-CVE-2026-59902

Netty is an asynchronous, event-driven network application framework. Prior to 4.1.137.Final and 4.2.17.Final, io.netty.handler.codec.sctp.SctpMessageCompletionHandler limits incomplete messages and fragment counts but not maxBufferedBytes, allowing unauthenticated peers to exhaust memory with...

CVE-2026-18846

IBM i 7.6, 7.5, 7.4, and 7.3 s vulnerable to a buffer overflow from improperly validating client data. By sending malformed requests to one of the host servers, a remote attacker could leverage this vulnerability to cause a denial-of-server DoS for that server...

CVE-2026-18846

CVE-2026-18846 – IBM i host servers Affected products/versions: IBM i 7.3, 7.4, 7.5, 7.6. Root cause and impact: The vulnerability is a buffer overflow caused by improper validation of client data, which can be exploited by sending malformed requests to a host server to cause a denial of service ...

CVE-2026-65936

A malformed Bluetooth connection request message can cause the RS9116W/SiWx917 to leak potentially sensitive information. See vulnerability B-E4 in the related paper below...

CVE-2026-65936

A malformed Bluetooth connection request message can cause the RS9116W/SiWx917 to leak potentially sensitive information. See vulnerability B-E4 in the related paper below...

EUVD-2026-53449

A vulnerability in the Simple Network Management Protocol SNMP subsystem of Cisco IOS XE Software could allow an authenticated, remote attacker to cause an affected device to reload, resulting in a denial of service DoS condition. This vulnerability is due to improper error handling when parsing...

CVE-2026-67304

FreeRDP had a null pointer dereference vulnerability in the smartcard device control request cleanup when reader-state decoding fails (affects FreeRDP prior to 3.29.0). An attacker can send malformed smartcard IRP requests with non-zero cReaders and truncated reader-state data to crash the proces...

CVE-2026-67184

TinyWeb through 0.0.8 contains a null pointer dereference vulnerability that allows unauthenticated remote attackers to crash worker processes by sending a malformed HTTP request line with an invalid version string. The HttpParser::execute function fails to allocate the Url object when version...

CVE-2026-67184 TinyWeb 0.0.8 Null Pointer Dereference DoS via Malformed HTTP Request

TinyWeb through 0.0.8 contains a null pointer dereference vulnerability that allows unauthenticated remote attackers to crash worker processes by sending a malformed HTTP request line with an invalid version string. The HttpParser::execute function fails to allocate the Url object when version...

EUVD-2026-45513

In the Linux kernel, the following vulnerability has been resolved: NFSv4/pNFS: reject zero-length raddr in nfs4decodempdsaddr nfs4decodempdsaddr decodes the rnetid and raddr opaques of a netaddr4 from a GETDEVICEINFO multipath-DS body, then immediately calls strrchrbuf, '.' to locate the port...

CVE-2026-48068 @grpc/grps-js: A malformed request can cause a server crash

@grpc/grps-js implements the core functionality of gRPC purely in JavaScript, without a C++ addon. Prior to 1.9.16, 1.10.12, 1.11.4, 1.12.7, 1.13.5, and 1.14.4, an invalid incoming HTTP/2 stream initiation can cause a server process created using @grpc/grpc-js to crash. This issue is fixed in...

CVE-2026-51599

An insufficient input validation vulnerability in the RTSP service of MERCURY MIPC252W v1.0.5 Build 230306 Rel.79931n allows an unauthenticated remote attacker to render an individual TCP connection temporarily unusable via sending an RTSP request with a Content-Length header but no corresponding...

CVE-2026-51599

CVE-2026-51599 affects MERCURY MIPC252W v1.0.5 Build 230306 Rel.79931n. The issue is an insufficient input validation in the RTSP service where an RTSP request with a Content-Length header but no body causes the RTSP parser to enter a body-waiting state, leading to the connection being silently c...