918441 matches found
log4j2-exploit
Log4Shell CVE-2021-44228 proof of concept Requirement Java JDK/JRE 8 or later version curl exploitable Simple spring boot application that serves a login page with user and password. It logs the user name when POSTed to /. It is not required for the application to log any user provided input...
CVE-2025-65318-and-CVE-2025-65319
PoC for CVE-2025-65318 and CVE-2025-65319 CVE-2025-65318 BDU:2025-13740: When using the attachment interaction functionality, Canary Mail 5.1.40 and below saves documents to a file system without a Mark-of-the-Web tag, which allows attackers to bypass the built-in file protection mechanisms of bo...
CVE-2023-40459
Intro This repository contains PoC the CVE-2023-40459 vulnerability. This vulnerability affects the ACEManager file in the ALEOS 4.16 and earlier versions, a product of Sierra Wireless. This attack, without any initial access rights, can lead to disruption in accessing the target device DoS. To u...
GHSA-6PQ8-JHM2-2VCW qs : qs.stringify with arrayFormat 'comma' throws an uncaught TypeError on array elements carrying a non-callable own toString (DoS)
Summary qs.stringifyobj, arrayFormat: 'comma' throws an uncaught TypeError: Cannot convert object to primitive value when an array in obj contains an element that carries an own, non-callable toString property for example a: toString: 'x' . A remote, unauthenticated attacker who can influence an...
qs : qs.stringify with arrayFormat 'comma' throws an uncaught TypeError on array elements carrying a non-callable own toString (DoS)
Summary qs.stringifyobj, arrayFormat: 'comma' throws an uncaught TypeError: Cannot convert object to primitive value when an array in obj contains an element that carries an own, non-callable toString property for example a: toString: 'x' . A remote, unauthenticated attacker who can influence an...
cve-2023-41993-test
original poc from po6ix post exploitation i copied from nikiasb's and Linus Henze's regexp exploits, 5aelo's Phrack paper/Pwn2Own 2018 exploit chain, LiveOverflow blog/youtube series...
CVE-2020-1313
CVE-2020-1313 Abstract Windows Update Orchestrator Service is a DCOM service used by other components to install windows updates that are already downloaded. USO was vulnerable to Elevation of Privileges any user to local system due to an improper authorization of the callers. The vulnerability...
EUVD-2026-101959
undici WebSocket client vulnerable to Denial of Service via failed HTTP/2 handshake...
GHSA-QQ8J-7V2V-3RWP undici WebSocket client vulnerable to Denial of Service via failed HTTP/2 handshake
Impact undici's experimental WebSocket client enabled by default via allowH2: true crashes the Node.js process when it connects to a malicious server over HTTP/2. If the server answers the WebSocket upgrade with a response that fails handshake validation, undici aborts the request, but the abort ...
undici WebSocket client vulnerable to Denial of Service via failed HTTP/2 handshake
Impact undici's experimental WebSocket client enabled by default via allowH2: true crashes the Node.js process when it connects to a malicious server over HTTP/2. If the server answers the WebSocket upgrade with a response that fails handshake validation, undici aborts the request, but the abort ...
npm: undici WebSocket client vulnerable to Denial of Service via failed HTTP/2 handshake
npm: undici WebSocket client vulnerable to Denial of Service via failed HTTP/2 handshake vulnerability discovered by ? in WordPress npm undici versions = 8.11.0, 8.11.2...
GHSA-H2V8-394M-P7VV Rustls: Brotli certificate decompression can allocate an attacker-controlled amount of memory up to 1 GiB before authentication.
Summary The built-in but disabled by default Brotli certificate decoder bounds the output buffer but accepts an input-selected history window. A header of five bytes can specify a 1 GiB window allocation. A peer can abort a process whose allocator cannot satisfy that request. A client must enable...
Rustls: Brotli certificate decompression can allocate an attacker-controlled amount of memory up to 1 GiB before authentication.
Summary The built-in but disabled by default Brotli certificate decoder bounds the output buffer but accepts an input-selected history window. A header of five bytes can specify a 1 GiB window allocation. A peer can abort a process whose allocator cannot satisfy that request. A client must enable...
CVE-2022-3602-poc
CVE-2022-3602 DOS poc Buffer Overflow DOS in OpenSSL 3.0 3.0.7 Useage: $ gcc -o CVE-2022-3602 CVE-2022-3602.c -lpthread $ ./CVE-2022-3602 127.0.0.1 443...
Detection-and-Mitigation-script-for-CVE-2021-42717
Detection-and-Mitigation-script-for-CVE-2021-42717 Detection and Mitigation script for CVE-2021-42717 - ModSecurity DoS Vulnerability in JSON Parsing ModSecurity 3.x through 3.0.5 mishandles excessively nested JSON objects. Crafted JSON objects with nesting tens-of-thousands deep could result in...
CVE-2023-5561-POC-Updated
CVE-2023-5561-POC-Updated This repository contains a modified version of the original Proof-of-Concept PoC for CVE-2023-5561. The original PoC, which can be found here, sends a high volume of requests in parallel, which may trigger Web Application Firewalls WAFs or cause the server to block the...
sockstress
sockstress Sockstress CVE-2008-4609 implementation using Go Install go get github.com/marcelki/sockstress Usage Usage: sockstress options... Options: -p The destination port to attack. -i The network interface to use. -d The delay between SYN packets You can choose your unit of time e.g. 1ns,...
zotlit-PoC
ZotLit: security advisory CVE status: requested, pending assignment. This finding is published as GHSA-4qh7-66xv-h329. On CVE assignment this repository is renamed CVE-YYYY-NNNNN-zotlit-PoC and this banner is replaced with the CVE link. | ---|--- Researcher| Dostxodjayev Abdullox @squeeze440...