CVE-2026-77322

SIPGO is a library for writing SIP services in the GO language. Prior to 1.4.3, WSConnection.Read in sip/transportws.go creates a wsutil.Reader without setting MaxFrameSize, allowing NextFrame to accept a client-controlled header.Length before ParseMaxMessageLength is applied. An unauthenticated ...

CVE-2026-77322

The SIPGO library (prior to version 1.4.3 ) is vulnerable to a Denial of Service (DoS) attack via unvalidated WebSocket frame lengths. The root cause is located in sip/transport_ws.go, where WSConnection.Read creates a wsutil.Reader without setting the MaxFrameSize parameter. This allows an unaut...

undertow-core: Undertow:HTTP request smuggling via oversized chunk-size bit overlap

A flaw was found in the ChunkReader component of the Undertow HTTP server, which is used by WildFly and JBoss EAP to handle chunked transfer encoding. The issue occurs because the parser uses a single internal variable to store both the remaining chunk size and state flags. By sending a specially...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.22.15 packages and security update

Red Hat OpenShift Container Platform release 4.22.15 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.22. Red Hat Product Security has rated this update as having a...

WaSonar

免责声明 ：本工具仅用于教育目的和安全研究。开发者不对滥用行为负责。请负责任且合乎道德地使用。 WaSonar 是一个强大的 CLI 工具，专用于 WhatsApp 协议上的教育研究、设备追踪和压力测试。基于 Baileys 构建。 功能 • 安装 • 用法 功能 实时设备追踪 ：检测所有绑定设备（手机、网页、桌面）的精确在线/离线状态。 设备发现 ：列出目标号码绑定的所有设备（主手机 + 附属设备）。 资料提取 ：获取个人资料图片、状态/简介信息及 JID。 资源耗尽 ：使用超大反应负载（激进/缓慢模式）淹没设备。 安装 通过 NPM（推荐） root@kitploit: npm...

CVE-2025-15467

CVE-2025-15467 OpenSSL CMS AuthEnvelopedData 解析中的栈缓冲区溢出。 漏洞 在解析 CMS AuthEnvelopedData 内容中的 AEAD 密码参数（例如 AES-GCM）时，evpciphergetasn1aeadparams 存在栈缓冲区溢出。超大的 IV 会溢出 16 字节的栈缓冲区，导致拒绝服务并可能远程执行代码。 受影响版本 分支| 受影响版本| 修复版本 ---|---|--- 3.6.x| 3.6.0| 3.6.1+ 3.5.x| 3.5.0-3.5.4| 3.5.5+ 3.4.x| 3.4.0-3.4.3| 3.4.4+...

libsoup: SoupWebsocketConnection: libsoup: WebSocket remote denial of service via oversized control frame protocol violation

A vulnerability was found in libsoup's WebSocket frame parsing implementation. The library fails to validate length rules specified in RFC 6455 §5.5, which mandates that all WebSocket control frames e.g., PING, PONG, CLOSE contain a payload of 125 bytes or less. A remote, unauthenticated attacker...

CVE-2026-34040-PoC

CVE-2026-34040 — Bypass del plugin AuthZ de Docker/Moby PoC de laboratorio KO: Es un proyecto de reproducción de laboratorio de una vulnerabilidad que bypasea el plugin de autorización AuthZ de Docker Moby utilizando un cuerpo de solicitud de más de 1MB. EN: Una reproducción de laboratorio de una...

CVE-2023-50965

💥 CVE-2023-50965 — 栈缓冲区溢出利用（ Linux ） CVE-2023-50965 的概念验证漏洞利用程序，演示了在未启用漏洞利用缓解措施 的脆弱系统上，通过基于栈的缓冲区溢出实现远程代码执行（RCE） 。 本项目专为安全研究与漏洞利用开发实践 而开发，重点在于理解 Linux 环境中的内存损坏漏洞及经典利用技术。 漏洞概述 CVE-2023-50965 是一个栈缓冲区溢出漏洞 ，攻击者可通过发送包含超大输入缓冲区的特制请求，覆盖栈上保存的返回指针。 若利用得当，该漏洞可通过将程序控制流重定向至攻击者控制的 shellcode，实现任意代码执行。...

citrix_bleed_2

Escáner PoC de Citrix Bleed 2 CVE-2025-5777 Este script es un escáner de Prueba de Concepto PoC para la vulnerabilidad hipotética "Citrix Bleed 2" CVE-2025-5777. Está diseñado para detectar posibles fugas de memoria en dispositivos Citrix ADC mediante el envío de solicitudes de gran tamaño y el...

CVE-2026-81000

⚡ CVE-2026-81000 - TUNderflow Corrupción de memoria en el headroom de recepción de TUN/TAP del kernel de Linux Una vulnerabilidad de corrupción de memoria en el kernel de Linux en el subsistema de red TUN/TAP , causada por límites insuficientes en el headroom de recepción y un desbordamiento...

cve-2025-24035-rds-websocket-dos-test

CVE-2025-24035 WebSocket Stress Test Safe 🚨 DISCLAIMER : This is NOT an exploit. This script is a simulation and should only be used for educational purposes in a safe lab environment. Purpose This test sends a deliberately oversized WebSocket header to simulate a malformed request toward RD...

CVE-2026-93393 Heap overflow via oversized decrypted TLS record sequence in Windows Secure Channel stream

A heap-based buffer overflow exists in the TLS transport layer of the MongoDB C Driver when built with the Windows platform TLS backend. A remote endpoint that the client connects to can cause the driver to write uncontrolled data outside the bounds of a heap allocation while processing incoming...

Heap overflow via oversized decrypted TLS record sequence in Windows Secure Channel stream

A heap-based buffer overflow exists in the TLS transport layer of the MongoDB C Driver when built with the Windows platform TLS backend. A remote endpoint that the client connects to, or an attacker able to impersonate or redirect the client's connection, can cause the driver to write...

Moderate: Red Hat Security Advisory: libsoup security update

An update for libsoup is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

libsoup: SoupWebsocketConnection: libsoup: WebSocket remote denial of service via oversized control frame protocol violation

A vulnerability was found in libsoup's WebSocket frame parsing implementation. The library fails to validate length rules specified in RFC 6455 §5.5, which mandates that all WebSocket control frames e.g., PING, PONG, CLOSE contain a payload of 125 bytes or less. A remote, unauthenticated attacker...

RLSA-2026:68266 Moderate: libsoup security update

The libsoup packages provide an HTTP client and server library for GNOME. Security Fixes: libsoup: SoupWebsocketConnection: libsoup: WebSocket remote denial of service via oversized control frame protocol violation CVE-2026-15711 For more details about the security issues, including the impact, a...

libsoup security update

An update is available for libsoup. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The libsoup packages provide an HTTP client and server library for GNOME...

libsoup security update

An update is available for libsoup. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The libsoup packages provide an HTTP client and server library for GNOME...

CVE-2025-4476-Exploit

Exploit CVE-2025-4476 Un pequeño cliente de prueba en Python para enviar solicitudes HTTP GET con una cabecera Authorization: Basic de tamaño excesivo. Esta herramienta está destinada a pruebas de laboratorio e investigación sobre problemas de análisis de cabeceras por ejemplo, errores de...