CVE-2021-23017-POC

CVE-2021-23017-POC A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact. The issue only affects nginx if the "resolver"...

Project-CVE-2026-50751

CVE-2026-50751 IKEv1 Security Testing Description This Python script is an offensive security-testing framework designed to target CVE-2026-50751, a Check Point IKEv1 VPN authentication-bypass vulnerability. Features Scans IP addresses for IKEv1 VPN services on UDP port 500 Attempts to identify...

isip

isip Kit interactivo de SIP para manipulación de paquetes, sniffing, ataques man-in-the-middle, fuzzing, simulación de ataques DoS. Video https://asciinema.org/a/11128 Configuración git clone https://github.com/halitalptekin/isip.git cd isip pip install -r requirements.txt Uso Las herramientas de...

PCP: PCP: Denial of Service due to signed integer overflow

A signed integer overflow in the PCP pmGetPDU function can be exploited via crafted network packets during PDU processing or SASL negotiation. This permanently blinds the affected daemon, resulting in a total denial of service DoS for subsequent packet reads...

PCP: PCP: Denial of Service due to signed integer overflow

A signed integer overflow in the PCP pmGetPDU function can be exploited via crafted network packets during PDU processing or SASL negotiation. This permanently blinds the affected daemon, resulting in a total denial of service DoS for subsequent packet reads...

CVE-2026-33827

🔴 CVE-2026-33827: Windows TCP/IP Remote Code Execution RCE 📌 General Description CVE-2026-33827 is a critical Remote Code Execution RCE vulnerability affecting the Windows TCP/IP network stack. It is classified as a Race Condition flaw caused by improper synchronization when handling shared...

CVE-2018-15473

CVE-2018-15473 - SSH Username Enumeration Exploit A tool for enumerating valid usernames on vulnerable SSH servers OpenSSH 2.3 through 7.7. 📋 Vulnerability Description CVE-2018-15473 allows enumeration of existing users on SSH servers by sending malformed authentication packets. The server respon...

Bluetooth-Crash-CVE-2017-0785

CVE-2017-0785 Bluetooth module crash This script is a modified version of https://github.com/ojasookert/CVE-2017-0785. It leaks information via SDP due to out-of-bound bytes, but sending too many packets or search requests causes the Bluetooth module on an Android smartphone above Android 4.0 to...

CVE-2022-42475-RCE-POC

CVE-2022-42475-RCE-POC 漏洞名称 CVE-2022-42475 Fortinet RCE Vulnerability POC 漏洞成因 Due to a validation flaw in user input by sslvpnd, an unauthenticated attacker can trigger a buffer overflow by sending specially crafted packets, ultimately achieving arbitrary code execution on the target system. 受影响...

tomcat-cluster-session-sync-exp

The tool is only for security research and internal self-inspection. It is prohibited to use the tool for illegal attacks. The user shall bear all consequences. tomcat cluster sync-session exploit This is an exploit targeting deserialization vulnerabilities caused by insecure configurations lack ...

Rocky Linux 9 [CIQ] Security Update: lldpd / lldpd-debuginfo / lldpd-debugsource / lldpd-devel Multiple Vulnerabilities (crlsa-2024_9158)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20249158 advisory. lldp/openvswitch: denial of service via externally triggered memory leak CVE-2020-27827 lldpd: out-of-bounds read when decoding SONMP packets CVE-2021-4361...

Rocky Linux 9 [CIQ] Security Update: bind / bind-chroot / bind-debuginfo / bind-debugsource / bind-devel / etc Multiple Vulnerabilities (crlsa-2022_8068)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20228068 advisory. bind: DNS forwarders - cache poisoning vulnerability CVE-2021-25220 bind: DoS from specifically crafted TCP packets CVE-2022-0396 Tenable has extracted the...

AlmaLinux 9.2 [TuxCare] Security Update: lldpd / lldpd-devel (ALMALINUX9.2:CLSA-2025:1757692387)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1757692387 advisory. - A flaw was found in multiple versions of OpenvSwitch. Specially crafted LLDP packets can cause memory to be lost when allocating data to...

Rocky Linux 8 [CIQ] Security Update: bind9.16 / bind9.16-chroot / bind9.16-debuginfo / etc Multiple Vulnerabilities (crlsa-2022_7643)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20227643 advisory. bind: DNS forwarders - cache poisoning vulnerability CVE-2021-25220 bind: DoS from specifically crafted TCP packets CVE-2022-0396 Tenable has extracted the...

openssl: openssl: Denial of Service via excessive QUIC packet buffer retention

A flaw was found in OpenSSL. A remote attacker can cause a Denial of Service DoS by sending specially crafted network packets to a QUIC protocol endpoint. Because the QUIC stack retains memory in packet buffers until the receiving application reads the stream data, an attacker can manipulate data...

kernel: vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets

A flaw was found in the vmxnet3 virtual network device driver within the Linux kernel. When processing Geneve-encapsulated packets, the vmxnet3gethdrlen function can incorrectly interpret header information, leading to a mismatch between expected and actual packet protocols or IP versions. This c...

CVE-2021-33044

CVE-2021-33044 Dahua IPC/VTH/VTO devices auth bypass exploit About: The identity authentication bypass vulnerability found in some Dahua products during the login process. Attackers can bypass device identity authentication by constructing malicious data packets. python3 dahuaexploit.py --ip IP...

Nest: Unbounded memory growth in the NestJS TCP microservice transport

Summary A peer that can open a TCP connection to a NestJS microservice using the built-in TCP transport can make the server process allocate memory without limit, on either side of the connection, until the process is killed by the OS or by its container memory limit. No authentication, no...

PCP: PCP: Denial of Service due to signed integer overflow

A signed integer overflow in the PCP pmGetPDU function can be exploited via crafted network packets during PDU processing or SASL negotiation. This permanently blinds the affected daemon, resulting in a total denial of service DoS for subsequent packet reads...

cve-2019-0708

CVE-2019-0708 This module checks a range of hosts for the CVE-2019-0708 vulnerability by binding the MST120 channel outside of its normal slot and sending DoS packets. I just modified the initial metasploit module for this vuln to produce a denial of service attack...