1582 matches found
EUVD-2026-78980
In Cellular Modem, there is a possible denial of service due to improper input validation. This could lead to remote proximal/adjacent denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...
EUVD-2026-78631
FreeRDP before 3.31.0 fails to validate client-supplied DesktopWidth and DesktopHeight values during GCC negotiation, allowing remote attackers to crash the server. Attackers can send crafted RDP packets with zero or oversized dimensions to trigger division-by-zero or assertion failures in...
CVE-2020-16899
CVE-2020-16899: Microsoft Windows TCP/IP Denial of Service Vulnerability CVSS Score: 7.5 CVSS Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C Overview On October 13, Microsoft announced a critical vulnerability in the Windows IPv6 stack, which allows an attacker to send...
exploit-CVE-2016-6515
OpenSSH remote DOS Before 7.3 OpenSSH does not limit password lengths for password authentication, which allows remote attackers to cause a denial of service crypt CPU consumption via a long string. This bug resides in auth-passwd.c in authpassword function. Attackers can exploit this issue to...
Apple-Remote-Crash-Tool-CVE-2018-4407
Apple-Remote-Crash-Tool-CVE-2018-4407 Crashes any macOS High Sierra or iOS 11 device that is on the same WiFi network Just a small Tool that uses a public 'heap buffer overflow vulnerability' CVE-2018-4407 and makes it easier to exploit whole networks. Requirements MacOS Python installed Scapy...
NFSundown
Overview Proof-of-Concept exploit for NFSundown CVE-2025-38089. It can remotely trigger a kernel crash in an NFS server. Details A remote attacker can trigger a kernel null pointer dereference and crash the kernel by sending a specially crafted RPC request. This occurs due to improper handling of...
CVE-2026-32941
Sliver C2 のフレームワーク全体に存在する脆弱性により、無制御のメモリ割り当て CWE-789 / CWE-400 を引き起こして、プロセス全体で Out-of-Memory OOM クラッシュを発生させる、認証不要のリモートサービス拒否 DoS が可能になります。 参照: Tenable 再現手順: 1. 認証情報の取得: 取得または生成された Sliver インプラントから mTLS 証明書と秘密鍵を入手します。 2. PoC の編集: mtlspoc.go を開き、var ブロック内のプレースホルダー値 c2Endpoint、clientCertPEM、clientKeyP...
EUVD-2026-78268
A vulnerability was determined in vllm-project vLLM up to 0.27.1. This affects an unknown part of the file /v1/chat/completions of the component Jinja Template Rendering. This manipulation of the argument chattemplate causes resource consumption. The attack can be initiated remotely. The exploit...
CVE-2022-0778-POC
CVE-2022-0778를 위한 간단한 원격 트리거 POC 배경 자체 서버 구현이 CVE-2022-0778에 취약한지 확인하려고 할 때, 원격으로 확인하는 것은 매우 번거로웠습니다. BNnodsqrt의 파싱 버그를 트리거하기 위해 악의적으로 조작된 인증서를 만드는 방법은 이미 알려져 있지만, 주요 문제는 대부분의 클라이언트 구현이 TLS 핸드셰이크에서 사용하기 위해 클라이언트 인증서를 파싱하려고 한다는 점입니다. 이는 결과적으로 다음과 같습니다. 구현이 취약한 경우 버그가 트리거되어 클라이언트가 100% CPU를 사용하고...
CVE-2026-43790
The issue was addressed with improved memory handling. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. A remote attacker may be able to cause unexpected system termination or corrupt kernel memory...
CVE-2026-27654
CVE-2026-27654 NGINX ngxhttpdavmodule Heap Buffer Overflow via sizet Underflow Remote DoS / Potential RCE Description ngxhttpdavcopymovehandler in src/http/modules/ngxhttpdavmodule.c computes the destination URI length by subtracting the location prefix length from the Destination header's URI pa...
CVE-2026-15893
netifipv6calcreachabletime in subsys/net/ip/netif.c derives a randomized ND reachable time from ipv6-basereachabletime as minreachable + sysrand32get % maxreachable - minreachable, where minreachable = base/2 and maxreachable = 3base/2 using integer division. When basereachabletime is 1, both...
AirDroidPwner
AirDroidPwner CVE-2019-9599 This exploit is no longer functional Proof of Concept Video: https://www.youtube.com/watch?v=0QDM2246DM CVE: https://nvd.nist.gov/vuln/detail/CVE-2019-9599 Exploit-db: https://www.exploit-db.com/exploits/46337 What is AirDroid? AirDroid is one of the best known and mos...
CVE_2020_0796_CNA
CVE-2020-0796-CNA Modified based on the PoC provided by danigargu, implemented privilege escalation replication on Windows 10, and developed AggressorScripts based on the Reflective DLL project by stephenfewer and the interface provided by CobaltStrike documentation. This repository is only for...
CVE-2020-11881
CVE-2020-11881 MikroTik SMB 원격 서비스 거부 DoS 이 보고서는 RouterOs에서 실행되는 MikroTik의 SMB 서비스에 대한 인증되지 않은 원격 DoS인 CVE-2020-11881에 대해 설명합니다. 이 취약점은 공격자가 실행 중인 SMB 서비스를 중단시킬 수 있으며, 2020년 4월 6일에 securitymikrotik.com에 책임감 있게 공개되었습니다. 서버 메시지 블록SMB 프로토콜은 Microsoft에 의해 도입되었으며, Windows 시스템 및 서비스와의 파일 교환 호환성을 유지하기 위...
CVE-2025-26790
Withsecure Atlant with Capricorn engine before 2025-01-2002 allows a Remote Denial of Service via an out-of-bounds memory read during processing of a document file by the antivirus engine...
CVE-2025-26790
Withsecure Atlant with the Capricorn engine, in versions prior to 2025-01-20_02 , is vulnerable to a remote denial of service caused by an out-of-bounds memory read during processing of a document file by the antivirus engine. The CVSS 3.1 score is 3.7 (Low) with a vector of AV:N/AC:H/PR:N/UI:N/S...
UBUNTU-CVE-2026-89679
In the Linux kernel, the following vulnerability has been resolved: nfsd: fix null dereference in nfsd4setattr for deleg timestamp attrs When a SETATTR request includes FATTR4WORD2TIMEDELEGACCESS or FATTR4WORD2TIMEDELEGMODIFY in the attribute bitmap, nfsd4setattr sets delegattrs=true and calls...
CVE-2026-89531
In the Linux kernel, the following vulnerability has been resolved: svcrdma: Reject connection when transport allocation fails handleconnectreq returns without action when svcrdmacreatexprt fails to allocate the new transport. The CM core returns 0 for CONNECTREQUEST events, so it does not destro...