Lucene search
+L

60553 matches found

Kitploit
Kitploit
•added 2026/10/13 5:54 a.m.•8 views

ManualRsrcDataFetching

ManualRsrcDataFetching: one function to replace FindResource & LoadResource & LockResource & SizeofResource windows apis. Note: Payload.ico is a x64 calc shellcode...

5.9AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/10/13 4:58 a.m.•20 views

Wordpress-DOS-Attack-CVE-2018-6389

Wordpress-DOS-Attack-CVE-2018-6389 Load-scripts.php file, which purpose is to retrieve several JavaScript packages through one single request. $ chmod +x Execute.sh $ ./Execute.sh How it Works! The problem lies upon the load-scripts.php file, which purpose is to retrieve several Javascript packag...

7.5CVSS7.9AI score0.72671EPSS
SaveExploits12
Kitploit
Kitploit
•added 2026/10/13 4:34 a.m.•18 views

CVE-2026-50338

CVE-2026-50338 Spring Cloud Azure B2C Resource Server Cross-Issuer Authentication Bypass Description AadB2cResourceServerAutoConfiguration in spring-cloud-azure-autoconfigure builds a JwtDecoder that trusts six AAD-line issuers login.microsoftonline.com, sts.windows.net, sts.chinacloudapi.cn, v1...

8.2CVSS8AI score0.00517EPSS
SaveExploits3References2
Kitploit
Kitploit
•added 2026/10/13 1:32 a.m.•22 views

CVE-2023-47564

CVE-2023-47564 https://www.qnap.com/en/security-advisory/qsa-24-03 https://vulners.com/cve/CVE-2023-47564 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N 8.1 "An incorrect permission assignment for critical resource vulnerability has been reported to affect Qsync Central. If exploited, the...

8.1CVSS7.3AI score0.01014EPSS
SaveExploits0
Kitploit
Kitploit
•added 2026/10/13 12:50 a.m.•21 views

-CVE-2024-39614

Proof of Concept PoC for Denial-of-Service Vulnerability in Django This repository contains a Proof of Concept PoC script demonstrating a denial-of-service DoS vulnerability in Django versions 5.0 before 5.0.7 and 4.2 before 4.2.14. The vulnerability lies in the getsupportedlanguagevariant...

7.5CVSS7.1AI score0.28637EPSS
SaveExploits0
Kitploit
Kitploit
•added 2026/10/13 12:33 a.m.•16 views

CVE-2019-9849

CVE-2019-9849: Remote bullet graphics retrieved in “stealth mode” in LibreOffice LibreOffice has a 'stealth mode' in which only documents from locations deemed 'trusted' are allowed to retrieve remote resources. This mode is not the default mode, but can be enabled by users who want to disable...

4.3CVSS7.2AI score0.0265EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/10/13 12:31 a.m.•6 views

EUVD-2026-98089

IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption...

7.5CVSS5.9AI score0.0032EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/10/13 12:31 a.m.•8 views

EUVD-2026-97975

IBM Maximo AI Service 9.1.0, and 9.2.0 could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption...

7.5CVSS5.9AI score0.00313EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•3 views

PT-2026-113531

CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition. Exploitation of this issue...

7.5CVSS5.8AI score0.0051EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•4 views

PT-2026-111742

A user with query access to an Azure Monitor data source can use its resource proxy to call Azure Resource Manager APIs beyond those Grafana needs, with the data source's Azure identity unintended proxy. The impact is bounded by the Azure role granted to that identity...

6.3CVSS5.8AI score0.00267EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•3 views

PT-2026-111743

A Git server that Grafana's Git Sync provisioning is configured to use can exhaust Grafana's memory by returning oversized or highly compressed responses uncontrolled resource consumption. Exploitation requires an administrator to have configured Git Sync with that server...

5.3CVSS5.8AI score0.00372EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•3 views

PT-2026-112713

Name of the Vulnerable Software and Affected Versions Windows Print Spooler Components affected versions not specified Description An authorized attacker can locally disclose information due to the use of an uninitialized resource within the Windows Print Spooler Components. Recommendations At th...

5.5CVSS5.8AI score0.00306EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•3 views

PT-2026-113523

CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition. Exploitation of this issue...

7.5CVSS5.8AI score0.0051EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•4 views

PT-2026-112715

Name of the Vulnerable Software and Affected Versions Windows Routing and Remote Access Service RRAS affected versions not specified Description An unauthorized attacker can disclose information over a network due to the use of an uninitialized resource within the Windows Routing and Remote Acces...

7.5CVSS5.8AI score0.01049EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•4 views

PT-2026-112268

Name of the Vulnerable Software and Affected Versions OpenSSH for Windows affected versions not specified Description An issue exists where resources are allocated without limits or throttling, which allows an unauthorized attacker to cause a denial of service over a network through resource...

7.5CVSS5.7AI score0.01105EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•0 views

Microsoft ASP.NET: CVE-2026-96236: ASP.NET Core Denial of Service Vulnerability

Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network...

7.5CVSS5.8AI score0.01056EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•2 views

PT-2026-113050

Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network...

7.5CVSS5.8AI score0.01056EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•3 views

PT-2026-113449

Allocation of resources without limits or throttling in SQL Server allows an authorized attacker to deny service over a network...

5.3CVSS5.8AI score0.00454EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•0 views

Microsoft .NET Framework: CVE-2026-96960: .NET Denial of Service Vulnerability

Asymmetric resource consumption amplification in .NET allows an unauthorized attacker to deny service over a network...

7.5CVSS5.9AI score0.01056EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•3 views

PT-2026-113522

CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition. Exploitation of this issue...

7.5CVSS5.8AI score0.00636EPSS
SaveExploits0References2
Rows per page
Query Builder