CVE-2018-8062

CVE-2018-8062 XSS persistente sul router Comtrend AR-5387un Spiegazione dello sfruttamento: Per sfruttare questa vulnerabilità, una volta effettuato l'accesso al router, è necessario creare un servizio WAN Fare clic su "Advanced Setup", "WAN Service". "Add button", "Next" Quindi inserire il paylo...

CVE-2015-4870

CVE-2015-4870 DoS MySQL nella funzione Procedure Analyse – CVE-2015-4870 Articolo: https://osandamalith.wordpress.com/2016/05/29/mysql-dos-in-the-procedure-analyse-function-cve-2015-4870/ Video: https://www.youtube.com/watch?v=zE-TsQVn9oI...

moc3ingbird

Zukünftige Arbeiten Zukünftige Arbeiten in diesem Bereich werden unter der OrganisationSakura Motion stattfinden, beginnend mit unserem Core-Rewrite: https://github.com/SakuraMotion/PurismCore. MOC3ingbird DoS 日本語版：READMEJA.md Dieses Repository enthält ein einfaches Live2D-Modell, das jede...

CVE-2016-3627

CVE-2016-3627 Uso: xmllint --valid --recover CVE-2016-3627.xml root@kitploit: xxd CVE-2016-3627.xml 00000000: 3c21 444f 4354 5950 455b 3c21 454e 5449 0... S="&Y 00000030: 4e3b N;...

CVE-2022-40363

CVE-2022-40363 Un overflow del buffer nel componente nfcdeviceloadmifareuldata di Flipper Devices Inc., Flipper Zero precedente alla v0.65.2, consente agli attaccanti di causare un Denial of Service DoS tramite un file NFC appositamente predisposto. autenticazione| complessità| vettore ---|---|--...

EUVD-2026-67721

A flaw was found in the file-iff IFF/ILBM plugin in GIMP. When processing a specially crafted IFF/ILBM image file, the plugin does not properly validate the HAM row size and improperly handles cases where the number of color planes nPlanes is zero. This causes a row size mismatch that bypasses...

CVE-2026-82324 Gimp: heap out-of-bounds reads in iff/ilbm loader from ham row size mismatch and nplanes=0

A flaw was found in the file-iff IFF/ILBM plugin in GIMP. When processing a specially crafted IFF/ILBM image file, the plugin does not properly validate the HAM row size and improperly handles cases where the number of color planes nPlanes is zero. This causes a row size mismatch that bypasses...

CVE-2026-82324

CVE-2026-82324 affects the file-iff (IFF/ILBM) plugin in GIMP . When processing a specially crafted IFF/ILBM image file, the plugin fails to properly validate the HAM row size and mishandles cases where the number of color planes (nPlanes ) is zero. This causes a row size mismatch that bypasses m...

CVE-2026-82324

A flaw was found in the file-iff IFF/ILBM plugin in GIMP. When processing a specially crafted IFF/ILBM image file, the plugin does not properly validate the HAM row size and improperly handles cases where the number of color planes nPlanes is zero. This causes a row size mismatch that bypasses...

CVE-2018-16706

CVE-2018-16706 Oder wie ich meinen Fernseher ausschalte $ nmap 192.168.1.55 -p 9080 PORT STATE SERVICE 9080/tcp open glrpc Nmap done: 1 IP address 1 host up scanned in 0.05 seconds CVE-Details https://www.cvedetails.com/cve/CVE-2018-16706/...

CVE-2026-13761

Pega Platform versions 7.1.0 through 25.1.2 are affected by an improper validation of inputs used for loop conditions , which can cause excessive looping and potentially lead to denial of service or other consequences. The vulnerability is exploitable over the network with low complexity and no p...

EUVD-2026-67718

Pega Platform versions 7.1.0 through 25.1.2 are affected by an improper validation of inputs that are used for loop conditions, potentially leading to a denial of service or other consequences because of excessive looping...

CVE-2026-13761 Pega Platform versions 7.1.0 through 25.1.2 are affected by an improper validation of inputs that are used for loop conditions, potentially leading to a denial of service or other consequences because of excessive looping.

Pega Platform versions 7.1.0 through 25.1.2 are affected by an improper validation of inputs that are used for loop conditions, potentially leading to a denial of service or other consequences because of excessive looping...

intel471-threat-hunting-cve-2023-46604

Intel 471 थ्रेट हंटिंग वर्कशॉप – CVE-2023-46604 जांच अवलोकन यह रिपॉजिटरी Intel 471 के इंटेलिजेंस-ड्रिवन थ्रेट हंटिंग वर्कशॉप के साथ मेरे पहले व्यावहारिक अनुभव का दस्तावेजीकरण करती है, जो CVE-2023-46604 पर केंद्रित है। इस व्यावहारिक वर्कशॉप के माध्यम से, मैंने जांच की कि कैसे हमलावरों ने एक...

CVE-2022-0918

CVE-2022-0918 Pagina CVE di Red Hat: https://access.redhat.com/security/cve/cve-2022-0918 Issue GitHub con patch collegate: https://github.com/389ds/389-ds-base/issues/5242 PoC L'applicazione PoC accetta un singolo IP, sia IPv4 che IPv6 funzioneranno. Di default invia il messaggio alla porta 389;...

CVE-2020-0668

CVE-2020-0668 Implementazione in PowerShell che sfrutta printconfig.dll per l'elevazione dei privilegi Il evil dll può essere definito personalmente; la mia DLL esegue il file c:\programdata\setup.bat Riferimenti: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0668...

bigdecimal-segfault-fix

h1. BigDecimal Segfault Fix Es gibt einen Segfault-Fehler in Rubys BigDecimal-Bibliothek, der von Benutzern durch die Angabe bekanntermaßen ungültiger Werte ausgelöst werden kann. Wenn Sie testen möchten, ob Ihre Anwendung sicher ist, führen Sie +example.rb+ aus. Dieses Skript sollte normal beend...

CVE-2021-35492

Informazioni sull'exploit Titolo dell'exploit: Wowza Streaming Engine 4.8.11+5 - Negazione del servizio CVE: CVE-2021-35492 Data: 2021-10-06 Autore dell'exploit: N4nj0 Link del software: https://www.wowza.com/products/streaming-engine Versione: 4.8.11+5 Testato su: Wowza Streaming Engine = 4.8.11...

EUVD-2026-67717

CodeChecker's massStoreRun processing path performs one-shot decompression of attacker-controlled, Base64-encoded zlib data without enforcing a maximum decompressed size. An authenticated user with permission to store analysis runs can submit a highly compressed payload that expands to a...

CVE-2026-58107

CodeChecker (Ericsson) is affected by an authenticated remote denial of service in the massStoreRun processing path. The vulnerability arises from one-shot decompression of attacker-controlled, Base64-encoded zlib data without enforcing a maximum decompressed size. An authenticated user with perm...