cve-2026-42945

CVE-2026-42945 — Desbordamiento de montón en la reescritura de NGINX: Análisis, DoS y puerto RCE acreditado Investigación de seguridad sobre CVE-2026-42945 CVSS 4.0 9.2 CRÍTICO: un desbordamiento de búfer en el montón en el motor de scripts de NGINX donde una rewrite con argumentos en la...

CVE-2026-11499

🚨 CVE-2026-11499 Desbordamiento de búfer basado en pila en routers Tenda HG7 / HG9 / HG10 📖 Resumen CVE-2026-11499 es una vulnerabilidad de desbordamiento de búfer basado en pila reportada que afecta a varios modelos de routers Tenda , incluyendo: HG7 HG9 HG10 Una explotación exitosa podría...

SOC-L1-OSINT-Investigation-MikroTik-CVE-2018-1156

Investigación de Amenazas SOC L1: Múltiples Servicios Expuestos en MikroTik RouterOS Analista: Jonatan Alexander Guerrero Gomez | Rol Objetivo: SOC L1 / Analista de Ciberseguridad Jr. Estado: Investigación Cerrada | Severidad: Alta Resumen Ejecutivo Ejercicio proactivo de caza de amenazas que...

CVE-2017-11610

LAB 3- CVE-2017-11610 I. SYSTEM ANALYSIS Identifying Attack Surface from the Docker Environment Starting with what is running in the environment. I list all active containers: root@kitploit: docker ps-a The victim exposes a single port:9001. Port 9001 is not a standard web app. Looking up the por...

CVE-2022-21907

CVE-2022-21907 - HTTP Protocol Stack Remote Code Execution Vulnerability ⚠️ For educational and authorized security research purposes only Original Exploit Authors Very grateful to the original PoC author NU11SECURITY and michelep Description: HTTP Protocol Stack Remote Code Execution...

CVE-2026-20182

CVE-2026-20182 — Bypass de Autenticación en Cisco Catalyst SD-WAN Controller / Manager Un exploit de prueba de concepto para CVE-2026-20182 , un bypass de autenticación crítico CVSS 10.0 en el servicio vdaemon DTLS UDP/12346 en Cisco Catalyst SD-WAN Controller vSmart y Manager vManage. Divulgado:...

CVE-2026-42154

CVE-2026-42154 CVE-2026-42154 — Prometheus Remote Read Snappy DoS...

iperf3: iperf3 server accepts unbounded peer-controlled JSON parameters enabling remote denial of service via resource exhaustion

A flaw was found in iperf3. A remote attacker can exploit this vulnerability by sending crafted control-channel JSON with oversized numeric parameters, such as parallel and len, which are not properly validated by the server. This improper input validation can lead to excessive stream and thread...

CVE-2026-8461

🎬 CVE-2026-8461 — PixelSmash Escritura Fuera de Límites Crítica en el Decodificador MagicYUV de FFmpeg Un archivo de video malicioso puede convertirse en un arma. PixelSmash es una vulnerabilidad crítica de corrupción de memoria que afecta al decodificador MagicYUV de FFmpeg, que permite a un...

kernel: net: atm: fix crash due to unvalidated vcc pointer in sigd_send()

A flaw was found in the Linux kernel's Asynchronous Transfer Mode ATM networking component. A local attacker, by acting as a malicious signaling daemon, could send a specially crafted message containing an unvalidated pointer. This unvalidated pointer would be directly used by the kernel, leading...

nextjs-security-update

nextjs-security-update There are people building OSS tools to exploit the new Next.js vulnerabilities. This is a tool to fight back - makes it dumb easy to upgrade all your Next.js apps across all your GitHub accounts. Uses the official Vercel fix tool under the hood. What happened Dec 11, 2025:...

EVIL-CVE-2021-23017-Update-2025

NGINX服务器（版本0.6.18–1.20.0）中的一个漏洞。这些脚本旨在通过发送恶意DNS响应来造成拒绝服务（DoS），并增强了绕过防火墙的能力。这是来自M507/CVE-2021-23017-PoC的原始PoC的改进版本。 警告 ：仅在获得系统所有者明确书面许可的情况下使用。未经授权的测试是非法的。 要求 环境 ：Linux（例如Kali Linux，通过Termux/虚拟化设置）。 依赖项 ： root@kitploit: sudo apt-get update sudo apt-get install python3-scapy dnsmasq pip3 install sca...

PrintNightmare

TryHackMe | PrintNightmare PrintNightmare Learn about the vulnerability known as PrintNightmare CVE-2021-1675 and CVE-2021-34527 Tarea 6 Detección: Registros de eventos de Windows Visor de eventos Registros de aplicaciones y servicios Microsoft Windows PrintService Admin...

KSMBDrain

Overview Proof-of-Concept exploit for KSMBDrain CVE-2025-38501. It can remotely exhaust the KSMBD server's connection limit. Details A remote attacker can exhaust a KSMBD server’s maximum connection limit by performing a TCP 3-way handshake and then not responding to further packets. By default,...

FreeRDP: FreeRDP: Denial of Service via crafted WindowIcon async message

A flaw was found in FreeRDP. A malicious or compromised Remote Desktop Protocol RDP server can exploit a heap use-after-free vulnerability when a client connects with asynchronous updates enabled. By sending a specially crafted Window Alternate Secondary Order message, the server can trigger memo...

Important: Red Hat Security Advisory: freerdp security update

An update for freerdp is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring...

FreeRDP: FreeRDP: Remote code execution or denial of service via audio input integer overflow

A flaw was found in FreeRDP, an open-source implementation of the Remote Desktop Protocol RDP. This vulnerability, an integer overflow in the audio input redirection channel, allows a remote attacker to supply a malicious FramesPerPacket value. This can lead to a heap-based buffer overflow,...

postgresql: PostgreSQL: Denial of Service via uncontrolled recursion in SSL/GSS negotiation

A flaw was found in PostgreSQL. Uncontrolled recursion during SSL Secure Sockets Layer and GSS Generic Security Service negotiation allows an attacker to achieve a sustained denial of service. This can be exploited by an attacker with access to a PostgreSQL AFUNIX socket. If SSL and GSS are both...

Important: Red Hat Security Advisory: postgresql:12 security update

An update for the postgresql:12 module is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A...

CVE-2026-82722

Allocation of Resources Without Limits or Throttling vulnerability in ash-project ashadmin lets any client that can reach the admin LiveView exhaust the BEAM atom table and crash the entire node. Two LiveView event handlers interned atoms from unvalidated client input: AshAdmin.PageLive's setacto...