bouncer-overflow

PgBouncer 崩溃 PoC 该仓库包含一个针对 PgBouncer 崩溃的本地概念验证，该崩溃由易受攻击的 PgBouncer 版本中的整数溢出引起。其中包含的 Docker 环境会构建 PgBouncer 1.25.1，启动 PostgreSQL 后端，启用 SCRAM-SHA-256 身份验证，并针对 PgBouncer 运行 poc.py。 此内容仅用于受控实验室测试。请勿针对你不拥有或未经明确授权测试的系统运行。 目录 poc.py - Python 概念验证客户端。 docker-compose.yml - 本地 PostgreSQL、PgBouncer 和 PoC...

CVE-2026-0265-check

CVE-2026-0265 脆弱性評価ツール いかなるセッションも認証せず、状態を変更することなく、Palo Alto Networks PAN-OS GlobalProtectポータルがCVE-2026-0265に対して脆弱かどうかを安全に判定します。 説明 CVE-2026-0265 は、認証プロファイルがCloud Authentication Service CAS を使用している場合にトリガーされる、PAN-OS および Panorama に影響を与えるリモート認証バイパスです。脆弱な panauthverify 関数 libpanmp.so 内 は、攻撃者が制御する alg...

Axis1.4-CVE-2019-0227

Axis1.4 CVE-2019-0227 リモートコマンド実行脆弱性利用ツール 📖 脆弱性の説明 Apache Axis1.4 には、リモートコマンド実行脆弱性 CVE-2019-0227 が存在します。enableRemoteAdmin プロパティが true に設定されている場合、攻撃者は AdminService インターフェースを介して悪意のあるサービスをデプロイし、ターゲットサーバー上で任意のシステムコマンドを実行できます。 影響を受けるバージョン : Apache Axis ≤ 1.4 トリガー条件 : enableRemoteAdmin が true に設定されていること...

Mitel MiCollab - Information Disclosure & Denial of Service

Mitel MiCollab before 9.4 SP1 FP1 and MiVoice Business Express through 8.1 contain a vulnerability in the TP-240 component caused by improper handling, letting remote attackers obtain sensitive information and cause denial of service, exploit requires remote access. id: CVE-2022-26143 info: name:...

Aimhubio Aim Server 3.19.3 - Arbitrary File Overwrite

A vulnerability in the backuprun function in aimhubio/aim version 3.19.3 allows remote attackers to overwrite any file on the host server and exfiltrate arbitrary data. The vulnerability arises due to improper handling of the runhash and repo.path parameters, which can be manipulated to create an...

Cisco Unified IP Conference Station 7937G - Denial-of-Service

Cisco Unified IP Conference Station 7937G 1-4-4-0 through 1-4-5-7 allows attackers to restart the device remotely via specially crafted packets that can cause a denial-of-service condition. Note: We cannot prove this vulnerability exists. Out of an abundance of caution, this CVE is being assigned...

GeoServer - XML External Entity Injection

GeoServer 2.26.0 to 2.26.2 and 2.25.6 contains an XML External Entity XXE injection caused by insufficient sanitization of XML input in /geoserver/wms GetMap operation, letting attackers disclose files or cause DoS, exploit requires crafted XML input. id: CVE-2025-58360 info: name: GeoServer - XM...

XiongMai uc-httpd 1.0.0 - Buffer Overflow

Buffer overflow in XiongMai uc-httpd 1.0.0 has unspecified impact and attack vectors, a different vulnerability than CVE-2017-16725. id: CVE-2018-10088 info: name: XiongMai uc-httpd 1.0.0 - Buffer Overflow author: 0xAkoko severity: critical description: | Buffer overflow in XiongMai uc-httpd 1.0....

GeoServer OGC Filter - SQL Injection

GeoServer is an open source software server written in Java that allows users to share and edit geospatial data. GeoServer includes support for the OGC Filter expression language and the OGC Common Query Language CQL as part of the Web Feature Service WFS and Web Map Service WMS protocols. CQL is...

Apache Struts XWork - XML External Entity Injection

Apache Struts 2.0.0 2.2.1 and 2.2.1 = versions = 6.1.0 contain an XML external entity injection caused by missing XML validation, letting attackers potentially disclose files or cause denial of service, exploit requires crafted XML input id: CVE-2025-68493 info: name: Apache Struts XWork - XML...

Kentico Xperience 13 CMS - Staging Service Authentication Bypass (WT-2025-0011)

Before Kentico Xperience 13 Hotfix 173, this vulnerability can be exploited with any username provided. For Hotfix = 173 and = 173 and 178, this vulnerability can be exploited only if you provide a valid Staging Service username default: admin impact: | Unauthenticated attackers can bypass...

Grafana - Improper Access Control

Grafana 2.x through 6.x before 6.3.4 is susceptible to improper access control. An attacker can delete and create arbitrary snapshots, leading to denial of service. id: CVE-2019-15043 info: name: Grafana - Improper Access Control author: Joshua Rogers severity: high description: | Grafana 2.x...

Adobe ColdFusion - RDS Arbitrary File Write

ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability that could lead to arbitrary code execution in the context of the current user. The RDS FILEIO WRITE operation allows unauthenticated...

Dell EMC Avamar and Integrated Data Protection Appliance Installation Manager - Invalid Access Control

Avamar Installation Manager in Dell EMC Avamar Server 7.3.1, 7.4.1, and 7.5.0, and Dell EMC Integrated Data Protection Appliance 2.0 and 2.1, is affected by a missing access control check vulnerability which could potentially allow a remote unauthenticated attacker to read or change the Local...

Grafana Unauthenticated Snapshot Creation

Grafana 6.7.3 through 7.4.1 snapshot functionality can allow an unauthenticated remote attacker to trigger a Denial of Service via a remote API call if a commonly used configuration is set. id: CVE-2021-27358 info: name: Grafana Unauthenticated Snapshot Creation author: pdteam,bing0o severity: hi...

CVE-2026-49975

CVE-2026-49975 HTTP/2 Bomb ★ CVE-2026-49975 HTTP/2 Bomb PoC ★ 概述 CVE-2026-49975 是 Apache HTTP Server 中的一个拒绝服务（DoS）漏洞。 该漏洞出现在 HTTP/2 请求处理路径中，多个 cookie 头字段可以在不经过 LimitRequestFields 正确计数的情况下合并。 通过发送一个小的 HPACK 编码的 HTTP/2 请求，该请求扩展成多个 cookie 头字段，攻击者可以强制服务器在 Cookie 头合并过程中反复分配内存。 攻击者随后可利用 HTTP/2...

cve-2025-29384

CVE-2025-29384 概念验证漏洞利用 概述 此仓库包含一个针对 CVE-2025-29384 的高级概念验证 PoC 漏洞利用，该漏洞是 Tenda AC9 路由器运行固件版本 V15.03.05.14multi 时发现的一个严重 基于栈的缓冲区溢出 漏洞。此漏洞允许 未经认证的远程攻击者 使路由器的 Web 服务器崩溃（拒绝服务，DoS ），并可能执行任意代码（远程代码执行，RCE ）。 本项目旨在 演示漏洞利用开发技能 ，为网络安全社区做出贡献，并为学术评估（例如网络安全奖学金）提供教育展示。 此仓库包含一个针对 CVE-2025-29384 的高级概念验证 PoC...

CVE-2021-29441

CVE-2021-29441 - Nacos 身份验证绕过 CVE-2021-29441 是一个影响 Nacos 1.4.1 之前版本的严重身份验证绕过漏洞。Nacos 是云原生环境中广泛使用的动态服务发现、配置管理和服务治理平台。该漏洞允许未认证的攻击者绕过身份验证控制，并对易受攻击的 Nacos 服务器执行管理操作。 漏洞详情...

cve-2026-24688

CVE-2026-24688 - pypdf - Circular Reference DoS Vulnerability This repo includes proof of concept code for triggering CVE-2026-24688. Summary Critical Denial of Service vulnerability in pypdf's outline bookmark parsing logic. When processing a PDF with circular outline references, the parser ente...

CVE-2026-9490

CVE ID: CVE-2026-9490 研究者: Vo Duc Thang ugvxb 致谢: https://community.acer.com/en/kb/articles/19668 1. 执行摘要 在 Acer Care Center 服务（ACCSvc.exe）中发现了一个严重的安全漏洞。该漏洞允许任何经过身份验证的本地用户使系统服务崩溃（拒绝服务），并可能通过一个安全保护薄弱的命名管道接口提升权限。 该服务以 SYSTEM 权限（LocalSystem）运行，暴露出一个命名管道，其访问控制过于宽松，向所有经过身份验证的用户授予了读、写和执行权限。 2. 漏洞详情 2.1...