CVE-2014-0094-test-program-for-struts1

Informazioni sulla gestione di CVE-2014-0094 in Struts1 Introduzione Riassumo l'impatto di CVE-2014-0094 su Struts1. Salvo diversa indicazione, ogni versione è stata verificata con java 1.7.002, Struts 1.3.10, apache-tomcat-6.0.39 e FreeBSD 8.2. In ogni caso, non garantisco il contenuto dei...

Log4j_dos_CVE-2021-45105

Log4j2 DOS CVE-2021-45105 PoC root@kitploit: $$::-$::-$$::-$ Versioni Affette: tutte le versioni da 2.0-beta9 a 2.16.0 Questa applicazione è basata su un'applicazione web Spring Boot vulnerabile a CVE-2021-45105 Utilizza Log4j 2.16.0 Esecuzione dell'applicazione Esegui: root@kitploit: Importa il...

CVE-2023-37073

CVE-2023-37073 Telnet-Standardanmeldedaten können zu Informationsoffenlegung und Denial-of-Service-Angriffen DoS führen. Schritte zur Reproduktion Dies betrifft den AP AR-5310 root@kitploit: Telnet 192.168.1.1 username:user password:user Then Boom ... You logged in Informationsoffenlegung durch...

CVE-2022-44311

Descrizione per CVE-2022-44311 È stato scoperto che html2xhtml v1.3 contiene una lettura fuori dai limiti nella funzione static void elmclosetreenodet nodo in procesador.c. Questa vulnerabilità consente agli aggressori di accedere a file sensibili o causare un Denial of Service DoS tramite un fil...

CVE-2022-41220

Beschreibung von CVE-2022-41220 md2roff 1.9 leidet unter einem stack-basierten Pufferüberlauf, der über eine Markdown-Datei mit einer großen Anzahl aufeinanderfolgender zu verarbeitender Zeichen ausgelöst wird. Reproduktion Um die Schwachstelle zu reproduzieren, laden Sie eine verwundbare Version...

CVE-2022-34556

Beschreibung von CVE-2022-34556 In PicoC v3.2.2 wurde eine NULL-Pointer-Dereferenzierung in variable.c entdeckt. Alle Projekte oder Bibliotheken, die Picoc verwenden, sind ebenfalls von diesem Problem betroffen. Ein Beispiel dafür wäre picoc-js. Einrichtung unserer Umgebung Um die...

HTTP3ONSTEROIDS

Indice Descrizione della vulnerabilità Analisi del codice sorgente Configurazione del laboratorio Identificazione del problema Riferimenti Descrizione della vulnerabilità L'implementazione HTTP/3 di HAProxy non riesce a bloccare un nome di campo header HTTP malformato , e quando implementato...

KINGSOFT-WPS-Office-LPE

Avviso JVN https://jvn.jp/en/vu/JVNVU90673830/ I seguenti numeri CVE sono stati assegnati: CVE-2022-25943 KINGSOFT WPS Office LPE WPS Office è una suite per ufficio per Microsoft Windows, macOS, Linux, iOS, Android e HarmonyOS sviluppata dallo sviluppatore di software cinese Kingsoft, con sede a...

CVE-2025-27237

CVE-2025-27237 Vulnerabilidade de escalonamento local de privilégios no Zabbix Agent/Agent2 para Windows via sequestro de arquivo de configuração OpenSSL. Visão Geral Campo| Valor ---|--- ID CVE| CVE-2025-27237 CVSS v4.0| 7.3 ALTO CWE| CWE-427: Elemento de Caminho de Pesquisa Não Controlado Tipo|...

CVE-2026-38350

A flaw was found in FFmpeg. An integer overflow vulnerability in the targetswsfuzzer function allows a remote attacker to cause a Denial of Service DoS by supplying a specially crafted input. This can lead to the application becoming unresponsive or crashing, impacting its availability. Mitigatio...

CVE-2026-38348

A flaw was found in FFmpeg, specifically within the libswscale/utils.c component. An integer overflow vulnerability allows a remote attacker to cause a Denial of Service DoS by supplying a specially crafted image file. This could lead to the application becoming unresponsive or crashing. Mitigati...

CVE-2026-38347

A flaw was found in FFmpeg. A heap overflow vulnerability exists in the ffswsalphablendaway function. This flaw allows attackers to cause a Denial of Service DoS by providing a specially crafted input. Successful exploitation could lead to the application becoming unresponsive or crashing...

CVE-2026-64833

A flaw was found in FFmpeg, specifically within the S/PDIF muxer. A remote attacker can exploit an out-of-bounds read vulnerability by providing a specially crafted DTS-HD audio stream during S/PDIF re-muxing. This allows the attacker to read memory beyond the intended buffer boundaries,...

CVE-2026-38343

A flaw was found in FFmpeg. An integer overflow in the libavfilter/vfscale.c component allows attackers to cause a Denial of Service DoS by supplying a specially crafted video file. This can lead to the application becoming unresponsive or crashing. Mitigation No mitigation is currently available...

CVE-2026-38349

A flaw was found in FFmpeg. An integer overflow vulnerability in the hScale16To19c function allows a remote attacker to cause a Denial of Service DoS by supplying a specially crafted image file. This can lead to the application becoming unresponsive or crashing, preventing legitimate users from...

CVE-2026-38346

A flaw was found in FFmpeg. An integer overflow vulnerability in the yuv2planeX8c function allows a remote attacker to cause a Denial of Service DoS by supplying a specially crafted video file. This can lead to the application becoming unresponsive or crashing, impacting system availability...

CVE-2026-38344

A flaw was found in FFmpeg. This vulnerability involves a NULL pointer dereference within the getminbuffersize function when processing specially crafted video files. An attacker could exploit this by providing a malicious video file, leading to a Denial of Service DoS. A Denial of Service attack...

androguard

Androguard Do you think your phone has been pwned ? please check IsMyPhonePwned New tool: Goauld Dynamic injection tool for Linux/Android See the new version of Androguard: https://github.com/androguard/androguard/tree/ng Installation Quick installation: root@kitploit: pip install androguard...

-CVE-2021-44790

CVE-2021-44790 Descrizione di CVE-2021-44790 CVE-2021-44790 descrive un bug di sicurezza a livello di sistema presente in modlua di Apache HTTP Server, in particolare nella versione 2.4.51 e precedenti. La vulnerabilità viene attivata quando la funzione r:parsebody gestisce in modo improprio le...

CVE-2021-20294-POC

CVE-2021-20294-POC Jan 21 2023, Altin tin-z, github.com/tin-z Poc herunterladen und kompilieren root@kitploit: wget https://ftp.gnu.org/gnu/binutils/binutils-2.35.tar.gz && tar -xzvf binutils-2.35.tar.gz cd binutils-2.35 && ./configure && make && cd .. gcc -shared -fPIC poc.c -o poc.so...