CVE-2020-2555

EXP test...

CVE-2026-18393

FFmpeg is affected by a heap buffer overflow in the tdsc_load_cursor() function, triggered when processing crafted TDSC cursor data (via cur_fmt_mono cursor). A remote attacker adjacent to the network can exploit this by supplying a specially crafted video file , requiring user interaction and hi...

EUVD-2026-67655

A flaw was found in FFmpeg. The tdscloadcursor function writes beyond the bounds of a heap-allocated buffer when processing crafted TDSC cursor data. A remote attacker could exploit this by supplying a specially crafted video file, potentially leading to a denial of service or arbitrary code...

CVE-2004-0789-DDOS

root@kitploit: sudo python3 exploit.py Enter the DNS server IP address: IP Enter the number of requests to send: NUMBER...

Wallbreak

Wallbreak Scarica APK Questa app dimostra due vulnerabilità di negazione del servizio permanente ad alta gravità in WallpaperManagerService di Android che ho scoperto: CVE-2021-39670 e CVE-2021-39690. Dopo aver eseguito uno dei due exploit, il dispositivo continuerà a crashare e riavviarsi...

CVE-2023-36168

CVE-2023-36168 Un problema in AVG AVG Anti-Spyware v.7.5 consente a un attaccante di eseguire codice arbitrario tramite uno script appositamente predisposto verso il componente guard.exe Titolo dell'exploit: AVG Anti Spyware 7.5 - Unquoted Service Path Data: 05/08/2023 Autore dell'exploit: Idan...

CVE-2026-38345

A flaw was found in FFmpeg. A division-by-zero vulnerability in the ffswsinitsinglecontext function allows a remote attacker to cause a Denial of Service DoS by providing a specially crafted input. This can lead to the application becoming unresponsive or crashing. Mitigation No mitigation is...

CVE-2026-75145

A flaw was found in FFmpeg. An incorrect integer narrowing conversion in the AV1 RTP packetizer can lead to an out-of-bounds memory access. This occurs when processing specially crafted AV1 RTP Real-time Transport Protocol packets, where a large OBU Operating Block Unit size is incorrectly handle...

CVE-2026-18393

A flaw was found in FFmpeg. The tdscloadcursor function writes beyond the bounds of a heap-allocated buffer when processing crafted TDSC cursor data. A remote attacker could exploit this by supplying a specially crafted video file, potentially leading to a denial of service or arbitrary code...

CVE-2026-75144

A flaw was found in FFmpeg. Attackers can trigger memory corruption in the VC-2/Dirac RTP packetizer by supplying a specially crafted Dirac data unit. This heap buffer overflow occurs because the packetizer copies input data into a fixed-size buffer without proper size validation. This can lead t...

CVE-2026-75147

A flaw was found in FFmpeg's AV1 Real-time Transport Protocol RTP packetizer. A local attacker could entice a user to process a crafted AV1 input packet. This crafted packet could cause an out-of-bounds read, potentially leading to information disclosure or a denial of service DoS condition...

CVE-2026-75146

A flaw was found in FFmpeg. A malicious or misconfigured DASH Dynamic Adaptive Streaming over HTTP server can exploit an out-of-bounds read vulnerability in the DASH demuxer. This occurs when a live DASH manifest is refreshed with a startNumber that is lower than the previous value, causing a...

CVE-2026-75142

A flaw was found in FFmpeg. A stack buffer overflow exists in the MPEG-PS muxer. A local attacker or a user processing a specially crafted file with an excessive number of streams could trigger this flaw, leading to a buffer overflow. This could potentially result in denial of service or arbitrar...

CVE-2020-0001

CVE-2020-0001 POC per eseguire un componente di sistema in un processo di un'app non attendibile Blog https://zachinio.com/blogs/cve-2020-0001 Come usare Esegui l'app, assicurati che il processo "com.android.settings" non esista e fai clic sul pulsante "avvia servizio". Avvia l'app delle...

CVE-2014-0094-test-program-for-struts1

Informazioni sulla gestione di CVE-2014-0094 in Struts1 Introduzione Riassumo l'impatto di CVE-2014-0094 su Struts1. Salvo diversa indicazione, ogni versione è stata verificata con java 1.7.002, Struts 1.3.10, apache-tomcat-6.0.39 e FreeBSD 8.2. In ogni caso, non garantisco il contenuto dei...

Log4j_dos_CVE-2021-45105

Log4j2 DOS CVE-2021-45105 PoC root@kitploit: $$::-$::-$$::-$ Versioni Affette: tutte le versioni da 2.0-beta9 a 2.16.0 Questa applicazione è basata su un'applicazione web Spring Boot vulnerabile a CVE-2021-45105 Utilizza Log4j 2.16.0 Esecuzione dell'applicazione Esegui: root@kitploit: Importa il...

CVE-2023-37073

CVE-2023-37073 Telnet-Standardanmeldedaten können zu Informationsoffenlegung und Denial-of-Service-Angriffen DoS führen. Schritte zur Reproduktion Dies betrifft den AP AR-5310 root@kitploit: Telnet 192.168.1.1 username:user password:user Then Boom ... You logged in Informationsoffenlegung durch...

CVE-2022-44311

Descrizione per CVE-2022-44311 È stato scoperto che html2xhtml v1.3 contiene una lettura fuori dai limiti nella funzione static void elmclosetreenodet nodo in procesador.c. Questa vulnerabilità consente agli aggressori di accedere a file sensibili o causare un Denial of Service DoS tramite un fil...

CVE-2022-41220

Beschreibung von CVE-2022-41220 md2roff 1.9 leidet unter einem stack-basierten Pufferüberlauf, der über eine Markdown-Datei mit einer großen Anzahl aufeinanderfolgender zu verarbeitender Zeichen ausgelöst wird. Reproduktion Um die Schwachstelle zu reproduzieren, laden Sie eine verwundbare Version...

CVE-2022-34556

Beschreibung von CVE-2022-34556 In PicoC v3.2.2 wurde eine NULL-Pointer-Dereferenzierung in variable.c entdeckt. Alle Projekte oder Bibliotheken, die Picoc verwenden, sind ebenfalls von diesem Problem betroffen. Ein Beispiel dafür wäre picoc-js. Einrichtung unserer Umgebung Um die...