641073 matches found
CVE-2026-80701
A flaw was found in the Linux kernel's drm/vmwgfx component. A local attacker with DRM master privileges could exploit this by providing oversized cursor dimensions through the DRMIOCTLMODECURSOR2 interface. This improper input validation can lead to a kernel crash, resulting in a Denial of Servi...
CVE-2026-80660
A flaw was found in the Linux kernel's hwmon occ component. This vulnerability occurs when occactivefalse or occshutdown attempt to unregister sysfs devices while holding the occ-lock. During this process, sysfs callbacks can re-enter the OCC update path and try to acquire the occ-lock again,...
CVE-2026-80627
A flaw was found in the Linux kernel, specifically within the MIPS architecture's memory management component. The maarreswalk function performs an out-of-bounds write when processing memory ranges. This occurs because the function fails to check if its internal array is full before writing new...
CVE-2026-80623
A flaw was found in the Coresight Embedded Trace Extension ETE component of the Linux kernel. This vulnerability arises because the system register states for Embedded Trace Macrocells ETMs and ETE are not consistently preserved when the CPU powers down. A local attacker could potentially trigger...
CVE-2026-34344
CVE-2026-34344 信息 该漏洞最初由 @angelboy 发现。我出于教育和案例研究目的独立复现了该漏洞。 Microsoft 更新详情：CVE-2026-34344 PoC 已通过 Type Confusion 漏洞演示了崩溃。不过，我没有任何可用于利用该漏洞的原语。 摘要 漏洞类型：Type Confusion 组件：afd.sys 触发点：AfdQueryProviderInfo Windows 版本：Windows 11 25H2 26200.8246 详情 在 WskProIRPSend 中，内核可以访问 SecurityContext-SecurityQos，即...
Important: Red Hat Security Advisory: iperf3 security update
An update for iperf3 is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...
iperf3: iperf3 server accepts unbounded peer-controlled JSON parameters enabling remote denial of service via resource exhaustion
A flaw was found in iperf3. A remote attacker can exploit this vulnerability by sending crafted control-channel JSON with oversized numeric parameters, such as parallel and len, which are not properly validated by the server. This improper input validation can lead to excessive stream and thread...
browser-crash-tool
ブラウザクラッシュツール - Kali 概要 このツールは、Metasploitのwebkitbackdropfilterblur補助モジュールを使用して、iOS WebKitの脆弱性（CVE-2020-27950）を悪用します。しかし、いくつかのテストの後、すべてのブラウザで動作するようです。細工されたWebページを読み込むことで、対象のブラウザをクラッシュさせます。また、ngrokを使用して悪意のあるページへの公開アクセス可能なリンクを作成し、ターゲットに簡単に送信できるようにします。 免責事項:...
CVE-2025-34226
CVE-2025-34226: OpenPLC Runtimeにおける持続的DoS 脆弱性概要...
CVE-2026-83492
Extend Themes Kubio AI Website Builder (a WordPress plugin) is affected by an improper input validation vulnerability in versions prior to 2.9.1 . The flaw allows a high-privilege attacker to trigger a denial of service condition over the network with low complexity and no user interaction, resul...
CVE-2023-24998
multipartResolverが定義されていないか、StandardServletMultipartResolverを登録した場合 Tomcat内部パッケージのFileUploadを使用する その際、Tomcatバージョンは9.0.71より大きくなければならない spring boot 2.7.8 TomcatのmaxParameterCountデフォルト: 10000設定がFileUpload.setFileCountMaxに注入される Apache Commons Fileupload依存関係は使用しない...
CVE-2021-26258
本仓库包含用于 CVE-2021-26258 PoC 的工具和补充文件。有关该漏洞的详细信息，请参阅博客文章。 文件列表 ： rn.stg.original: 随 Intel Killer 附带的原始 .stg 文件 rn.xml.original: 使用 rnstg-tool 从 rn.stg.original 中提取的 .xml 文件 rncustom.xml: 自定义的 .xml 文件，用于禁止 Discord.exe 的网络访问并启动 RemoteRegistry 服务 rncustom.stg: 使用 rnstg-tool 从 rncustom.xml 生成的自定义 .stg ...
CVE-2020-0609
CVE-2020-609-POC UDPが開いたポート3391のRDGサーバーに対してPoCを実行すると、RDGインスタンスがクラッシュします。 開発中のスパーリングにご協力いただいた@Ollypwnに感謝します。...
glibc: Non-progress DoS in EUC_JISX0213 -> UCS-4 conversion state
A flaw was found in glibc. A remote attacker could exploit this vulnerability by providing specially crafted input during SHIFTJISX0213 to UCS-4 text conversion. This crafted input can cause the application to repeatedly process a buffered character without consuming further input, leading to a...
glibc: Non-progress DoS in SHIFT_JISX0213 ->
A flaw was found in glibc. A remote attacker could exploit this vulnerability by providing specially crafted input during SHIFTJISX0213 to UCS-4 text conversion. This crafted input can cause the application to repeatedly emit a buffered code point without consuming further input, leading to...
Vehicle-Service-Management-System-Category-List-Stored-Cross-Site-Scripting-XSS
CVE-2021-46071 Exploit Title: Vehicle Service Management System - 'Category List' Stored Cross Site Scripting XSS Exploit Author: SANU P.L CVE: CVE-2021-46071 CVSS: 4.8 MEDIUM References: https://www.plsanu.com/vehicle-service-management-system-category-list-stored-cross-site-scripting-xss...
CVE-2025-32375
脆弱性バージョンのセットアップ 脆弱性のあるコンテナを起動します: root@kitploit: docker compose up リスナー（例: ncat）を作成します: root@kitploit: ncat -klnv 1337 エクスプロイトを実行します: root@kitploit: python3 exploit.py すべてが正常に動作した場合、ncat ウィンドウに OS コマンド（デフォルトでは id）の内容を含む HTTP リクエストが届くはずです。 クレジット 脆弱性発見者: SeaW1nd VickyTheViking によるテスト環境に基づく...
CVE-2026-40345
deepmerge-ts mergeleft.self, right.self - mergeleft.self, right.self - mergeleft.self, right.self - RangeError: Maximum call stack size exceeded 当 deepmergeInto、deepmergeCustom 和 deepmergeIntoCustom 收到同类图时，也会出现相同的行为。 本地复现 在 package.json 中，该包被固定到受影响的 7.1.6 版本。 root@kitploit: npm install npm run po...
libtiff: libtiff: Heap-based buffer overflow via crafted PixarLog-compressed TIFF image
A flaw was found in libtiff. A remote attacker could exploit this vulnerability by providing a specially crafted PixarLog-compressed TIFF image. This issue occurs when decoding Pixarlog codec images with the PIXARLOGDATAFMT8BITABGR output format and a specific stride value, leading to a heap-base...
CVE-2023-21971_Analysis
CVE-2023-21971 Connector/J RCE Analysis分析 参考 Remote Code Execution RCE in com.mysql:mysql-connector-j | CVE-2023-21971 | Snyk New Vulnerability in MySQL JDBC Driver: RCE and Unauthorized DB Access MYSQL JDBC反序列化解析 - 跳跳糖 tttang.com 漏洞概述 Oracle MySQL 的 MySQL Connectors...