HTTP3ONSTEROIDS

Indice Descrizione della vulnerabilità Analisi del codice sorgente Configurazione del laboratorio Identificazione del problema Riferimenti Descrizione della vulnerabilità L'implementazione HTTP/3 di HAProxy non riesce a bloccare un nome di campo header HTTP malformato , e quando implementato...

KINGSOFT-WPS-Office-LPE

Avviso JVN https://jvn.jp/en/vu/JVNVU90673830/ I seguenti numeri CVE sono stati assegnati: CVE-2022-25943 KINGSOFT WPS Office LPE WPS Office è una suite per ufficio per Microsoft Windows, macOS, Linux, iOS, Android e HarmonyOS sviluppata dallo sviluppatore di software cinese Kingsoft, con sede a...

CVE-2025-27237

CVE-2025-27237 Vulnerabilidade de escalonamento local de privilégios no Zabbix Agent/Agent2 para Windows via sequestro de arquivo de configuração OpenSSL. Visão Geral Campo| Valor ---|--- ID CVE| CVE-2025-27237 CVSS v4.0| 7.3 ALTO CWE| CWE-427: Elemento de Caminho de Pesquisa Não Controlado Tipo|...

CVE-2026-38350

A flaw was found in FFmpeg. An integer overflow vulnerability in the targetswsfuzzer function allows a remote attacker to cause a Denial of Service DoS by supplying a specially crafted input. This can lead to the application becoming unresponsive or crashing, impacting its availability. Mitigatio...

CVE-2026-38348

A flaw was found in FFmpeg, specifically within the libswscale/utils.c component. An integer overflow vulnerability allows a remote attacker to cause a Denial of Service DoS by supplying a specially crafted image file. This could lead to the application becoming unresponsive or crashing. Mitigati...

CVE-2026-38347

A flaw was found in FFmpeg. A heap overflow vulnerability exists in the ffswsalphablendaway function. This flaw allows attackers to cause a Denial of Service DoS by providing a specially crafted input. Successful exploitation could lead to the application becoming unresponsive or crashing...

CVE-2026-64833

A flaw was found in FFmpeg, specifically within the S/PDIF muxer. A remote attacker can exploit an out-of-bounds read vulnerability by providing a specially crafted DTS-HD audio stream during S/PDIF re-muxing. This allows the attacker to read memory beyond the intended buffer boundaries,...

CVE-2026-38343

A flaw was found in FFmpeg. An integer overflow in the libavfilter/vfscale.c component allows attackers to cause a Denial of Service DoS by supplying a specially crafted video file. This can lead to the application becoming unresponsive or crashing. Mitigation No mitigation is currently available...

CVE-2026-38349

A flaw was found in FFmpeg. An integer overflow vulnerability in the hScale16To19c function allows a remote attacker to cause a Denial of Service DoS by supplying a specially crafted image file. This can lead to the application becoming unresponsive or crashing, preventing legitimate users from...

CVE-2026-38346

A flaw was found in FFmpeg. An integer overflow vulnerability in the yuv2planeX8c function allows a remote attacker to cause a Denial of Service DoS by supplying a specially crafted video file. This can lead to the application becoming unresponsive or crashing, impacting system availability...

CVE-2026-38344

A flaw was found in FFmpeg. This vulnerability involves a NULL pointer dereference within the getminbuffersize function when processing specially crafted video files. An attacker could exploit this by providing a malicious video file, leading to a Denial of Service DoS. A Denial of Service attack...

androguard

Androguard Do you think your phone has been pwned ? please check IsMyPhonePwned New tool: Goauld Dynamic injection tool for Linux/Android See the new version of Androguard: https://github.com/androguard/androguard/tree/ng Installation Quick installation: root@kitploit: pip install androguard...

-CVE-2021-44790

CVE-2021-44790 Descrizione di CVE-2021-44790 CVE-2021-44790 descrive un bug di sicurezza a livello di sistema presente in modlua di Apache HTTP Server, in particolare nella versione 2.4.51 e precedenti. La vulnerabilità viene attivata quando la funzione r:parsebody gestisce in modo improprio le...

CVE-2021-20294-POC

CVE-2021-20294-POC Jan 21 2023, Altin tin-z, github.com/tin-z Poc herunterladen und kompilieren root@kitploit: wget https://ftp.gnu.org/gnu/binutils/binutils-2.35.tar.gz && tar -xzvf binutils-2.35.tar.gz cd binutils-2.35 && ./configure && make && cd .. gcc -shared -fPIC poc.c -o poc.so...

CVE-2026-442_

CVE protobuf.js CVE-2026-44289, CVE-2026-44290, CVE-2026-44291, CVE-2026-44292, CVE-2026-44294, CVE-2026-44295 - protobuf.js ⚡ Utilizzo semplice Utilizza questo progetto solo in ambienti sicuri e autorizzati come: Macchine virtuali locali Container Docker Configurazioni di laboratorio isolate...

CVE-2020-11881

CVE-2020-11881 حجب الخدمة عن بُعد DoS في MikroTik SMB يصف هذا التقرير الثغرة CVE-2020-11881، وهي ثغرة حجب خدمة DoS عن بُعد بدون مصادقة في خدمة SMB الخاصة بـ MikroTik والتي تعمل على نظام RouterOs. تسمح الثغرة للمهاجم بالتسبب في انهيار خدمة SMB قيد التشغيل، وقد تم الإفصاح عنها بشكل مسؤول إلى...

patchy

Patchy Movimento lateral automatizado e persistência abusando do gerenciamento de patches do SO GCP, baseado no meu post do blog. O Patchy é composto por dois modos principais: movimento lateral e persistência. A persistência usa credenciais válidas de conta de serviço para criar um job ou...

CVE-2022-35737

CVE-2022-35737 Integer-Überlauf in der SQLite3-Funktion sqlite3strvappendf. CVSS 6.7 AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H CVE-2022-35737 wurde in SQLite Version 1.0.12 eingeführt und in Release 3.39.2 behoben, verfügbar am 21. Juli 2022. Es ist auf 64-Bit-Systemen ausnutzbar, und die Ausnutzbarkei...

CVE-2020-35488

Ho trovato una vulnerabilità nel prodotto: nxlog-ce2.10.2150. Ho testato la mia PoC solo su Linux Debian 10 e Windows Windows Server 2016. 1 Descrizione : Ambito : NXLOG Community Edition 2.10.2150 Tipo di bug : CWE-502, Deserializzazione di dati non attendibili...

cve-2024-46483

CVE-2024-46483 - Overflow dell'heap in pre-autenticazione nel server SFTP Xlight Versioni interessate Xlight versioni a 32 e 64 bit = 3.9.4.2 Impatto Un attaccante non autenticato con accesso a Xlight SFTP potrebbe ottenere l'esecuzione di codice o causare un denial of service. Causa principale L...