CVE-2026-82333

multer , a Node.js middleware for handling multipart/form-data, is vulnerable to a remotely triggerable denial of service (CVSS 7.5 HIGH). An attacker can send a small multipart request containing two specially crafted text field names: a large numeric array index in the first field allocates a m...

CVE-2026-81490

MongoDB Connector for BI (mongosqld) contains an improper error handling flaw in its schema-sampling routine. A database user who can create a view in a sampled namespace can define a view whose evaluation reliably fails. The sampling logic misclassifies the resulting server message as transient ...

CVE-2025-11187

CVE-2025-11187 Stack buffer overflow in PKCS12 PBMAC1 PBKDF2 keylength OpenSSL 3.X Ho trovato questo stack buffer overflow circa un anno fa, si è rivelato un duplicato CVE-2025-11187 Il problema si verifica nella gestione di PKCS PBMAC1 di libcrypto quando il keylength di PBKDF2 è controllato...

CVE-2026-77078

multer , a popular Node.js middleware for handling multipart/form-data, is vulnerable to a remote denial-of-service in all versions before 2.3.0 . A small multipart request containing two specially crafted text field names triggers an uncaught RangeError (Invalid array length) : the first field a...

brutus

Brutus "Et tu, Brute?" — Le ultime parole prima che le credenziali cadano. Moderno strumento di test delle credenziali in puro Go Installazione • Avvio Rapido • Pipeline • Protocolli • Enumerazione • Proxy • Libreria Panoramica Brutus è uno strumento di test dell'autenticazione multi-protocollo...

zscan

zscan Uno strumento di rilevamento dei servizi veloce e personalizzabile, alimentato da un sistema di impronte digitali flessibile. Aiuta a identificare servizi, API e configurazioni di rete nella propria infrastruttura. Documentazione | Funzionalità | Installazione | Utilizzo ✨Funzionalità Motor...

CVE-2026-77037

multer is a Node.js middleware for handling multipart/form-data uploads. In version 2.2.0 , when a disk-backed upload is aborted or truncated before the write stream finishes, the disk storage engine removes the visible file but fails to close the underlying write file descriptor , leaving a dele...

isf

Industrial Exploitation Framework ISFIndustrial Exploitation Framework is a exploitation framework based on Python, it's similar to metasploit framework. ISF is based on open source project routersploit. Read this in other languages:English, 简体中文, Disclaimer Usage of ISF for attacking targets...

nmap-vulners

nmap-vulners Turn an nmap service scan into a ranked list of CVEs, exploits and what is being attacked in the wild. One NSE script that takes the software nmap already identified, asks the Vulners database what is known about it, and prints the answer inside the scan report - worst first, by what...

intelspy

Perform automated network reconnaissance scans to gather network intelligence. IntelSpy is a multi-threaded network intelligence tool which performs automated network services enumeration. It performs live hosts detection scans, port scans, services enumeration scans, web content scans,...

CVE-2025-67445

Panoramica Una vulnerabilità nell'interfaccia di gestione web del TOTOLINK X5000R V9.1.0cu.2415 consente a un attaccante remoto non autenticato sulla LAN di crashare il servizio web tramite un segmentation fault. Inviando una richiesta HTTP POST di dimensioni eccessive all'endpoint CGI, un...

CVE-2026-55484

ALOS HTTP , a Linux-first Go web framework with a custom networking stack, is vulnerable to an unauthenticated remote denial-of-service . The root cause is an unchecked p[0] access in core/utils.go::sanitizeRequestPath after splitPathQuery processes a path beginning with a question mark, leaving ...

CVE-2026-64849

CVE-2026-64849 Mais root@kitploit: POST /api/2.0/mlflow/webhooks HTTP/1.1 Host: Content-Type: application/json "url": "https://httpbin.org/redirect-to?url=http://169.254.169.254/latest/meta-data/", "name": "poc", "events": "action": "CREATED", "entity": "REGISTEREDMODEL" root@kitploit: POST...

CVE-2023-44487

HTTP/2 Rapid Reset: CVE-2023-44487 Beschreibung Dieses Repository enthält Proof-of-Concept-Code PoC für die HTTP/2-Rapid-Reset-Schwachstelle, die als CVE-2023-44487 identifiziert wurde. Überblick über die Schwachstelle CVE-ID : CVE-2023-44487 Auswirkung : Denial of Service DoS Betroffene Protokol...

EUVD-2026-67868

plone.app.event provides the event content type for Plone. Prior to versions 5.2.4 and 6.0.1, the iCalendar import in src/plone/app/event/ical/importer.py accepts insufficiently restricted calendar and event URLs, does not adequately bound downloaded bytes or imported events, and commits work per...

CVE-2026-55247 plone.app.event: Denial of service via iCalendar import

plone.app.event provides the event content type for Plone. Prior to versions 5.2.4 and 6.0.1, the iCalendar import in src/plone/app/event/ical/importer.py accepts insufficiently restricted calendar and event URLs, does not adequately bound downloaded bytes or imported events, and commits work per...

CVE-2026-55247

plone.app.event , Plone's event content type, contains multiple issues in its iCalendar import (src/plone/app/event/ical/importer.py) prior to versions 5.2.4 and 6.0.1 . The importer accepts insufficiently restricted calendar and event URLs, does not adequately bound downloaded bytes or imported ...

CVE-2019-1064

CVE-2019-1064 - AppXSVC Lokale Berechtigungserhöhung https://www.rythmstick.net/posts/cve-2019-1064/...

CVE-2026-59310

CVE-2026-59310 PoC https://trap.biu.life/intelligence/6a82873feb679015eb4c8a67 root@kitploit: echo '1 2026-08-14T12:00:00.000Z ../../../../../../opt/vmware/share/htdocs/configurev2/cve59310chkee57b163c432 research - - - CVE-2026-59310-ee57b163c432'|nc syslogserver 514 root@kitploit: GET...

CVE-2026-40345

deepmerge-ts 8.0.0: DoS durch rekursiven Objektgraphen Ich habe einen Stack-Erschöpfungsfehler in deepmerge-ts-Versionen vor 8.0.0 reproduziert. Das Interessante daran ist, dass der Absturz kein riesiges verschachteltes Objekt benötigt. Er entsteht durch Objektidentität. Wenn beide...