CVE-2020-0668

CVE-2020-0668 Implementazione in PowerShell che sfrutta printconfig.dll per l'elevazione dei privilegi Il evil dll può essere definito personalmente; la mia DLL esegue il file c:\programdata\setup.bat Riferimenti: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0668...

bigdecimal-segfault-fix

h1. BigDecimal Segfault Fix Es gibt einen Segfault-Fehler in Rubys BigDecimal-Bibliothek, der von Benutzern durch die Angabe bekanntermaßen ungültiger Werte ausgelöst werden kann. Wenn Sie testen möchten, ob Ihre Anwendung sicher ist, führen Sie +example.rb+ aus. Dieses Skript sollte normal beend...

CVE-2025-15474

Vulnerabilità Denial-of-Service DoS della serratura intelligente BLE Un flood di connessioni Bluetooth Low Energy BLE non autenticate può impedire in modo affidabile agli utenti legittimi di sbloccare il dispositivo interrompendo l'input del tastierino e forzando stati di blocco ripetuti. 📌...

CVE-2021-35492

Informazioni sull'exploit Titolo dell'exploit: Wowza Streaming Engine 4.8.11+5 - Negazione del servizio CVE: CVE-2021-35492 Data: 2021-10-06 Autore dell'exploit: N4nj0 Link del software: https://www.wowza.com/products/streaming-engine Versione: 4.8.11+5 Testato su: Wowza Streaming Engine = 4.8.11...

EUVD-2026-67717

CodeChecker's massStoreRun processing path performs one-shot decompression of attacker-controlled, Base64-encoded zlib data without enforcing a maximum decompressed size. An authenticated user with permission to store analysis runs can submit a highly compressed payload that expands to a...

CVE-2026-58107 Authenticated Remote Denial of Service via Unbounded zlib Decompression in massStoreRun

CodeChecker's massStoreRun processing path performs one-shot decompression of attacker-controlled, Base64-encoded zlib data without enforcing a maximum decompressed size. An authenticated user with permission to store analysis runs can submit a highly compressed payload that expands to a...

CVE-2026-58107

CodeChecker (Ericsson) is affected by an authenticated remote denial of service in the massStoreRun processing path. The vulnerability arises from one-shot decompression of attacker-controlled, Base64-encoded zlib data without enforcing a maximum decompressed size. An authenticated user with perm...

CVE-2026-58107 Authenticated Remote Denial of Service via Unbounded zlib Decompression in massStoreRun

CodeChecker's massStoreRun processing path performs one-shot decompression of attacker-controlled, Base64-encoded zlib data without enforcing a maximum decompressed size. An authenticated user with permission to store analysis runs can submit a highly compressed payload that expands to a...

CVE-2019-5420

CVE-2019-5420 CVE-2019-5420 Ruby on Rails Solo a scopo educativo. Vedi Reference per i dettagli. Ambiente Ruby: 2.6.0p0 Rails: 5.2.2 Esecuzione root@kitploit: $ docker run --name cve-2019-5420 --rm -p 3000:3000 knqyf263/cve-2019-5420 Exploit Esegui touch /tmp/rce root@kitploit: $ curl...

CVE-2026-82261

SvelteKit @sveltejs/kit versions =2.49.0 and =2.52.1 with experimental remote functions and form enabled contain a CPU exhaustion vulnerability in form deserialization. An attacker can send malformed form data to cause the server to become unresponsive while processing the request, resulting in...

CVE-2026-82260

SvelteKit @sveltejs/kit versions =2.49.0 and =2.52.1 with experimental remote functions experimental.remoteFunctions and form enabled contain a memory exhaustion vulnerability in remote form deserialization. Malformed form data can cause excessive memory allocation, crashing the server process an...

CVE-2026-82256

SvelteKit before 2.69.1 fails to properly validate remote form function payload sizes, allowing attackers to crash the Node process by sending large payloads. Repeated exploitation causes denial of service by repeatedly crashing the application process...

CVE-2026-82259

SvelteKit versions from 2.49.0 through 2.53.2 fixed in 2.53.3 contain a deserialization expansion issue in the experimental form remote function. When an application enables experimental.remoteFunctions and uses the form function to process the files array without validating files.length or...

CVE-2026-82254

gitoxide before 0.69.0 contains unchecked array indexing in delta application and uncapped allocation from attacker-controlled size headers in gix-pack. Attackers can send crafted pack data during clone or fetch operations to trigger panics or out-of-memory process kills...

CVE-2026-82250

gitoxide gix-packetline versions before 0.21.5 contain a panic vulnerability in the TextRef implementation that occurs when processing side-band packet lines with empty payloads. A malicious Git server can send a crafted side-band packet to trigger an index out of bounds panic, aborting the clien...

CVE-2026-82235

filebrowser through 2.63.23 fails to validate named pipes in directory archive and public download handlers, allowing attackers to trigger blocking open syscalls. Authenticated users or anonymous visitors with public share links can repeatedly request archives containing named pipes to pin server...

CVE-2026-73209

An attacker that has valid credentials can send crafted compressed data that causes the affected process to exhaust its stack and crash. The affected process is terminated, which can cause degradation or denial of service for IMAP. Update to non-vulnerable version. No publicly available exploits...

CVE-2026-52681

Sieve CPU resource usage is tracked in the compiled script, so an attacker that has valid credentials can reset the accounting by repeatedly changing the active script. Compiled script files are also not removed when a script is deleted or renamed. The configured Sieve CPU limit can be bypassed,...

CVE-2026-42395

A host listed as a trusted proxy can send forwarding information containing a NUL byte, which crashes the login process on the following login attempt. The login process is terminated, which can cause degradation or denial of service for logins. Deployments that do not configure trusted proxies a...

CVE-2026-42391

An unauthenticated attacker can send an IMAP ID command with a very large number of parameters before logging in, which causes memory and CPU usage to grow disproportionately. The login process can be terminated by the out-of-memory handling, which also terminates all other connections handled by...