CVE-2024-23722-poc

CVE-2024-23722-poc Usage python3 exploit.py http://127.0.0.1:8888 port is currently not open port is currently not open port is currently not open port is currently not open Server might have crashed port is currently not open port is currently not open port is currently not open Server might hav...

cve-2015-5477

PoC for BOND9 TKEY assert DoS CVE-2015-5477 This exploit tests to see if a BIND9 server is vulnerable by sending the exploit in order to see if it crashes. It's C code that you compile the normal way on Unix/Window, such as: gcc tkill.c -o tkill It'll run over both IPv4 and IPv6. This is what it...

CVE-2026-23918

CVE-2026-23918 Apache modhttp2 Double-Free Detector https://github.com/user-attachments/assets/d6c30e58-548c-4b6d-9ba3-baa667238a58 python3 h2ghost.py -h usage: h2ghost.py -h --host HOST --port PORT --tls --no-tls --iterations ITERATIONS --burst-n BURSTN --timeout TIMEOUT --crash-threshold...

CVE-2022-46485

CVE-2022-46485 ngDoS - ngSurvey Notes: The "slider" question may also be vulnerable with a large integer instead of a string. It could not be confirmed in my local environment. Exploitation steps Open the survey page and find a text or comment field. Fill the survey normally. In the text or comme...

mssqlproxy

mssqlproxy mssqlproxy is a toolkit aimed to perform lateral movement in restricted environments through a compromised Microsoft SQL Server via socket reuse. The client requires impacket and sysadmin privileges on the SQL server. Please read this article carefully before continuing. It consists of...

Important: xorg-x11-server

Issue Overview: A flaw in the X.Org Server's handling of EDID Display-Range descriptors can result in an out-of-bounds write, potentially leading to server crashes or memory corruption. CVE-2026-109091 A bounds-checking flaw in the X.Org Server's XvShmPutImage handling can result in an...

CVE-2026-31402

🛡️ CVE-2026-31402 – NFSv4 LOCK Replay Cache Heap Overflow CVE-2026-31402: Linux NFS Bug Hidden for 23 Years 📌 Overview CVE-2026-31402 is a heap overflow vulnerability in the NFSv4.0 LOCK replay cache of the Linux kernel. It arises due to improper handling of responses larger than the fixed buffer...

CVE-2026-123863

A flaw was found in Node.js. An unauthenticated remote attacker can cause a Denial of Service DoS by triggering an abnormal server crash during HTTP/2 session termination. By sending a request where the server responds before the request body has finished transmitting, an individual stream can...

CVE-2025-63408

CVE-2025-63408 path-traversal.py: A re-implementation of https://github.com/eric-m-holub/double-agent/blob/main/doubleagent.py Uses uuids as part of the requested filename to avoid remote server crashing after first path traversal exploitation. run.py / shell.py: wrapper on top of podman to run...

CVE-2026-31402

🛡️ CVE-2026-31402 – NFSv4 LOCK Replay Cache Heap Overflow CVE-2026-31402: Linux NFS Bug Hidden for 23 Years 📌 Overview CVE-2026-31402 is a heap overflow vulnerability in the NFSv4.0 LOCK replay cache of the Linux kernel. It arises due to improper handling of responses larger than the fixed buffer...

crypto/tls: golang: crypto/tls: Denial of Service via multiple ECH outer extension references

A flaw was found in crypto/tls. A remote attacker can trigger this vulnerability by sending a specially crafted packet containing multiple Encrypted Client Hello ECH outer extension references to a server. Processing these unauthorized references leads to excessive memory consumption, causing a...

CVE-2026-120811

A use-after-free issue exists in the MongoDB server’s classic query engine plan cache. Under certain query conditions, an unowned reference to data from an earlier command can be retained in cached plan statistics. After the originating memory is freed, a subsequent diagnostic command serializing...

CVE-2026-120809

A use-after-free read issue exists in MongoDB’s SBE Slot-Based Execution engine when processing aggregation pipelines with $unwind on time-series collections. An internal error in state-preservation logic can cause a value still referenced by downstream stages to have its underlying memory freed...

CVE-2026-120803

A use-after-free vulnerability exists in MongoDB 's SBE (Slot-Based Execution) implementation of a window function accumulator, specifically within certain $setWindowFields aggregation pipelines. The issue occurs when an accumulator retains a dangling pointer to freed memory; dereferencing this s...

CVE-2026-66729-Out-of-Bounds-Read-in-facil.io-MIME-Parser-leads-to-Server-Crash

Security Disclosure: Out-of-Bounds Read in facil.io MIME Parser leads to Server crash Assigned CVE ID CVE-2026-66729 Product: facil.io Affected versions: facil.io = 0.6.0 all 0.6.x, all 0.7.x, master; introduced when the MIME parser was added in 0.6.0 Component:...

CVE-2026-66749-Unchecked-Room-Lookup-Leads-to-Server-Crash-Let-s-Chat-

Security Advisory: Unchecked Room Lookup Leads to Server Crash Let's Chat Assigned CVE ID: CVE-2026-66749 Summary One HTTP request from any logged-in account shuts down the Let's Chat server process. GET /messages takes a room parameter, looks that room up by id, and then calls a method on the...

Security update for trivy (important)

openSUSE security update: security update for trivy ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:22233-1 Rating: important References: bsc1284829 bsc1285541 bsc1287329 Cross-References: CVE-2026-19585 CVE-2026-78669 CVE-2026-97032 CVSS scores:...

CVE-2025-21574-Exploit

CVE-2025-21574-Exploit Key Features of this Black-Box Exploit: 1. Credential Brute-Forcing: Tests 12+ common default username/password combinations Checks 5 common system databases Automatically detects valid credentials 2. Anonymous Access Attempt: Tries connecting without any credentials Tests...

CVE-2026-116011

A flaw was found in Crow. An issue during JSON parsing allows a remote, unauthenticated attacker to cause a Denial of Service DoS by sending specially crafted, deeply nested JSON requests. Processing these excessively nested structures causes thread stack exhaustion through unbounded recursive...

Security Bulletin: Multiple vulnerabilities found in CICS Transaction Gateway for Multiplatforms

Summary Multiple vulnerabilities were identified in third-party components and libraries used by CICS Transaction Gateway for Multiplatforms, including xmlschema-core and Python. To address these vulnerabilities, the affected components and libraries have been updated in CICS Transaction Gateway...