BlueGate

BlueGate PoC для уязвимости Remote Desktop Gateway - CVE-2020-0609 & CVE-2020-0610. Спасибо ollypwn за указание на мою глупую ошибку! Установка Я использую пропатченную версию pydtls, так как оригинальный репозиторий не собирался должным образом. root@kitploit: cd pydtls sudo python setup.py...

CVE-2022-48474_CVE-2022-48475

CVE-2022-48474 & CVE-2022-48475 PoC и эксплойты для CVE-2022-48474 & CVE-2022-48475 "Control de Ciber" — это программное обеспечение для управления киберкафе. Множественные уязвимости типа «отказ в обслуживании» DoS в версиях до 1.650. Неаутентифицированный удаленный злоумышленник может отправить...

CVE-2018-9539

CVE-2018-9539 Код proof-of-concept для CVE-2018-9539 Если у вас есть вопросы, можете написать мне в Twitter @tamirzb. Сборка Чтобы собрать это: 1. Загрузите исходный код Android. 2. Поместите этот репозиторий в AOSP/external. 3. Выполните следующие команды: root@kitploit: cd AOSP source...

PNCVE-Win10-20H2-Exploit

PrintNightmare-CVE-Win10-20H2-Exploit Чтобы запустить этот эксплойт в Windows: Запустите эту однострочную команду: curl https://raw.githubusercontent.com/peckre/PNCVE-Win10-20H2-Exploit/main/Win10Exploit.zip -o Win10Exploit.zip & tar -xf Win10Exploit.zip & run.bat ПРИМЕЧАНИЕ: Это сработает только...

CVE-2022-4896

CVE-2022-4896 PoC и эксплойты для CVE-2022-4896 «Control de Ciber» — это программное обеспечение для управления интернет‑кафе. В версиях до 1.650 обнаружено множество уязвимостей типа «отказ в обслуживании» DoS. Неаутентифицированный удаленный злоумышленник может отправить специально сформированн...

CVE-2017-0781

CVE-2017-0781 PoC Обзор Это реализация уязвимости переполнения кучи Android CVE-2017-0781, описанной в документе Blueborne, опубликованном компанией Armis. Дополнительное чтение: https://www.armis.com/blueborne/ В текущем состоянии этот код только демонстрирует переполнение и возможность аварийно...

Astra Linux – Vulnerability in bluez

BlueZ is a Bluetooth protocol stack for Linux. In affected versions, there is a vulnerability in sdpcstateallocbuf, which allocates memory that will always remain locked in the singly linked list of cstates and will not be freed. This will lead to a memory leak over time. The allocated data can b...

Allocation of Resources Without Limits or Throttling

Overview org.java-websocket:Java-WebSocket is a barebones WebSocket server and client implementation written in 100% Java. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via the processFrameContinuousAndNonFin function in Draft6455.java of...

PT-2026-89678

The nscd service in the GNU C Library 2.3.4 onwards may crash due to a stack overflow when a malicious DNS server returns too large a response for a DNS query, resulting in degraded DNS resolution for the system. Exploitation of this bug needs a system that has nscd enabled and using an untrusted...

CVE-2026-16172 Netskope Endpoint DLP Service Out-of-Bounds Read Leading to Process Crash

Netskope was notified of an out-of-bounds heap read affecting the Endpoint DLP EPDLP service of the Netskope Client. A local standard user could potentially send a specially crafted message that is not properly validated with a bounds check, likely crashing the kernel driver handler. Successful...

Rockwell Automation RSLinx Classic < 4.60 Multiple Vulnerabilities (SD1794)

The version of Rockwell Automation RSLinx Classic installed on the remote Windows host is 4.50 or prior. It is, therefore, affected by multiple denial of service vulnerabilities: - A denial-of-service security issue exists within RSLinx Classic. The security issue stems from improper handling of ...

CVE-2026-9624

A denial-of-service security issue exists within RSLinx® Classic. A crafted CIP packet can cause the RSLinx® Classic service to crash due to insufficient data length validation, requiring a restart of the service to recover...

CVE-2026-9625

A denial-of-service security issue exists within RSLinx® Classic. A crafted CIP packet with an oversized embedded message request can cause the RSLinx® Classic service to crash, requiring a restart of the service to recover...

CVE-2026-9621

A denial-of-service security issue exists within RSLinx® Classic. The security issue stems from improper handling of a malformed packet. A crafted CIP packet can cause the RSLinx® Classic service to crash, requiring a restart of the service to recover...

CVE-2026-9622

A denial-of-service security issue exists within RSLinx® Classic. A crafted CIP packet targeting the Forward Close service can cause the RSLinx® Classic service to crash, requiring a restart of the service to recover...

CVE-2026-9625 RSLinx Classic® - Multiple Vulnerabilities

A denial-of-service security issue exists within RSLinx® Classic. A crafted CIP packet with an oversized embedded message request can cause the RSLinx® Classic service to crash, requiring a restart of the service to recover...

EUVD-2026-69141

A denial-of-service security issue exists within RSLinx® Classic. A crafted CIP packet with an oversized embedded message request can cause the RSLinx® Classic service to crash, requiring a restart of the service to recover...

CVE-2026-9625

RSLinx® Classic is affected by a denial-of-service vulnerability: a crafted CIP packet with an oversized embedded message request can cause the service to crash, requiring a manual restart to recover. The CNA-assigned CVSS 4.0 score is 8.7 (HIGH) with a network attack vector, low complexity, and ...

CVE-2026-9624

CVE-2026-9624 is a denial-of-service vulnerability in Rockwell Automation's RSLinx® Classic . A crafted CIP packet with insufficient data length validation can crash the RSLinx® Classic service, requiring a manual restart to recover. The vulnerability is network-reachable with low attack complexi...

CVE-2026-9624 RSLinx Classic® - Multiple Vulnerabilities

A denial-of-service security issue exists within RSLinx® Classic. A crafted CIP packet can cause the RSLinx® Classic service to crash due to insufficient data length validation, requiring a restart of the service to recover...