CVE-2026-90559

A flaw was found in snappy-java. This out-of-bounds write vulnerability occurs in the Snappy.uncompress function when the destination buffer's capacity is not validated against the decompressed size. A remote attacker can supply valid compressed data that, when decompressed, exceeds the buffer's...

ipChecker

ipChecker 用于检查给定 IP 是否为 Tor 节点或开放代理的工具。 为什么？ 有时你所有的限流措施都不足以阻止暴力破解攻击或任何类型的大规模攻击，因此它可以帮助你丢弃一些使用 Tor 或开放代理的攻击者。 工作原理 ipChecker 拥有多个插件，这些插件从公共网站抓取代理 IP，所有 IP 都存储在数据库中，你可以通过提供的 API 进行查询。 基本来说，当你运行 make run 命令时，它会启动 Docker Swarm，创建一个可扩展的 API 服务（默认启动 4 个容器）、一个负责运行所有抓取代理和 Tor 节点插件的更新器服务（仅启动 1...

CVE-2026-106112 ImageSharp: ICC LUT16 output channel count can write beyond Vector4

ImageSharp is a 2D graphics library. From 4.0.0 until 4.1.2, ICC LUT16 conversion accepts more than four output channels even though ClutCalculator.Calculate and LutEntryCalculator.CalculateLut store intermediate and output values in Vector4. When DecoderOptions.ColorProfileHandling is set to...

EUVD-2026-93553

ImageSharp is a 2D graphics library. From 4.0.0 until 4.1.2, ICC LUT16 conversion accepts more than four output channels even though ClutCalculator.Calculate and LutEntryCalculator.CalculateLut store intermediate and output values in Vector4. When DecoderOptions.ColorProfileHandling is set to...

CVE-2026-80898

A flaw was found in the netfs component of the Linux kernel. When a copy-to-cache append operation fails, the PGprivate2 state and its associated reference are not properly released. This oversight can lead to a resource leak, potentially causing system instability or a denial of service DoS...

CVE-2026-80727

A flaw was found in the Linux kernel's x86 Machine Check Exception MCE handling. During the discovery of Corrected Machine Check Interrupts CMCI, a timer used for storm detection is modified before it is properly initialized. This improper timer setup can lead to kernel warnings and system...

sockstress

sockstress Implementación de Sockstress CVE-2008-4609 usando Go Instalación go get github.com/marcelki/sockstress Uso Usage: sockstress options... Options: -p The destination port to attack. -i The network interface to use. -d The delay between SYN packets You can choose your unit of time e.g. 1n...

CVE-2026-89894

A flaw was found in the Linux kernel's cx231xx media driver. A local attacker can exploit this vulnerability by manipulating video and Vertical Blanking Interval VBI queue operations. This allows for a heap out-of-bounds write, which could lead to arbitrary code execution or a denial of service...

CVE-2026-89777

A flaw was found in the Linux kernel's vfio/pci component. During device initialization, a memory pointer is not properly cleared after being freed, leading to a use-after-free and double-free vulnerability. A local attacker could exploit this flaw to cause a system crash, resulting in a denial o...

CVE-2026-90111

A flaw was found in the Linux kernel's IPv6 multicast routing ip6mr component. This use-after-free vulnerability occurs when a non-refcounted destination entry is improperly handled after being freed. A remote attacker could potentially exploit this by sending specially crafted IPv6 multicast...

sap_igs_xxe

Ataque XXE SAP IGS CVE-2018-2392 y CVE-2018-2393 Este módulo en Metasploit Framework Documentación1 Módulo2 Aplicación vulnerable Este módulo explota CVE-2018-2392 y CVE-2018-2393, dos vulnerabilidades XXE dentro de la página XMLCHART de SAP Internet Graphics Servers IGS que ejecutan versiones...

CVE-2026-90036

A flaw was found in the Linux kernel's Network File System Daemon NFSD. A use-after-free vulnerability can occur during the blocked-lock reaping process. This happens when a client's lock owner, without a proper reference to keep the client alive, leads to the client being prematurely freed. This...

CVE-2026-90008

A flaw was found in the Linux kernel's megaraidsas component. The megasasmakeprpnvme function, which constructs a list of memory pages for data transfers, fails to verify the allocated buffer's boundaries. This can result in a buffer overrun, potentially leading to a system crash Denial of Servic...

CVE-2024-35333

CVE-2024-35333 html2xhtml 1.3 版本的字符集处理功能中存在一个栈缓冲区溢出漏洞。攻击者可通过提供特制输入来利用此漏洞，导致栈上变量 'buf' 溢出。成功利用此漏洞可使攻击者执行任意代码或导致应用程序崩溃，造成拒绝服务。 崩溃复现阶段 要复现崩溃，请访问项目网站并下载最新版本 1.3。 获取 tar 文件后，运行 tar xvf XYZ.tar 运行： ./configure make ./html2xhtml poc.html 您将收到段错误。让我们用 Address Sanitizer 分析它。 运行： make clean make...

CVE-2021-23017

CVE-2021-23017 PoC 扫描器 NGINX DNS 溢出漏洞检查 - CVE-2021-23017 PoC 此 Python 脚本检查 nginx 服务器是否可能受到关键漏洞 CVE-2021-23017 的影响，该漏洞影响 nginx 内置的 DNS 解析器 ，可能导致缓冲区溢出。 🔍 它做什么？ 提示用户输入 URL。 发送一个带有恶意（非常长）Host 头的 HTTP 请求。 如果服务器配置了 nginx 的 resolver 并且存在漏洞，则可能会崩溃或在日志中记录错误。 不执行恶意代码 ，仅是一种被动的检测测试。 🚀 如何使用 1. 确保已安装 Python 3。...

CVE-2021-40906

CVE-2021-40906 - XSS Reflejado en una zona no autenticada Aplicación: Consola de Administración Web de CheckMK Revisión de Software: De 1.5.0 a 1.5.0p25 Autor: Edgar Augusto Loyola Torres. Tipo de ataque: XSS Reflejado Solución: Actualizar a la Revisión de Software 1.6.0p26 o posterior Resumen: E...

WordPress-Long-Password-Denial-of-Service

WordPress 拒绝服务漏洞 CVE-2014-9016 免责声明 本脚本的内容仅供以符合道德的方式使用。 如果您没有设备所有者的书面许可，请勿使用本脚本。 如果您进行非法操作，您可能会被逮捕并受到法律的全面起诉。 Primus27 对任何滥用脚本的行为不承担任何责任——它们仅用于概念验证。 本应用程序仅应在获得相关责任人适当书面授权的情况下，在测试环境中使用。 漏洞利用 通过自动化长密码攻击，使 WordPress 服务下线 本脚本在应用层攻击 WordPress，利用以下弱点： 缺少最大密码长度限制 缺少额外的安全措施，例如验证码（CAPTCHA） 解决方案 将 WordPres...

Important: Red Hat Security Advisory: dovecot security, bug fix, and enhancement update

An update for dovecot is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

dovecot: Dovecot: Denial of service via crafted email headers

A flaw was found in dovecot. A remote attacker can craft a malicious email with an excessive number of email addresses or MIME parameters in its headers. When a user attempts to read this message over IMAP, the parsing process consumes an inordinate amount of memory, leading to the termination of...

dovecot: Dovecot: Denial of Service via truncated quoted argument in ManageSieve

A flaw was found in Dovecot's ManageSieve login process. An unauthenticated attacker can exploit this vulnerability by sending a specially crafted, truncated quoted argument. This action causes the process to enter an infinite loop, consuming excessive CPU resources. Repeated exploitation can lea...