CVE-2023-44487

CVE-2023-44487 Basic vulnerability scanning to see if web servers may be vulnerable to CVE-2023-44487 This tool checks to see if a website is vulnerable to CVE-2023-44487 completely non-invasively. 1. The tool checks if a web server accepts HTTP/2 requests without downgrading them 2. If the web...

CVE-2026-82720

A flaw was found in Unbound. When compiled with DNS-over-HTTPs DoH support, a use-after-free vulnerability exists in the DoH stream cleanup code. A remote malicious actor can exploit this by sending a specially crafted DoH connection under specific failure conditions, such as an RPZ drop query or...

CVE-2026-82720

NLnet Labs Unbound 1.12.0 up to and including 1.26.0 has a use-after-free vulnerability when compiled for DNS-over-HTTPs support with '--with-libnghttp2'. During failure code paths i.e., RPZ drop query, jostle due to heavy traffic, a dropped DoH stream brings down the whole DoH session and does n...

CVE-2026-73445

Arista EOS is affected by a vulnerability in the gNSI (gRPC Network Security Interface) Authz Rotate RPC component, classified as CWE-20 (Improper Input Validation) . The bug may cause an incorrect Authz policy uploaded within an ongoing RPC stream to become the active policy, resulting in a poli...

CVE-2026-82720

NLnet Labs Unbound versions 1.12.0 through 1.26.0 contain a use-after-free vulnerability in the DNS-over-HTTPs (DoH) code path when compiled with --with-libnghttp2. During failure code paths (e.g., RPZ drop query or jostle due to heavy traffic), a dropped DoH stream tears down the entire DoH sess...

CVE-2021-21402

CVE-2021-21402 CVE-2021-21402 Jellyfin arbitrary file read Wker script, batchable. The logic is very simple, it checks for the existence of win.ini via GET: root@kitploit: define payload = /Audio/1/hls/..%5C..%5C..%5C..%5C..%5C..%5CWindows%5Cwin.ini/stream.mp3/ define info = CVE-2021-21402...

CVE-2026-33657

CVE-2026-33657 - EspoCRM 9.3.3 Stored HTML Injection in Email Notifications Authenticated proof-of-concept for stored HTML injection in EspoCRM 9.3.3 email notifications. Summary EspoCRM 9.3.3 renders stream-note notification emails by transforming the note body with Markdown and inserting the...

CVE-2018-10546

CVE-2018-10546 ユーザーは、'convert.iconv.' を使用するストリームフィルターで処理すると、対象アプリケーションが無限ループに入り、過剰な CPU リソースを消費する原因となる、特別に細工されたデータを作成できます CVE-2018-10546。 これらの脆弱性の具体的な影響は、影響を受ける関数やサービスを使用するアプリケーションによって異なります。...

UBUNTU-CVE-2026-91960

GHSA-vccg-35r5-8jrf: StreamEnsureCapacity still overflows...

CVE-2026-91960

GHSA-vccg-35r5-8jrf: StreamEnsureCapacity still overflows...

tomcat-embed-core-9.0.31-CVE-2020-11996

Please see the PoC in testImplicitCloseLargeId unit test of TestHttp2Section51.java: https://github.com/rusakovichma/tomcat-embed-core-9.0.31-CVE-2020-11996/blob/master/test/org/apache/coyote/http2/TestHttp2Section51.java...

CVE-2021-27905.POC

CVE-2021-27905.POC POC for LFI related to CVE-2021-27905 POC for apache-solr-file-read nuclei template Use traverse.sh path For example, using /root as path, will display the content of all files recursively ./traverse.sh /root It's also possible to traverse and get the content of every file on t...

CVE-2026-19774

BlueZ A2DP Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of BlueZ. An attacker must first obtain the ability to pair a malicious Bluetooth device with the target system in...

external_expat_2.1.0_CVE-2022-43680

Expat, Release 2.1.0 This is Expat, a C library for parsing XML, written by James Clark. Expat is a stream-oriented XML parser. This means that you register handlers with the parser before starting the parse. These handlers are called when the parser discovers the associated structures in the...

http2-rst-stream-attacker

CVE-2023-44487 と http2-rst-stream-attacker CVE-2023-44487 CVE-2023-44487 は、HTTP2 プロトコルそのものに対するエクスプロイトです。HTTP2 では、データリクエストは HEADERS フレームを送信することで開始されます。このフレームを受信したサーバーはリクエストの処理を開始し、その後すべてのデータが送信されるまで DATA フレームを送信します。また HTTP2 は RSTSTREAM...

CVE-2023-26083

CVE-2023-26083 – Mali GPU Kernel Address Leak via Timeline Stream This repository contains a proof-of-concept PoC exploit for CVE-2023-26083 , a vulnerability in the Mali GPU driver Arm Mali GPU Kernel Driver that allows an unprivileged user to leak kernel pointers and sensitive internal...

CVE-2026-19774 BlueZ A2DP Stack-based Buffer Overflow Remote Code Execution Vulnerability

BlueZ A2DP Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of BlueZ. An attacker must first obtain the ability to pair a malicious Bluetooth device with the target system in...

EUVD-2026-79131

BlueZ A2DP Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of BlueZ. An attacker must first obtain the ability to pair a malicious Bluetooth device with the target system in...

CVE-2026-19774 BlueZ A2DP Stack-based Buffer Overflow Remote Code Execution Vulnerability

BlueZ A2DP Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of BlueZ. An attacker must first obtain the ability to pair a malicious Bluetooth device with the target system in...

CVE-2026-19774

BlueZ A2DP Stack-based Buffer Overflow allows remote code execution as root on affected installations of the Linux Bluetooth protocol stack. The flaw resides in the handling of stream endpoints , where user-supplied data is copied to a fixed-length stack-based buffer without proper length validat...