EUVD-2025-210805

HCL IntelliOps Event Management IEM is affected by a Session Deletion Vulnerability. It may allow improper handling of user sessions, resulting in sessions not being fully terminated after logout or deletion...

CVE-2025-62342 HCL IntelliOps Event Management is affected by multiple security vulnerabilities.

HCL IntelliOps Event Management IEM is affected by a Session Deletion Vulnerability. It may allow improper handling of user sessions, resulting in sessions not being fully terminated after logout or deletion...

KillChain

KillChain ?? Disclaimer: Questo progetto è destinato esclusivamente a scopi educativi e di ricerca sulla sicurezza. L'autore non è responsabile per qualsiasi uso improprio, danno o attività illegale causata da questo strumento. Utilizzare solo in ambienti di laboratorio isolati con autorizzazione...

CVE-2025-60349

CVE-2025-60349: Pxscan Beliebige Prozessbeendigung In Prevx v3.0.5.220 wurde ein Problem entdeckt, das es Angreifern ermöglicht, einen Denial-of-Service zu verursachen, indem sie den IOCTL-Code 0x22E044 an den Treiber pxscan.sys senden. Alle Prozesse, die unter dem Registrierungsschlüssel...

CVE-2026-59275

A single hostile AMQP message can terminate the entire consumer JVM System.exit99, not just the listener thread — full availability loss for every workload co-located in that process. Spring AMQP 4.1.0 Spring AMQP 4.0.0 - 4.0.4 Spring AMQP 3.2.0 - 3.2.12 Spring AMQP 2.4.18 and earlier...

CVE-2026-3796

CVE-2026-3796 No QAX Virus Removal, versão datada de 22/10/2025 e anteriores, o driver afetado QKSecureIOImp.sys depende da imagem do processo do chamador para determinar se ele tem permissão para se comunicar com o driver mini filter. Os atacantes poderiam se passar pela imagem de um processo...

EUVD-2026-66849

A single hostile AMQP message can terminate the entire consumer JVM System.exit99, not just the listener thread — full availability loss for every workload co-located in that process. Spring AMQP 4.1.0 Spring AMQP 4.0.0 - 4.0.4 Spring AMQP 3.2.0 - 3.2.12 Spring AMQP 2.4.18 and earlier...

CVE-2026-59275

Spring AMQP versions 4.1.0, 4.0.0–4.0.4, 3.2.0–3.2.12, and 2.4.18 and earlier are affected by a remote JVM termination vulnerability. A single hostile AMQP message triggers nested-array Java deserialization that bypasses the allowlist, causing a StackOverflowError . The default JavaLangErrorHandl...

CVE-2026-59275 Remote JVM termination: nested-array Java deserialization bypasses allowlist, triggers StackOverflowError, default JavaLangErrorHandler calls System.exit(99)

A single hostile AMQP message can terminate the entire consumer JVM System.exit99, not just the listener thread — full availability loss for every workload co-located in that process. Spring AMQP 4.1.0 Spring AMQP 4.0.0 - 4.0.4 Spring AMQP 3.2.0 - 3.2.12 Spring AMQP 2.4.18 and earlier...

CVE-2025-66676

CVE-2025-66676 IOBit Unlocker 1.3.0.11 और इससे पहले के संस्करणों में, एप्लिकेशन किसी फ़ाइल को अनलॉक करने का प्रयास करके किसी भी प्रक्रिया को समाप्त करने की अनुमति देता है। पृष्ठभूमि यह एप्लिकेशन किसी लॉक की गई फ़ाइल को अनलॉक करने के लिए उपयोग किया जाता है। किसी चालू प्रक्रिया की प्रोसेस इमेज फ़ाइ...

CVE-2025-1055-poc

CVE-2025-1055-poc PoC für CVE-2025-1055 und CVE-2025-52915 mithilfe von K7RKScan.sys. Dieser PoC verwendet die 0x222018-IOCTL, um beliebige Prozesse zu beenden. Verwendung Treiber installieren: root@kitploit: sc.exe create K7RKScan1516.sys binPath=C:\Users\Administrator\Downloads\K7RKScan1516.sys...

CVE-2025-23167

CVE-2025-23167 – Node.js HTTP Request Smuggling Exploit Funktionsfähiger Exploit für CVE-2025-23167, eine Request Smuggling-Schwachstelle, die Node.js 20.x Versionen vor v20.19.2 betrifft. Dieser Fehler erlaubt eine unsachgemäße HTTP-Header-Terminierung, wodurch Angreifer proxybasierte...

CVE-2018-6606

CVE-2018-6606 Questo termina qualsiasi PID. Testato su Windows 10 64-bit, Flare VM. Sono richiesti privilegi di amministratore. Potrebbero essere necessarie alcune modifiche — vedi resource.rc. Toolchain Download:...

TopazTerminator

TopazTerminator F, un altro driver è stato bruciato.. Stavo tenendo per me il driver wsftprm.sys per un po' ; ma visto che qualcuno ha pubblicato un POC pubblico, lo rilascio. Sappiamo tutti che presto verrà aggiunto alla lista dei driver bloccati, quindi ecco la mia implementazione per lo stesso...

reproxy

Reproxy è un semplice server HTTPs di perimetro / proxy inverso che supporta vari provider docker, static, file, consul catalog. Uno o più provider forniscono informazioni sul server richiesto, l'URL richiesto, l'URL di destinazione e l'URL di health check. È distribuito come singolo binario o co...

CVE-2026-26446

Stomper 5e2741e is vulnerable to Denial of Service. When a broker sends data to a client whose TCP connection was already closed by the peer, the server process receives SIGPIPE and immediately terminates, resulting in a denial of service. Any unauthenticated client can trigger the crash by closi...

Crashcast-Exploit

CRASHCAST STRUMENTO DI SFRUTTAMENTO DI MASSA Autore: @037 Questo strumento ti permette di riprodurre in massa qualsiasi video di YouTube, terminare applicazioni da remoto e rinominare i dispositivi Chromecast ottenuti da Shodan.io Prerequisiti L'unica cosa che devi avere installato è Python 3.x...

kernel: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check

A flaw was found in the Linux kernel's netfilter conntrack TCP state machine. A remote attacker can exploit this vulnerability by sending a specially crafted sequence of TCP Transmission Control Protocol packets, specifically a SYN synchronize packet followed by an RST reset packet with an invali...

CVE-2026-26446

Stomper (a STOMP message broker, commit 5e2741e ) is vulnerable to Denial of Service via an unhandled SIGPIPE signal. When the broker sends data to a client whose TCP connection was already closed by the peer, the server process immediately terminates, crashing the service. Any unauthenticated cl...

CVE-2026-26446

Stomper 5e2741e is vulnerable to Denial of Service. When a broker sends data to a client whose TCP connection was already closed by the peer, the server process receives SIGPIPE and immediately terminates, resulting in a denial of service. Any unauthenticated client can trigger the crash by closi...