flask-vuln-v6

This repository does not have a README...

pwnage24mtk

pwnage24mtk Cert exploit for MTK devices.There is a logic flaw in MTK cert verification process.Similar to CVE-2023-20696. May be patched at June Disclaimer This project is only used for researching. Make sure you get authorized before you use it. Not allowed for illegal use. It is not allowed to...

CVE-2026-41285-OpenBSD-v6daemons-go-brrr

CVE-2026-41285: One Packet Kills IPv6 on OpenBSD One crafted ICMPv6 packet from the local network permanently hangs slaacd and/or rad. IPv6 SLAAC address autoconfiguration dies until someone manually restarts the daemon. No auth, no privileges, 18 bytes of ICMPv6 payload. | ---|--- CVE|...

CVE-2020-25540

cve-2020-25540 This script is used to exploit arbitrary file read vulnerabilities in ThinkAdmin v5 and v6 versions ==Note that the interface path may vary across different versions some are based on the original ThinkAdmin with secondary development== The original interface is:...

kin-openapi: YAML NaN/Inf Values Bypass Built-in Guards and Panic via OAS 3.1 Validation Path

Summary kin-openapi guards against NaN and Inf values in its built-in schema visitor visitJSON by returning ErrSchemaInputNaN / ErrSchemaInputInf when a float64 input violates those constraints. For OAS 3.1 specs, however, Schema.VisitJSON routes through useJSONSchema2020, which hands the value...

CVE-2026-109363

The ZcashFoundation Zebra software (versions 6.4.0 before 6.4.2 ) is vulnerable to a Denial of Service (DoS) attack. The root cause is that the software parses version 6 transactions with a pre-NU6.3 consensus branch ID but incorrectly treats the re-serialization of the Orchard bundle as infallib...

CVE-2026-109363 Zebra 6.4.0 before 6.4.2 Denial of Service via Malformed v6 Transaction

ZcashFoundation Zebra 6.4.0 before 6.4.2 parses version 6 transactions carrying a pre-NU6.3 consensus branch ID, but the size computation during UnminedTx construction treats re-serialization of the Orchard bundle as infallible, so the resulting error trips an expect that aborts zebrad...

CVE-2026-109363 Zebra 6.4.0 before 6.4.2 Denial of Service via Malformed v6 Transaction

ZcashFoundation Zebra 6.4.0 before 6.4.2 parses version 6 transactions carrying a pre-NU6.3 consensus branch ID, but the size computation during UnminedTx construction treats re-serialization of the Orchard bundle as infallible, so the resulting error trips an expect that aborts zebrad...

PT-2026-106629

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.10-1.1 Description A race condition exists between the tcp v6 rcv and tcp v6 do rcv functions. When a concurrent close operation changes the state from TCP LISTEN to TCP CLOSE, the function skb clone and char...

kernel: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]()

A flaw was found in the Linux kernel's tunnels module. This vulnerability, categorized as a Use-After-Free UAF, arises from improper handling of network header pointers during certain packet processing operations. Specifically, functions responsible for building Internet Control Message Protocol...

kernel: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]()

A flaw was found in the Linux kernel's tunnels module. This vulnerability, categorized as a Use-After-Free UAF, arises from improper handling of network header pointers during certain packet processing operations. Specifically, functions responsible for building Internet Control Message Protocol...

CVE-2026-104423

Zebra zebrad before 6.2.1 contains an asymmetric resource consumption vulnerability that allows unauthenticated peers to stall block verification by pushing V6 mempool transactions with invalid Halo2 proofs. Attackers can flood the shared unprioritized Halo2 verification queue with zero-fee...

EUVD-2026-91434

Zebra zebrad before 6.2.1 contains an asymmetric resource consumption vulnerability that allows unauthenticated peers to stall block verification by pushing V6 mempool transactions with invalid Halo2 proofs. Attackers can flood the shared unprioritized Halo2 verification queue with zero-fee...

CVE-2026-104423 Zebra before 6.2.1 Denial of Service via Uncapped V6 Shielded Proof Verification

Zebra zebrad before 6.2.1 contains an asymmetric resource consumption vulnerability that allows unauthenticated peers to stall block verification by pushing V6 mempool transactions with invalid Halo2 proofs. Attackers can flood the shared unprioritized Halo2 verification queue with zero-fee...

CVE-2026-104423 Zebra before 6.2.1 Denial of Service via Uncapped V6 Shielded Proof Verification

Zebra zebrad before 6.2.1 contains an asymmetric resource consumption vulnerability that allows unauthenticated peers to stall block verification by pushing V6 mempool transactions with invalid Halo2 proofs. Attackers can flood the shared unprioritized Halo2 verification queue with zero-fee...

CVE-2026-104423

The Zebra (zebrad) software, specifically versions before 6.2.1 , is susceptible to an asymmetric resource consumption vulnerability (CWE-405). This flaw allows unauthenticated peers to stall block verification by flooding the shared unprioritized Halo2 verification queue with zero-fee transactio...

CVE-2026-104423 Zebra before 6.2.1 Denial of Service via Uncapped V6 Shielded Proof Verification

Zebra zebrad before 6.2.1 contains an asymmetric resource consumption vulnerability that allows unauthenticated peers to stall block verification by pushing V6 mempool transactions with invalid Halo2 proofs. Attackers can flood the shared unprioritized Halo2 verification queue with zero-fee...

CVE-2026-104423: Asymmetric Resource Consumption (Amplification)

Zebra zebrad before 6.2.1 contains an asymmetric resource consumption vulnerability that allows unauthenticated peers to stall block verification by pushing V6 mempool transactions with invalid Halo2 proofs. Attackers can flood the shared unprioritized Halo2 verification queue with zero-fee...

UBUNTU-CVE-2026-94029

Server-side memory exhaustion in Apache MINA SSHD 1.0.0 to 2.19.0 and 3.0.0-M1 to 3.0.0-M5, component sshd-sftp, in the SFTP v6 check-file-name/check-file-handle extension. Apache MINA SSHD is a Java library for client-side and server-side SSH. Using a very small "block size" for instance 256,...

CVE-2026-94029

Server-side memory exhaustion in Apache MINA SSHD 1.0.0 to 2.19.0 and 3.0.0-M1 to 3.0.0-M5, component sshd-sftp, in the SFTP v6 check-file-name/check-file-handle extension. Apache MINA SSHD is a Java library for client-side and server-side SSH. Using a very small "block size" for instance 256,...