Lucene search
+L

12149 matches found

Kitploit
Kitploit
added 2026/08/28 10:58 p.m.4 views

vucsa

Vulnerable Client-Server Application VuCSA Vulnerable client-server application VuCSA is made for learning/presenting how to perform penetration tests of non-http client-server applications. It is written in Java with JavaFX graphical user interface. Currently, the vulnerable application contains...

5.8AI score
SaveExploits0
Kitploit
Kitploit
added 2026/08/28 1:57 p.m.3 views

HeartLeak

HeartLeak L'ennesimo script di exploitation per il bug più chiacchierato di tutti i tempi. Lo script ha due funzionalità: scan: Genera host casuali indirizzi IP, verifica se supportano OpenSSL, li testa per verificare se sono vulnerabili a CVE-2014-0160 bug di Heartbeat Buffer over-read e salva g...

7.5CVSS7AI score0.99999EPSS
SaveExploits93
Kitploit
Kitploit
added 2026/08/28 12:10 p.m.3 views

heartbleed-proof-of-concept

Heartbleed CVE-2014-0160 Configurazione È necessario docker per eseguire la configurazione. L'exploit genera dinamicamente i byte casuali dal messaggio Client Hello, pertanto sarà necessario collegare la libreria durante la compilazione dell'eseguibile. Il pacchetto richiesto da installare, per...

7.5CVSS7AI score0.99999EPSS
SaveExploits93
Kitploit
Kitploit
added 2026/08/28 12:05 p.m.2 views

CVE-2019-19204

CVE-2019-19204 Um problema foi descoberto no Oniguruma 6.x anterior a 6.9.4rc2. Na função fetchintervalquantifier anteriormente conhecida como fetchrangequantifier em regparse.c, PFETCH é chamado sem verificar PEND. Isso leva a uma leitura além do limite do buffer baseada em heap. Pesquisador:...

7.5CVSS6.8AI score0.06889EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/08/28 12:04 p.m.2 views

CVE-2019-19203

CVE-2019-19203 In Oniguruma 6.x vor 6.9.4rc2 wurde ein Problem entdeckt. In der Funktion gb18030mbcenclen in der Datei gb18030.c wird ein UChar-Zeiger dereferenziert, ohne zu prüfen, ob er das Ende der gefundenen Zeichenkette überschritten hat. Dies führt zu einem Heap-basierten Pufferüberlesen...

7.5CVSS6.7AI score0.04052EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/08/28 11:44 a.m.2 views

CVE-2021-40154

CVE-2021-40154 Vulnerabilidades de Buffer Over Read na Programação no Sistema ISP via USB do LPC55S69 e K82 POC para testar a vulnerabilidade de BootROM encontrada na Revisão A2 das séries LPC55S69 e K82. A vulnerabilidade é corrigida em dispositivos mais novos com a nova Revisão A3 para o...

6.1CVSS6.3AI score0.0073EPSS
SaveExploits1References1
Kitploit
Kitploit
added 2026/08/28 12:50 a.m.3 views

CVE-2019-19204

CVE-2019-19204 تم اكتشاف مشكلة في Oniguruma 6.x قبل الإصدار 6.9.4rc2. في الدالة fetchintervalquantifier المعروفة سابقًا باسم fetchrangequantifier في ملف regparse.c، يتم استدعاء PFETCH دون التحقق من PEND. يؤدي هذا إلى قراءة تتجاوز حدود المخزن المؤقت في الكومة heap-based buffer over-read. الباحث:...

7.5CVSS6.9AI score0.06889EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/08/28 12:50 a.m.5 views

CVE-2019-19203

CVE-2019-19203 È stato scoperto un problema in Oniguruma 6.x prima della versione 6.9.4rc2. Nella funzione gb18030mbcenclen nel file gb18030.c, un puntatore UChar viene dereferenziato senza verificare se ha superato la fine della stringa corrispondente. Ciò porta a una lettura eccessiva del buffe...

7.5CVSS6.9AI score0.04052EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/08/27 1:07 p.m.6 views

heartpatch.us

heartpatch.us In costruzione Correzione delle vulnerabilità Heartbleed OpenSSL sui server in tutto il World Wide Web. Ispirazione Heartbleed è un bug di sicurezza nella libreria crittografica OpenSSL, un'implementazione ampiamente utilizzata del protocollo Transport Layer Security TLS. È stato...

5.7AI score
SaveExploits0
Kitploit
Kitploit
added 2026/08/27 10:10 a.m.3 views

heartbleed

Heartbleed Bug Descrizione dello scenario Il bug Heartbleed è un esempio di attacco informatico che sfrutta una vulnerabilità nella libreria OpenSSL. In breve, un passaggio di validazione mancante nella libreria OpenSSL potrebbe consentire a un hacker di accedere a informazioni sensibili su un...

5.4AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/08/27 5:03 a.m.4 views

Heartbleed-PoC-Exploit-Script

Heartbleed-PoC-Exploit-Script Этот скрипт на Python, реализующий Proof-of-Concept PoC, обнаруживает уязвимость Heartbleed CVE-2014-0160 путём выполнения TLS-рукопожатия с расширением heartbeat и отправки специально сформированного heartbeat-запроса. Он анализирует ответы сервера для выявления...

7.5CVSS7.5AI score0.99999EPSS
SaveExploits93References1
Kitploit
Kitploit
added 2026/08/27 4:15 a.m.4 views

CVE-2026-7482

🚨 CVE-2026-7482: Heap Buffer Over-Read in Ollama 📝 Descrizione Il CVE-2026-7482 identifica una vulnerabilità critica di lettura fuori dai limiti nell'heap Heap Buffer Over-Read negli endpoint /api/create e /api/push di Ollama , un framework open source per eseguire modelli linguistici locali...

9.1CVSS6.4AI score0.02241EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/08/26 7:56 p.m.7 views

CVE-2026-47729

🦑 CVE-2026-47729 - Squidbleed ⚠️ Der alte Cousin von Heartbleed, versteckt in Squid seit 1997. ✨ Funktionen Single-file PoC — Keine Abhängigkeiten Böswilliger FTP-Server, der NetWare-Banner nachahmt + abgeschnittene LIST-Antwort Echtzeit-Erkennung und -Dekodierung von Basic Auth - und Bearer...

6.5CVSS6.3AI score0.01503EPSS
SaveExploits1References1
Kitploit
Kitploit
added 2026/08/26 7:35 a.m.4 views

cve-2022-21877

POC CVE-2022-21877 Questo repository contiene un POC per la CVE-2022-21877, scoperto da Quang Linh, che lavora presso STAR Labs. Si tratta di una fuga di informazioni trovata all'interno del driver spaceport.sys. Un post di blog di accompagnamento può essere trovato a questo indirizzo. Utilizzo P...

5.5CVSS6.5AI score0.02894EPSS
SaveExploits1References1
Rockylinux
Rockylinux
added 2026/08/26 12:04 a.m.8 views

nginx:1.26 security update

An update is available for nginx, module.nginx. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list nginx is a web and proxy server supporting HTTP and other...

8.8CVSS7.2AI score0.0071EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/08/25 10:10 p.m.3 views

mongobleed

mongobleed CVE-2025-14847 Exploit für die Offenlegung von MongoDB-Heap-Speicher durch Puffer-Overread bei OPCOMPRESSED. Verwendung root@kitploit: $ bundle exec ruby mongobleed.rb --help Usage: mongobleed.rb options --host HOST Target host default: localhost --port PORT Target port default: 27017...

8.7CVSS7.8AI score0.83218EPSS
SaveExploits39References1
RedHat Linux
RedHat Linux
added 2026/08/25 7:06 p.m.15 views

Important: Red Hat Security Advisory: nginx:1.26 security update

An update for the nginx:1.26 module is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

8.8CVSS7.2AI score0.0071EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
added 2026/08/25 7:06 p.m.5 views

nginx: NGINX: Heap buffer over-read allows memory modification or denial of service

A vulnerability in NGINX's ngxhttpssimodule allows an unauthenticated MITM attacker to trigger a heap buffer over-read by manipulating upstream server responses. This requires SSI, proxypass, and proxybuffering off to be configured, and can result in memory modification or a Denial of Service DoS...

8.3CVSS6.6AI score0.0045EPSS
SaveExploits0References5
Rockylinux
Rockylinux
added 2026/08/25 6:04 p.m.5 views

nginx:1.24 security update

An update is available for nginx, module.nginx. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list nginx is a web and proxy server supporting HTTP and other...

8.8CVSS7.2AI score0.0071EPSS
SaveExploits0
OSV
OSV
added 2026/08/25 6:04 p.m.5 views

RLSA-2026:59490 Important: nginx:1.24 security update

nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security Fixes: nginx: NGINX: Heap buffer over-read allows memory modification or denial of service CVE-2026-56434 nginx: NGINX: Memory disclosure and denial o...

8.2CVSS7.2AI score0.0071EPSS
SaveExploits0References4
Rows per page
Query Builder