CVE-2025-24054-PoC

CVE-2025-24054 PoC Une simple preuve de concept pour CVE-2025-24054 – Vulnérabilité de divulgation de hachage NTLM via une bibliothèque Windows .library-ms. ⚠️ Pour usage éducatif et en laboratoire autorisé uniquement Description CVE-2025-24054 permet à un attaquant de forcer un système Windows à...

CVE-2023-23397

Preuve de concept de CVE-2023-23397 Ceci est une preuve de concept PoC d'exploit pour CVE-2023-23397, une vulnérabilité dans le client Windows Microsoft Outlook. Prérequis Python 3 Paquet pywin32 Comment utiliser Windows 1. Installez le paquet pywin32 requis en exécutant pip install pywin32. 2...

RedLine-Stealer-C2-Defender-Bypass-Payload-Analysis

1. Connexion C2 – IP 198.46.86.63 L'analyse réseau révèle que RedLine Stealer établit une connexion vers l'adresse IP distante 198.46.86.63. Cette IP est probablement le serveur de commande et de contrôle C2 du maliciel, utilisé pour l'exfiltration de données et la livraison de commandes...

CVE-2026-98173

A flaw was found in the Linux kernel's SMB client. A race condition in multichannel connection management allows network interface structures to be freed while still in use during concurrent interface refreshes. A malicious server or an attacker triggering interface updates can exploit this...

CVE-2015-8522.RCE

CVE-2015-8522 L'application Tivoli FastBack Server 6.1.4 est vulnérable à un débordement de tampon basé sur la pile permettant à des acteurs malveillants d'obtenir une Exécution de Code Arbitraire ACE via une connexion TCP distante. Le PoC fourni dans ce dépôt exploite cette vulnérabilité à la fo...

CVE-2019-16279

CVE-2019-16279 （CVE-2019-16279）dos Cette faille exploite une erreur mémoire lors de l'envoi d'un trop grand nombre de \r\n dans une seule connexion. Exemple $ curl http://127.0.0.1:8080 HELLO! $ ./CVE-2019-16279.sh 127.0.0.1 8080 $ curl http://127.0.0.1:8080 curl: 7 Failed to connect to 127.0.0.1...

CVE-2026-26898-Xiaomi-SSRF-HostHeaderInjection

CVE-2026-26898 : Xiaomi Mi Router 4A Gigabit - SSRF par injection d'en-tête Host -orange Résumé Une vulnérabilité de Server-Side Request Forgery SSRF existe dans le Xiaomi Mi Router 4A Gigabit Edition. L'interface web du routeur ne valide pas l'en-tête HTTP Host, permettant à un attaquant non...

CVE-2021-4044

Script de vérification SSL Ce dépôt contient un script Python qui vérifie la version d'OpenSSL sur votre système et teste les connexions SSL/TLS vers un site web fourni par l'utilisateur. Le script est conçu pour identifier si le système est affecté par CVE-2021-4044 et pour tester la gestion des...

CLEANSTART-2026-FO83563 HttpClient based on the classic i/o model fails to correctly release the underlying connection back to the connection manager if it encounters an invalid or unsupported `Content-Encoding` header va...

Security vulnerability affects the wso2am package. HttpClient based on the classic i/o model fails to correctly release the underlying connection back to the connection manager if it encounters an invalid or unsupported Content-Encoding header value in the response message...

CLEANSTART-2026-DU50548 malicious SSH peer could send unsolicited global request responses to fill an internal buffer, blocking the connection's read loop

CVE-2026-39830 affects multiple packages. A malicious SSH peer could send unsolicited global request responses to fill an internal buffer, blocking the connection's read loop. See references for individual vulnerability details...

DEBIAN-CVE-2026-107315

pgjdbc, the PostgreSQL JDBC Driver, versions 42.7.4 through 42.7.13 pads a value that is shorter than its declared length with bytes left in its send buffer instead of zeros, and the server stores those bytes as part of the value. The bytes are messages the driver sent earlier on the same...

CVE-2026-107230

The AsyncHttpClient AHC library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. From 2.0.0 until 3.0.14, connection-pool partitioning still omits identity-defining fields for Kerberos, SPNEGO, NTLM, and authenticated proxy connections. Logins...

UBUNTU-CVE-2026-107230

The AsyncHttpClient AHC library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. From 2.0.0 until 3.0.14, connection-pool partitioning still omits identity-defining fields for Kerberos, SPNEGO, NTLM, and authenticated proxy connections. Logins...

PT-2026-108309

Name of the Vulnerable Software and Affected Versions Go affected versions not specified Description When http.Transport sends an HTTP/1 CONNECT request containing a non-empty Request.Body, the body is written directly to the connection without framing following the request headers. If the server...

Apache Avatica 1.29.0 JDBC Connection Property Injection

Apache Calcite Avatica versions 1.29.0 and 1.28.0 copy unauthenticated client-supplied JDBC connection properties into backend connections. The included proof of concept injects properties that may enable local file disclosure or deserialization under specific backend conditions. !/usr/bin/env...

EUVD-2026-94650

pgjdbc, the PostgreSQL JDBC Driver, versions 42.7.4 through 42.7.13 pads a value that is shorter than its declared length with bytes left in its send buffer instead of zeros, and the server stores those bytes as part of the value. The bytes are messages the driver sent earlier on the same...

CVE-2018-6537.RCE

CVE-2018-6537 يستهدف الثغرة Sync Breeze التي تعمل على Windows 10 x86, build: 16299 ، وتؤثر على الإصدار 10.4.18 ، حيث يمكن للمهاجم غير المصادق تنفيذ SEH overflow عبر اتصال TCP، مما يؤدي إلى تنفيذ تعليمات برمجية عن بُعد. يفترض هذا الاستغلال تعطيل جميع وسائل التخفيف الأمنية مثل ASLR, DEP. العملية 1...

CVE-2026-107282

The AsyncHttpClient AHC library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. Prior to 3.0.13 and 2.16.1, cross-host request replay updates the current request but leaves the target request and related proxy context pointing at the original...

DEBIAN-CVE-2026-107230

The AsyncHttpClient AHC library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. From 2.0.0 until 3.0.14, connection-pool partitioning still omits identity-defining fields for Kerberos, SPNEGO, NTLM, and authenticated proxy connections. Logins...

CVE-2026-107281

The AsyncHttpClient AHC library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. Prior to 3.0.13 and 2.16.1, the HTTP/1.1 connection-pool key excludes the authenticated principal for connection-oriented NTLM and Negotiate authentication. A pooled...