6076 matches found
CVE-2026-74735
A flaw was found in the Linux kernel's L2TP Layer 2 Tunneling Protocol implementation. A local user could trigger a reference count leak by closing specific /proc or /sys files related to L2TP tunnels and sessions before fully reading their content. This could lead to resource exhaustion,...
cve-2025-24985
cve-2025-24985 Berechne die Anzahl der Cluster einer VHD-Datei, um einen Überlauf zu erkennen. Unterstützte Bootsektoren: MBR GPT Verwendung root@kitploit: python -m cve202524985 -f Einrichtung Nix root@kitploit: Mit direnv: direnv allow Oder ohne direnv: nix develop Peotry WIP Docker WIP TODO:...
CVE-2026-75005
Inefficient Algorithmic Complexity vulnerability in Apache APISIX. A single small request can pin a gateway worker at 100% CPU for an extended period in graphql-limit-count routes. This issue affects Apache APISIX: 3.17.0. Users are recommended to upgrade to version 3.18.0, which fixes the issue...
CVE-2026-75005 Apache APISIX: Unauthenticated CPU-exhaustion DoS
Inefficient Algorithmic Complexity vulnerability in Apache APISIX. A single small request can pin a gateway worker at 100% CPU for an extended period in graphql-limit-count routes. This issue affects Apache APISIX: 3.17.0. Users are recommended to upgrade to version 3.18.0, which fixes the issue...
EUVD-2026-66957
Inefficient Algorithmic Complexity vulnerability in Apache APISIX. A single small request can pin a gateway worker at 100% CPU for an extended period in graphql-limit-count routes. This issue affects Apache APISIX: 3.17.0. Users are recommended to upgrade to version 3.18.0, which fixes the issue...
CVE-2026-75005
Apache APISIX 3.17.0 is affected by an Inefficient Algorithmic Complexity vulnerability in graphql-limit-count routes, rated CVSS 4.0 8.7 (HIGH) . A single small request can pin a gateway worker at 100% CPU for an extended period, causing a denial-of-service. The attack requires no authentication...
EUVD-2026-66484
In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - bound the F54 report size to the allocated buffer rmif54work reads a diagnostics report from the device into f54-reportdata, sizing the transfer with rmif54getreportsize: reportsize = rmif54getreportsizef5...
jadx
JADX jadx - Dex to Java decompiler Command line and GUI tools for producing Java source code from Android Dex and Apk files !WARNING Please note that in most cases jadx can't decompile all 100% of the code, so errors will occur. Check Troubleshooting guide for workarounds. Main features: decompil...
CVE-2026-53365
CVE-2026-53365 — VsockDrop:iouring + AFVSOCK 零拷贝引用计数下溢,Page-Cache 改写提权 HackSpeak 分发镜像。本仓库为 MaherAzzouzi/vsockdrop 的分发镜像 ,代码与上游一致;上游未附 LICENSE,镜像按分发惯例采用 MIT License,Copyright c 2026 HackSpeak ,源码版权归原作者 MaherAzzouzi。 ⚠️ 包含完整本地提权LPEexploit ——会修改 /usr/bin/su 的 page-cacheCoW...
Sassy Social Share <= 3.3.3 - Cross-Site Scripting
The Sassy Social Share plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'urls' parameter called via the 'heateorssssharingcount' AJAX action in versions up to, and including, 3.3.3 due to insufficient input sanitization and output escaping. This makes it possible for...
ChurchCRM - SQL Injection
A vulnerability exists in ChurchCRM 5.13.0 and prior that allows an attacker to execute arbitrary SQL queries by exploiting a time-based blind SQL Injection vulnerability in the EditEventTypes functionality. The newCountName parameter is directly concatenated into an SQL query without proper...
WordPress Admin Word Count Column 2.2 - Local File Inclusion
The plugin does not validate the path parameter given to readfile, which could allow unauthenticated attackers to read arbitrary files on server running old version of PHP susceptible to the null byte technique. This could also lead to RCE by using a Phar Deserialization technique. id:...
EUVD-2026-66825
RFC6587SyslogDeserializer, used by the Spring Integration syslog TCP inbound adapter to decode RFC 6587 / RFC 5424 frames, trusts the sender-supplied octet count of an octet-counted frame and allocates a byte array of exactly that size with no upper bound. Spring Integration 7.1.0 Spring...
massdns
MassDNS A high-performance DNS stub resolver MassDNS is a simple high-performance DNS stub resolver targeting those who seek to resolve a massive amount of domain names in the order of millions or even billions. Without special configuration, MassDNS is capable of resolving over 350,000 names per...
snowpick
snowpick é um scanner de exposição do ServiceNow que identifica ACLs de widgets mal configuradas, controles de acesso da API REST e exposição de dados não autenticada. O ServiceNow expõe dados por meio de duas superfícies públicas comuns: os widgets do Service Portal e a Table REST API. Quando os...
CVE-2026-47859
RFC6587SyslogDeserializer, used by the Spring Integration syslog TCP inbound adapter to decode RFC 6587 / RFC 5424 frames, trusts the sender-supplied octet count of an octet-counted frame and allocates a byte array of exactly that size with no upper bound. Spring Integration 7.1.0 Spring...
CVE
cve : Une collection de code relative à CVE-2016-0728 divers auteurs Extraits de Linux, montrant l'évolution et la correction du bogue Code d'exploitation de Perception Point avec commentaires ajoutés expliquant chaque ligne. Un petit script qui utilise la fuite pour incrémenter le compteur...
automato
automato.rb automato uses native LDAP libraries to automate the collection and enumeration of various directory objects. This is incredibly useful during an internal penetration test. automato can also conduct password spraying attacks, and identify if a user is a local administrator against any...
CVE-2023-42283
Aviso Legal Apenas para fins educacionais! Detalhes Prova de conceito para CVE-2023-42283. Tyk Gateway é vulnerável a injeção SQL. Corrigido na versão 5.0.7. O parâmetro de URL 'apiid' de "https:///api/errors/count/...?res=day&p=...&apiversion=...&apiid=" é vulnerável a injeção SQL cega. Exploraç...