CVE-2021-38647-POC-and-Demo-environment

Detalles OMIGod - CVE-2021-38647 Open Management Infrastructure OMI, anteriormente conocido como NanoWBEM es un servidor de gestión de código abierto del Modelo de Interfaz Común CMI de Microsoft y The Open Group. OMI es un agente de software presente en la mayoría de las máquinas virtuales Linux...

CVE-2025-0108-Authentication-Bypass-checker

Esta herramienta comprueba si un dispositivo PAN-OS objetivo es vulnerable a la vulnerabilidad de omisión de autenticación CVE-2025-0108. Envía una solicitud HTTP manipulada al objetivo y analiza la respuesta para determinar si el dispositivo es explotable. Uso IP única root@kitploit: python...

CVE-2020-5902-Vuln-Checker

Comprobador de Vulnerabilidad CVE-2020-5902 Mientras investigábamos la vulnerabilidad con otros investigadores, se nos ocurrió que la mayoría de las formas actuales de probar la vulnerabilidad pueden considerarse una forma de compromiso del sistema. Queríamos desarrollar una forma de probar la...

CVE-2026-9336

IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to a denial of service, caused by sending a specially-crafted HTTP request to an administrative endpoint. A remote attacker could exploit this vulnerability to cause the server to exhaust filesystem space...

EUVD-2026-75677

IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to a denial of service, caused by sending a specially-crafted HTTP request to an administrative endpoint. A remote attacker could exploit this vulnerability to cause the server to exhaust filesystem space...

CVE-2026-23744-Remote-Code-Execution-POC

CVE-2026-23744 - MCPJam inspector Remote-Code-Execution: Proof Of Concept POC MCPJam inspector 3. Run the exploit root@kitploit: python3 exploit.py...

CVE-2026-79522

An out-of-bounds read in the gfdmgetchunkdata function src/utils/downloader.c of GPAC v26.07.0 allows attackers to cause a Denial of Service DoS via sending a crafted HTTP request. Fixed in 2fd5a06ab226767900fd86edb5a1e8bfc1010640...

westone-CVE-2020-14883-scanner

westone-CVE-2020-14883-scanner Un atacante remoto puede construir una solicitud HTTP especial para tomar el control de la Consola del Servidor WebLogic sin autenticación. Instalación y Uso git clone https://github.com/Osyanina/westone-CVE-2020-14883-scanner.git cd westone-CVE-2020-14883-scanner c...

CVE-2026-79522

GPAC v26.07.0 contains an out-of-bounds read in the gf_dm_get_chunk_data function (src/utils/downloader.c), which can be triggered by sending a crafted HTTP request, leading to a Denial of Service . The CVSS 3.1 score is 6.5 (Medium) , with a network attack vector, low complexity, no privileges r...

EUVD-2026-75166

An out-of-bounds read in the gfdmdatareceived function downloader.c of GPAC v26.07.0 allows attackers to cause a Denial of Service DoS via sending a crafted HTTP request. Fixed in 2fd5a06ab226767900fd86edb5a1e8bfc1010640...

CVE-2026-79522

An out-of-bounds read in the gfdmgetchunkdata function src/utils/downloader.c of GPAC v26.07.0 allows attackers to cause a Denial of Service DoS via sending a crafted HTTP request. Fixed in 2fd5a06ab226767900fd86edb5a1e8bfc1010640...

RCE_CVE-2024-7954-

RCECVE-2024-7954- El plugin porteplume utilizado por SPIP antes de 4.30-alpha2, 4.2.13 y 4.1.16 es vulnerable a una ejecución de código arbitrario. Un atacante remoto no autenticado puede ejecutar PHP arbitrario como el usuario de SPIP enviando una solicitud HTTP manipulada. CRÍTICO Exploit: POST...

EUVD-2026-51230

IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.7 are vulnerable to a denial of service via a crafted HTTP request...

CVE-2026-20146

Cisco Identity Services Engine (ISE) and ISE-PIC are affected by CVE-2026-20146. The issue stems from improper validation of user-supplied input, enabling a remote, authenticated attacker (with valid administrative credentials) to perform path traversal via a crafted HTTP request and read or dele...

PT-2026-60218

Name of the Vulnerable Software and Affected Versions Cisco Identity Services Engine versions prior to 3.3 Cisco Identity Services Engine versions 3.3 through 3.3 before Patch 12 Cisco Identity Services Engine versions 3.4 through 3.4 before Patch 7 Cisco Identity Services Engine versions 3.5...

CVE-2026-41721

A flaw was found in Spring Data Commons. A remote attacker can exploit this vulnerability by sending a specially crafted HTTP request when Spring Data Web Support is enabled with a Controller method using @ProjectedPayload. This can cause the application to allocate excessive memory, leading to a...

PT-2026-54702

Name of the Vulnerable Software and Affected Versions Cisco Catalyst Center affected versions not specified Description Insufficient validation of user-supplied input allows an unauthenticated, remote attacker to read arbitrary files from a restricted container. This is achieved by sending a...

CVE-2026-36821

Shenzhen Tenda Technology Co., Ltd Tenda W20E v15.11.0.6 was discovered to contain a buffer overflow in the picCropName parameter of the formCropAndSetWewifiPic function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted HTTP request...

CVE-2026-36796

Shenzhen Tenda Technology Co., Ltd Tenda G0 v15.11.0.5 was discovered to contain a stack overflow in the picCropName parameter of the formCropAndSetWewifiPic function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted HTTP request...

CVE-2026-36792

Shenzhen Tenda Technology Co., Ltd Tenda W3 Wireless Router v1.0.0.32204 was discovered to contain a stack overflow in the wlradio parameter of the formWifiRadioSet function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted HTTP request...