exploit-CVE-2016-7434

CVE-2016-7434 استغلال ثغرة رفض الخدمة في ntpd يعاني ntpd من خطأ يتمثل في الإشارة إلى مؤشر فارغ null pointer reference ويمكن تحفيز هذا الخطأ لتعطيل التطبيق. ووفقًا لموقع NTP.org: «إذا تم تكوين ntpd للسماح بطلبات استعلام mrulist من خادم يرسل حزمة خبيثة مصمّمة بعناية، فسيتعطل ntpd عند استلام حزمة...

CVE-2015-5374-DoS-PoC

CVE-2015-5374 Siemens SIPROTEC 4 und SIPROTEC Compact EN100 Ethernet-Modul CVE-2015-5374 Siemens SIPROTEC 4 and SIPROTEC Compact EN100 Ethernet Module ... Done, say goodbye! Metasploit-Modul Dieses Modul sendet ein speziell präpariertes Paket an Port 50000/UDP, das einen Denial-of-Service des...

CVE-2024-38355-PoC

Demo CVE-2024-38355 Crash di Socket.IO Questo progetto è una Proof of Concept che dimostra CVE-2024-38355 , una vulnerabilità di denial-of-service in socket.io. Il progetto è stato creato a scopo educativo per mostrare il meccanismo di attacco e come proteggere le applicazioni. Informazioni sulla...

CVE-2012-5960-PoC

CVE-2012-5960-PoC CVE-2012-5960, CVE-2012-5959 Proof of Concept Un appunto veloce su qualcosa con cui ho giocato di recente. root@kitploit: !/usr/bin/python2 -- coding: utf-8 -- Usage: python2 libupnpDoSPoC.py import socket TARGET = 'TARGETIP' ''' normaltraffic = \ 'M-SEARCH HTTP/1.1\r\n' ...

cve-2015-5477

cve-2015-5477 BIND9 TKEY assert DoS CVE-2015-5477 के लिए PoC root@kitploit: $ ps awux | grep -v grep | grep bind bind 2373 0.0 2.2 141164 13424 ? Ssl 14:58 0:00 /var/named/chroot/sbin/named -u bind -t /var/named/chroot -c /etc/named.conf $ python tkill.py 127.0.0.1 Begin emission: ..Finished to...

CVE-2014-0224

Ce depot n’a pas de fichier README...

CVE-2026-76879

A flaw in Wireshark's C12.22 protocol dissector allows remote attackers to trigger a Denial of Service DoS. By sending a specially crafted network packet or capture file, an attacker can crash the application, disrupting network analysis capabilities. Mitigation Avoid analyzing capture files or...

Astra Linux – Vulnerability in Chromium

Before version 91.0.4472.77, using free after in WebRTC in Google Chrome allowed a remote attacker to potentially exploit heap corruption through a crafted SCTP packet...

CVE-2026-76880

A flaw was found in Wireshark. This vulnerability allows a remote attacker to cause a denial of service DoS by sending a specially crafted Universal Mobile Telecommunications System UMTS RRC protocol packet. The flaw resides in the UMTS RRC protocol dissector, which can lead to a crash of the...

CVE-2026-76917

A flaw was found in Wireshark. A heap-based buffer overflow vulnerability exists within the Bluetooth Audio/Video Remote Control Profile AVRCP protocol dissector. This flaw can be triggered by a local user processing a specially crafted Bluetooth AVRCP packet, which requires user interaction...

Linux Distros Unpatched Vulnerability : CVE-2026-75147

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FFmpeg before commit 983dae9 contains an out-of-bounds read in the AV1 RTP packetizer libavformat/rtpencav1.c. The keyframe detection loop that searches for a...

DEBIAN-CVE-2026-76923

Bluetooth HFP Profile protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...

CVE-2026-76886 Heap-based Buffer Overflow in Wireshark

C12.22 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...

CVE-2026-72408

A flaw was found in the Linux kernel's geneve component. An attacker can send a specially crafted Geneve Generic Network Virtualization Encapsulation packet that exploits a discrepancy in how GRO Generic Receive Offload hints are processed. The genevegrocomplete function processes these hints...

CVE-2026-72712

A flaw was found in Nmap. A remote attacker can exploit this denial of service vulnerability by sending a specially crafted packet that includes a zero-length Transmission Control Protocol TCP option. This malformed packet forces the application to enter an infinite loop during packet processing,...

EUVD-2026-56821

Nmap versions up to and including 7.99 contains a denial of service vulnerability that allows remote attackers to crash the application by sending a crafted packet containing a zero-length TCP option. The malformed packet forces the Packet:parseoptions function in nselib/packet.lua to allocate...

PT-2026-69127

Name of the Vulnerable Software and Affected Versions gopacket versions prior to 1.7.1 Description Multiple layer decoders use attacker-controlled lengths, counts, or offsets before validating them against packet buffers. This allows a crafted packet processed through DecodingLayerParser or...

CVE-2026-64194

A flaw was found in Net::DNS. A remote attacker can exploit this vulnerability by sending a specially crafted DNS packet with deep compression pointer chains. This can cause excessive recursion in the Net::DNS::DomainName::decode function, leading to stack exhaustion and a Denial of Service DoS f...

SUSE CVE-2026-69185

Socket.IO enables bidirectional and low-latency communication for every platform. Prior to 4.2.7, 3.4.5, and 3.3.6, a specially crafted Socket.IO packet can make the server wait for a large number of binary attachments and buffer them, which can be exploited to make the server run out of memory...

CVE-2017-20242

Keysight IxChariot Endpoint before 9.5.102 contains a stack-based buffer overflow. An unauthenticated remote attacker can send a specially crafted packet to crash the endpoint or potentially execute arbitrary code...