CVE-2026-86098

ntop nDPI versions before 6.0 contain a heap buffer overflow in the ndpi_json_string_escape function, which writes beyond caller-supplied buffer boundaries. An attacker can trigger the overflow by supplying crafted network packet data — including TLS SNI , HTTP headers , or DNS names — that reach...

Project-CVE-2026-50751

CVE-2026-50751 Тестирование безопасности IKEv1 Описание Этот Python-скрипт представляет собой фреймворк для тестирования безопасности, предназначенный для работы с CVE-2026-50751 — уязвимостью обхода аутентификации IKEv1 VPN в Check Point. Возможности Сканирует IP-адреса на наличие сервисов IKEv1...

CVE-2021-33044

CVE-2021-33044 Dahua IPC/VTH/VTO devices auth bypass exploit About: The identity authentication bypass vulnerability found in some Dahua products during the login process. Attackers can bypass device identity authentication by constructing malicious data packets. root@kitploit: use - python3...

CVE-2020-16899

CVE-2020-16899: Vulnerabilidad de denegación de servicio en TCP/IP de Microsoft Windows Puntuación CVSS: 7.5 Vector CVSS: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C Resumen El 13 de octubre, Microsoft anunció una vulnerabilidad crítica en la pila IPv6 de Windows que permite a un...

Cve-2024-38063

CVE-2024-38063 Descripción Este repositorio contiene detalles y código de exploit potencial para CVE-2024-38063, una vulnerabilidad crítica de ejecución remota de código RCE en TCP/IP de Windows. La vulnerabilidad permite a un atacante no autenticado ejecutar código arbitrario en el sistema...

Cisco Unified IP Conference Station 7937G - Denial-of-Service

Cisco Unified IP Conference Station 7937G 1-4-4-0 through 1-4-5-7 allows attackers to restart the device remotely via specially crafted packets that can cause a denial-of-service condition. Note: We cannot prove this vulnerability exists. Out of an abundance of caution, this CVE is being assigned...

ThinkCMF X2.2.2 - Remote Code Execution

ThinkCMF X2.2.2 and below contain a remote code execution caused by processing crafted packets, letting attackers execute arbitrary code remotely, exploit requires sending malicious packets. id: CVE-2020-20601 info: name: ThinkCMF X2.2.2 - Remote Code Execution author: pikpikcu severity: critical...

CVE-2022-42475-RCE-POC

CVE-2022-42475-RCE-POC 漏洞名称 CVE-2022-42475 Fortinet RCE Vulnerability POC 漏洞成因 Due to a validation flaw in user input by sslvpnd, an unauthenticated attacker can trigger a buffer overflow by sending specially crafted packets, ultimately achieving arbitrary code execution on the target system. 受影响...

tomcat-cluster-session-sync-exp

The tool is only for security research and internal self-inspection. It is prohibited to use the tool for illegal attacks. The user shall bear all consequences. tomcat cluster sync-session exploit This is an exploit targeting deserialization vulnerabilities caused by insecure configurations lack ...

CVE-2026-73774

A buffer overflow vulnerability exists in the underlying operating system of AOS-CX that could lead to unauthenticated disclosure of sensitive information by sending specially crafted packets to the affected system. Successful exploitation of this vulnerability could result in limited disclosure ...

CVE-2026-73772

Buffer overflow vulnerabilities exist in an underlying service of AOS-CX that could lead to an unauthenticated denial-of-service condition by sending specially crafted packets to the affected device. Successful exploitation of these vulnerabilities results in a disruption of normal operation of t...

CVE-2026-73759

Vulnerabilities in AOS-CX could allow an unauthenticated remote malicious actor to trigger a denial-of-service condition by sending specially crafted packets. Successful exploitation of these vulnerabilities results in disruption of normal operation on affected devices...

CVE-2026-73749

Multiple vulnerabilities exist in a daemon of AOS-CX that may allow for improper processing of malformed input. An unauthenticated remote attacker could exploit these vulnerabilities by sending specially crafted packets to the affected service. Successful exploitation could result in remote code...

CVE-2026-73774

A buffer overflow vulnerability in the underlying operating system of AOS-CX allows an unauthenticated attacker on an adjacent network to send specially crafted packets, resulting in limited disclosure or modification of sensitive information and potential disruption of the affected system. The v...

EUVD-2026-69637

A buffer overflow vulnerability exists in the underlying operating system of AOS-CX that could lead to unauthenticated disclosure of sensitive information by sending specially crafted packets to the affected system. Successful exploitation of this vulnerability could result in limited disclosure ...

EUVD-2026-69635

Buffer overflow vulnerabilities exist in an underlying service of AOS-CX that could lead to an unauthenticated denial-of-service condition by sending specially crafted packets to the affected device. Successful exploitation of these vulnerabilities results in a disruption of normal operation of t...

CVE-2026-73772 Unauthenticated Buffer Overflow Vulnerabilities lead to Denial-of-Service in AOS-CX

Buffer overflow vulnerabilities exist in an underlying service of AOS-CX that could lead to an unauthenticated denial-of-service condition by sending specially crafted packets to the affected device. Successful exploitation of these vulnerabilities results in a disruption of normal operation of t...

CVE-2026-73772

CVE-2026-73772 affects an underlying service in HPE AOS-CX , the network operating system. The root cause is a buffer overflow that can be triggered by sending specially crafted packets to the affected device, requiring no authentication or user interaction. Successful exploitation causes a denia...

CVE-2026-73759

AOS-CX (HPE) contains vulnerabilities that allow an unauthenticated attacker on the adjacent network to trigger a denial-of-service condition by sending specially crafted packets , resulting in disruption of normal device operation. The CVSS v3.1 score is 6.5 (Medium) , reflecting low attack comp...

EUVD-2026-69623

Vulnerabilities in AOS-CX could allow an unauthenticated remote malicious actor to trigger a denial-of-service condition by sending specially crafted packets. Successful exploitation of these vulnerabilities results in disruption of normal operation on affected devices...