CVE-2023-21554

CVE-2023-21554-PoC CVE-2023-21554 Windows MessageQueuing PoC， Poc की सफलता का संकेत mqsvc.exe प्रक्रिया का क्रैश होना है, और कोई पॉप-अप संदेश नहीं आता, जिसे प्रक्रिया मॉनिटर जैसे प्रोग्राम में देखना होता है Windows टर्मिनल या कमांड प्रॉम्प्ट में कमांड निष्पादित करें python poc.py पीड़ित PC का IP...

CVE-2025-63408

CVE-2025-63408 path-traversal.py: Uma reimplementação de https://github.com/eric-m-holub/double-agent/blob/main/doubleagent.py Utiliza uuids como parte do nome de arquivo solicitado para evitar que o servidor remoto falhe após a primeira exploração de path traversal. run.py / shell.py: wrapper...

CVE-2026-31402

🛡️ CVE-2026-31402 – Overflow dell'heap nella cache di replay LOCK NFSv4 CVE-2026-31402: bug NFS di Linux nascosto per 23 anni 📌 Panoramica CVE-2026-31402 è una vulnerabilità di overflow dell'heap nella cache di replay LOCK NFSv4.0 del kernel Linux. Deriva dalla gestione impropria di risposte più...

CVE-2026-23918

CVE-2026-23918 Apache modhttp2 Double-Free Detektor https://github.com/user-attachments/assets/d6c30e58-548c-4b6d-9ba3-baa667238a58 root@kitploit: python3 h2ghost.py -h usage: h2ghost.py -h --host HOST --port PORT --tls --no-tls --iterations ITERATIONS --burst-n BURSTN --timeout TIMEOUT...

CVE-2026-25075-check

CVE-2026-25075 Verwundbarkeitsbewertungstool Erkennen Sie sicher, ob ein strongSwan VPN-Server anfällig für CVE-2026-25075 ist, ohne Störungen zu verursachen. Siehe den vollständigen Artikel im Bishop Fox Blog. Beschreibung CVE-2026-25075 ist eine Integer-Unterlauf-Schwachstelle im EAP-TTLS-Plugi...

CVE-2024-38355-PoC

Demo CVE-2024-38355 Crash di Socket.IO Questo progetto è una Proof of Concept che dimostra CVE-2024-38355 , una vulnerabilità di denial-of-service in socket.io. Il progetto è stato creato a scopo educativo per mostrare il meccanismo di attacco e come proteggere le applicazioni. Informazioni sulla...

CVE-2025-29632

Author: HanyiLuo, Yuqi Huo CVE-2025-29632 le informazioni sulla vulnerabilità coperta da CVE-2025-29632 Versioni interessate: 4.0.0 e versioni precedenti Quando free5gc elabora il messaggio InitialUEMessage, controlla solo se il riferimento nASPDU è nil cioè se è un puntatore nullo, ma non verifi...

CVE-2022-46485

CVE-2022-46485 ngDoS - ngSurvey Note: la domanda "slider" potrebbe essere vulnerabile anche con un grande intero invece di una stringa. Non è stato possibile confermarlo nel mio ambiente locale. Passaggi per lo sfruttamento Aprire la pagina del sondaggio e individuare un campo di testo o commento...

CVE-2026-82256

SvelteKit before 2.69.1 fails to properly validate remote form function payload sizes, allowing attackers to crash the Node process by sending large payloads. Repeated exploitation causes denial of service by repeatedly crashing the application process...

CVE-2026-40015

An attacker that has valid credentials can open many connections to the imap-hibernate service and send invalid commands, which can intermittently cause an out-of-bounds read and crash the process. The crash interrupts hibernated IMAP sessions handled by the affected process, which can cause...

CVE-2022-26937

PoC di crash di Windows Network File System CVE-2022-26937 root@kitploit: nt!KeBugCheckEx: fffff8038996efa0 48894c2408 mov qword ptr rsp+8,rcx ss:0018:ffffd000d589ae60=0000000000000139 1: kd !analyze -v Bugcheck Analysis KERNELSECURITYCHECKFAILURE 139 A kernel component has corrupted a critical...

CVE-2020-11019

CVE-2020-11019 In FreeRDP versioni minori o uguali alla 2.0.0, quando si esegue con il logger impostato su "WLOGTRACE", potrebbe verificarsi un crash dell'applicazione a causa della lettura di un indice di array non valido. I dati potrebbero essere stampati come stringa sul terminale locale. Il...

pwnedit

pwnedit CVE-2021-3156 - Sudo Baron Samedit Bevor wir in die technischen Details eintauchen, können Sie hier eine kurze Zusammenfassung ansehen: https://www.youtube.com/watch?v=TLa2VqcGGEQ Episoden 1. Files | Blog | Video Warum sudo als Forschungsziel wählen? 2. Files | Blog | Video Wie Fuzzing mi...

EUVD-2026-67582

SvelteKit before 2.69.1 fails to properly validate remote form function payload sizes, allowing attackers to crash the Node process by sending large payloads. Repeated exploitation causes denial of service by repeatedly crashing the application process...

CVE-2026-82256

SvelteKit versions prior to 2.69.1 contain a denial-of-service vulnerability in its remote form function handling. The root cause is a failure to properly validate payload sizes, allowing an unauthenticated network attacker to crash the Node process by sending abnormally large payloads. Repeated ...

CVE-2026-42395

A host listed as a trusted proxy can send forwarding information containing a NUL byte, which crashes the login process on the following login attempt. The login process is terminated, which can cause degradation or denial of service for logins. Deployments that do not configure trusted proxies a...

CVE-2026-40015

An attacker that has valid credentials can open many connections to the imap-hibernate service and send invalid commands, which can intermittently cause an out-of-bounds read and crash the process. The crash interrupts hibernated IMAP sessions handled by the affected process, which can cause...

EUVD-2026-67665

An attacker that has valid credentials can open many connections to the imap-hibernate service and send invalid commands, which can intermittently cause an out-of-bounds read and crash the process. The crash interrupts hibernated IMAP sessions handled by the affected process, which can cause...

CVE-2026-33605

An unauthenticated attacker can crash the ManageSieve login process by sending a small malformed command before authenticating. If running in high-security mode default for community releases, only the attacker's own connection is terminated. If running in high-performance mode default for Pro...

CVE-2026-33605

An unauthenticated attacker can crash the ManageSieve login process by sending a small malformed command before authenticating. If running in high-security mode default for community releases, only the attacker's own connection is terminated. If running in high-performance mode default for Pro...