CVE-2021-26690---Apache-mod_session

Diffing de parches para CVE-2021-26690 - Apache modsession Esta vulnerabilidad es una desreferencia de puntero NULL dentro del módulo modsession de Apache. Causará una denegación de servicio para los procesos hijo de httpd de Apache. Mediante un bucle repetitivo, cada uno de los workers de Apache...

openSUSE 16: apr-util-devel / libapr-util1-0 / libapr-util1-0-dbd-mysql / etc (openSUSE-SU-2026:21672-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21672-1 advisory. - CVE-2025-49506: hash/password content leak via side channel timing attack against aprpasswordvalidate bsc1274237. - CVE-2026-32327: XML stack...

CVE-2017-2368

CVE-2017-2368 iOS 10.2.1 Maggiori informazioni qui: vincedes3.com/crash-message-app-iphone/...

CVE-2022-31901

CVE-2022-31901 Denial of Service DOS in Notepad++x86 in 8.4.3 e precedenti. Descrizione Attivazione della vulnerabilità, tramite l'apertura di due file di testo appositamente realizzati es. first.txt e second.txt come input a notepad++. Come esempio illustrativo di seguito, al 11/07/2022, viene...

cve-2015-3839_PoC

cve-2015-3839PoC PoC di cve-2015-3839 che può causare il crash dell'app SMS di Android DoS Ha funzionato bene sui miei dispositivi di test Nexus 5Android 4.4.4 e Nexus 5Android 5.0.1...

CVE-2026-62958

Una vulnerabilità in Libriscv permette all'attaccante di far crashare la sandbox utilizzando una lettura fuori dai limiti. Per creare Bad elf: root@kitploit: python3 poc.py samplefile poisonedfile Risultati: root@kitploit: ❯ python3 poc.py fib poisonedfile Manipulating .text section header at...

EUVD-2026-67933

An unauthenticated party able to reach the port of a MongoDB Connector for BI mongosqld instance may generate enough routine connection log activity to exhaust the storage backing the configured log path. When a log write or log rotation operation subsequently fails, the resulting error is not...

EUVD-2026-67872

ALOS HTTP is a Linux-first Go web framework and application server built around a custom networking stack. Prior to 0.0.0-20260617230736-314b6783e196, core/utils.go::sanitizeRequestPath calls splitPathQuery on a request path beginning with a question mark and then performs the unchecked p0 access...

CVE-2026-55484 ALOS HTTP: Unauthenticated remote DoS: malformed path starting with "?" triggers out-of-bounds panic in sanitizeRequestPath, crashing entire server

ALOS HTTP is a Linux-first Go web framework and application server built around a custom networking stack. Prior to 0.0.0-20260617230736-314b6783e196, core/utils.go::sanitizeRequestPath calls splitPathQuery on a request path beginning with a question mark and then performs the unchecked p0 access...

CVE-2026-55484 ALOS HTTP: Unauthenticated remote DoS: malformed path starting with "?" triggers out-of-bounds panic in sanitizeRequestPath, crashing entire server

ALOS HTTP is a Linux-first Go web framework and application server built around a custom networking stack. Prior to 0.0.0-20260617230736-314b6783e196, core/utils.go::sanitizeRequestPath calls splitPathQuery on a request path beginning with a question mark and then performs the unchecked p0 access...

clairvoyance

🔮 clairvoyance Clairvoyance /klɛərˈvɔɪəns /; dal francese clair che significa chiaro e voyance che significa visione da Wikipedia. Panoramica clairvoyance crea una visualizzazione colorata della protezione delle pagine dell'intero spazio di indirizzi di un processo a 64 bit utente e kernel in...

BugId

BugId Rileva, analizza e identifica in modo univoco i bug delle applicazioni. TL;DR Vuoi... sapere che tipo di bug sta causando il crash di un'applicazione? sapere se un bug potrebbe essere una vulnerabilità di sicurezza? scoprire se due o più crash sono causati dallo stesso bug? ottenere un repo...

SUSE CVE-2026-80636

In the Linux kernel, the following vulnerability has been resolved: netfilter: conntrack: revert ct extension genid infrastructure This infrastructure is not used anymore after moving ct timeout and helper to use datapath refcount to track object use. Revert commit c56716c69ce1 "netfilter:...

SUSE CVE-2026-80651

In the Linux kernel, the following vulnerability has been resolved: crypto: ccp/sev-dev-tsm - bail out early when pdev-bus is NULL dsmcreate initially checks pdev-bus when computing segmentid: u8 segmentid = pdev-bus ? pcidomainnrpdev-bus : 0; But the next two lines unconditionally dereference...

SUSE CVE-2026-80661

In the Linux kernel, the following vulnerability has been resolved: ufs: core: tracing: Do not dereference pointers in TPprintk The trace events in drivers/ufs/core/ufstrace.h were converted to take a pointer to the hba structure as an argument for the tracepoint and then in TPprintk the printing...

CVE-2023-21554

CVE-2023-21554-PoC CVE-2023-21554 Windows MessageQueuing PoC， Poc की सफलता का संकेत mqsvc.exe प्रक्रिया का क्रैश होना है, और कोई पॉप-अप संदेश नहीं आता, जिसे प्रक्रिया मॉनिटर जैसे प्रोग्राम में देखना होता है Windows टर्मिनल या कमांड प्रॉम्प्ट में कमांड निष्पादित करें python poc.py पीड़ित PC का IP...

CVE-2026-23918

CVE-2026-23918 Apache modhttp2 Double-Free Detektor https://github.com/user-attachments/assets/d6c30e58-548c-4b6d-9ba3-baa667238a58 root@kitploit: python3 h2ghost.py -h usage: h2ghost.py -h --host HOST --port PORT --tls --no-tls --iterations ITERATIONS --burst-n BURSTN --timeout TIMEOUT...

CVE-2026-25075-check

CVE-2026-25075 Verwundbarkeitsbewertungstool Erkennen Sie sicher, ob ein strongSwan VPN-Server anfällig für CVE-2026-25075 ist, ohne Störungen zu verursachen. Siehe den vollständigen Artikel im Bishop Fox Blog. Beschreibung CVE-2026-25075 ist eine Integer-Unterlauf-Schwachstelle im EAP-TTLS-Plugi...

CVE-2026-82256

SvelteKit before 2.69.1 fails to properly validate remote form function payload sizes, allowing attackers to crash the Node process by sending large payloads. Repeated exploitation causes denial of service by repeatedly crashing the application process...

CVE-2026-40015

An attacker that has valid credentials can open many connections to the imap-hibernate service and send invalid commands, which can intermittently cause an out-of-bounds read and crash the process. The crash interrupts hibernated IMAP sessions handled by the affected process, which can cause...