CVE-2022-46485

CVE-2022-46485 ngDoS - ngSurvey Note: la domanda "slider" potrebbe essere vulnerabile anche con un grande intero invece di una stringa. Non è stato possibile confermarlo nel mio ambiente locale. Passaggi per lo sfruttamento Aprire la pagina del sondaggio e individuare un campo di testo o commento...

CVE-2026-82256

SvelteKit before 2.69.1 fails to properly validate remote form function payload sizes, allowing attackers to crash the Node process by sending large payloads. Repeated exploitation causes denial of service by repeatedly crashing the application process...

CVE-2026-40015

An attacker that has valid credentials can open many connections to the imap-hibernate service and send invalid commands, which can intermittently cause an out-of-bounds read and crash the process. The crash interrupts hibernated IMAP sessions handled by the affected process, which can cause...

CVE-2022-26937

PoC di crash di Windows Network File System CVE-2022-26937 root@kitploit: nt!KeBugCheckEx: fffff8038996efa0 48894c2408 mov qword ptr rsp+8,rcx ss:0018:ffffd000d589ae60=0000000000000139 1: kd !analyze -v Bugcheck Analysis KERNELSECURITYCHECKFAILURE 139 A kernel component has corrupted a critical...

CVE-2020-11019

CVE-2020-11019 In FreeRDP versioni minori o uguali alla 2.0.0, quando si esegue con il logger impostato su "WLOGTRACE", potrebbe verificarsi un crash dell'applicazione a causa della lettura di un indice di array non valido. I dati potrebbero essere stampati come stringa sul terminale locale. Il...

pwnedit

pwnedit CVE-2021-3156 - Sudo Baron Samedit Bevor wir in die technischen Details eintauchen, können Sie hier eine kurze Zusammenfassung ansehen: https://www.youtube.com/watch?v=TLa2VqcGGEQ Episoden 1. Files | Blog | Video Warum sudo als Forschungsziel wählen? 2. Files | Blog | Video Wie Fuzzing mi...

EUVD-2026-67582

SvelteKit before 2.69.1 fails to properly validate remote form function payload sizes, allowing attackers to crash the Node process by sending large payloads. Repeated exploitation causes denial of service by repeatedly crashing the application process...

CVE-2026-82256

SvelteKit versions prior to 2.69.1 contain a denial-of-service vulnerability in its remote form function handling. The root cause is a failure to properly validate payload sizes, allowing an unauthenticated network attacker to crash the Node process by sending abnormally large payloads. Repeated ...

CVE-2026-42395

A host listed as a trusted proxy can send forwarding information containing a NUL byte, which crashes the login process on the following login attempt. The login process is terminated, which can cause degradation or denial of service for logins. Deployments that do not configure trusted proxies a...

CVE-2026-40015

An attacker that has valid credentials can open many connections to the imap-hibernate service and send invalid commands, which can intermittently cause an out-of-bounds read and crash the process. The crash interrupts hibernated IMAP sessions handled by the affected process, which can cause...

EUVD-2026-67665

An attacker that has valid credentials can open many connections to the imap-hibernate service and send invalid commands, which can intermittently cause an out-of-bounds read and crash the process. The crash interrupts hibernated IMAP sessions handled by the affected process, which can cause...

CVE-2026-33605

An unauthenticated attacker can crash the ManageSieve login process by sending a small malformed command before authenticating. If running in high-security mode default for community releases, only the attacker's own connection is terminated. If running in high-performance mode default for Pro...

CVE-2026-33605

An unauthenticated attacker can crash the ManageSieve login process by sending a small malformed command before authenticating. If running in high-security mode default for community releases, only the attacker's own connection is terminated. If running in high-performance mode default for Pro...

CVE-2026-27654

CVE-2026-27654 NGINX ngxhttpdavmodule Heap Buffer Overflow tramite Underflow di sizet DoS Remoto / Potenziale RCE Descrizione ngxhttpdavcopymovehandler in src/http/modules/ngxhttpdavmodule.c calcola la lunghezza dell'URI di destinazione sottraendo la lunghezza del prefisso della location dal...

Chrome-Skia-CVE-2024-8636

Corretto in Chrome M128: https://chromereleases.googleblog.com/2024/09/stable-channel-update-for-desktop10.html Passaggi per riprodurre: 1. Applica la patch chromium.diff a chromium. 2. Esegui genskpic.py per generare drawablepicture.skp.hh, quindi sposta il file generato in...

Chrome-Skia-CVE-2024-8198

Corretto in Chrome M128: https://chromereleases.googleblog.com/2024/08/stable-channel-update-for-desktop28.html Passaggi per riprodurre: 1. Applica la patch chromium.diff a chromium. 2. Esegui genskpic.py per generare drawablepicture.skp.hh, quindi sposta il file generato in...

Chrome-Skia-CVE-2024-7966

Corretto in Chrome M128: https://chromereleases.googleblog.com/2024/08/stable-channel-update-for-desktop21.html Passaggi per riprodurre: root@kitploit: Applica la patch chromium.diff a chromium. Esegui genskpic.py per generare drawablepicture.skp.hh, quindi sposta il file generato in...

CVE-2026-80686

In the Linux kernel, the following vulnerability has been resolved: mm: migratedevice: fix ptepfn/ptedirty called on non-present PTE ptepfn and ptedirty have undefined behaviour when called on a non-present PTE. In migratevmacollectpmd, these functions may be invoked on non-present entries e.g.,...

CVE-2026-80689

In the Linux kernel, the following vulnerability has been resolved: tracing/mmiotrace: Add NULL check for mmiotracearray in logging functions mmiotracerw and mmiotracemapping retrieve mmiotracearray into tr and pass it to tracemmiotracerw and tracemmiotracemap. If these functions are invoked whil...

CVE-2026-80661

In the Linux kernel, the following vulnerability has been resolved: ufs: core: tracing: Do not dereference pointers in TPprintk The trace events in drivers/ufs/core/ufstrace.h were converted to take a pointer to the hba structure as an argument for the tracepoint and then in TPprintk the printing...