MaxPatrol EDR DoS

The vulnerability of the control console of the MaxPatrol EDR detection and response system is related to access control errors. Exploiting this vulnerability could allow a malicious actor to cause service failures...

CVE-2024-38063-poc

Real POC published https://github.com/ynwarcs/CVE-2024-38063 and I have updated in my code as well, This can cause crash into your system so use VM or just learning thing, you can get RCE by making changes in the code. Usage iface Most probably this is enabled bydefault. Check the...

CVE-2018-6389

CVE-2018-6389 Wordpress Exploit CVE-2018-6389 Exploit Can Down Any Wordpress site under 4.9.3 The flaw affects the load-scripts.php WordPress script, it receives a parameter called load About PoC A simple Script In Python With threading could allow anyone to take down most WordPress websites with...

CVE-2018-0101-DOS-POC

CVE-2018-0101-DOS-POC DOS source : https://pastebin.com/YrBcG2Ln this POC is not released by me. use at your own risk...

CVE-2024-49113

LDAP Nightmare An exploit for CVE-2024-49113 reported by Yuki Chen @guhe120. A vulnerability in Windows Lightweight Directory Access Protocol LDAP. Created by SafeBreach Labs published on January 1st 2025. For the full technical analysis of the vulnerability and how we managed to exploit it check...

CVE-2025-69822-Atomberg_Erica_SmatFan_Security_Assessment

CVE-2025-69822-AtombergEricaSmatFanSecurityAssessment This vulnerability impacts device availability and reliable operation of Atomberg Erica Smart FanFirmware Version 1.0.36. The issue arises due to a lack of protection mechanisms against forged deauthentication frames and lack of fallback or...

CVE-2022-22274_CVE-2023-0656

SonicWall NGFW CVE-2022-22274 & CVE-2023-0656 On March 24, 2022, SonicWall released an advisory with the following details: A Stack-based buffer overflow vulnerability in the SonicOS via HTTP request allows a remote unauthenticated attacker to cause Denial of Service DoS or potentially results in...

CVE-2026-114102

adm-zip before 0.6.1 contains a denial of service vulnerability that allows unauthenticated attackers to crash the Node.js process via a malformed ZIP file, because inflateAsync in methods/inflater.js lacks a zlib stream error listener. Attackers can supply a ZIP with corrupted DEFLATE data...

CVE-2026-114095

Dulwich before 1.2.9 contains a denial of service vulnerability in Pack.resolveobject that allows attackers to cause infinite recursion via self-referential OFSDELTA objects. Attackers can supply a malicious packfile with an OFSDELTA deltaoffset of 0 to exhaust CPU during clone, fetch, or cat-fil...

CVE-2020-37288

Vyper from 0.1.0b10 before 0.2.3 generates incorrect code for a return statement inside a for loop in an internal function called two or more internal calls deep, producing an invalid jump destination stack underflow. Affected contracts revert such calls unnecessarily, which in limited...

CVE-2026-114038

A flaw was found in device-mapper-multipath. A local user can trigger an out-of-bounds read by sending a command with a format string ending in a trailing percent character to the multipath daemon. This issue can allow the user to expose unintended daemon memory, leading to information disclosure...

CVE-2026-114038 Device-mapper-multipath: device-mapper-multipath: information disclosure via malformed format string

A flaw was found in device-mapper-multipath. A local user can trigger an out-of-bounds read by sending a command with a format string ending in a trailing percent character to the multipath daemon. This issue can allow the user to expose unintended daemon memory, leading to information disclosure...

CVE-2026-114038

A flaw was found in device-mapper-multipath. A local user can trigger an out-of-bounds read by sending a command with a format string ending in a trailing percent character to the multipath daemon. This issue can allow the user to expose unintended daemon memory, leading to information disclosure...

librsvg: Use-after-free when XML includes have duplicated entities

A flaw was found in librsvg. When processing an SVG document containing nested XML inclusions Xincludes with duplicate entity declarations, a use-after-free error can occur. This vulnerability arises because the library incorrectly frees an XML entity that is still in use by the parser. An attack...

CVE-2026-27831-POC

CVE-2026-27831-POC Poc Exploit for CVE-2026-27831 This is proof of concept exploit for remote heap based out-of-bound read at rldns version 1.3 that causes denial of service. rldns is an open source DNS server for linux, freebsd & netbsd, running on x8664 architecture. Rldns Version 1.3 has a...

reapoc

reapoc OpenSource Poc && Vulnerable-Target Storage Box. We are aming to collect different normalized poc and the vulerable target to verify it. Now reapoc support these poc: pocsploit: My new simple, smart poc framework, welcome! nuclei: Famous in the world, yaml-based xray: yaml-based pocsuite3:...

CVE-2020-11650

FreeNAS DoS CVE-2020-11650 python3 attack.py TargetIP...

go-toolset:rhel8 security, bug fix, and enhancement update

An update is available for module.delve, delve. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Go Toolset provides the Go programming language tools and...

RLSA-2026:86203 Important: go-toolset:rhel8 security, bug fix, and enhancement update

Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang. Security Fixes: net/http: golang: golang: Denial of Service via crafted HTTP Range headers CVE-2026-78667 crypto/tls: golang: crypto/tls: Denial of Service via multiple ECH outer extension...

RegEx-DoS

👮 👊 RegEx Denial of Service ReDos Scanner Helping you find Regular Expressions susceptible to Denial of Service Attacks. Please read thecontribution guidelines before contributing. A screenshot of ReDoS scanning in action. What is Regular Expression Denial of Service? Wikipedia and OSWAP have...