wordpress_DoS

WordPress 4.9.8 is vulnerable to DoS Attacks. Additional Information We found a Denial of Service DoS in WordPress version 4.9.8. An unauthenticated remote user can perform a series of requests on the vulnerable pages, resulting in increased processing, swap and disk I/O on the server. This...

Envoy-CPU-Exhaustion-Vulnerability-PoC

Envoy CPU Exhaustion Vulnerability PoC This repository contains a proof-of-concept PoC Python script to demonstrate the CPU exhaustion vulnerability in Envoy caused by a flood of CONTINUATION frames. Author: blackmagic 2024 Description Envoy is a cloud-native, open-source edge and service proxy...

CVE-2002-0200

CVE-2002-0200 Cyberstop Web Server para Windows 0.1 permite a atacantes remotos provocar una denegación de servicio mediante una solicitud HTTP para el nombre de un dispositivo MS-DOS. Referencia externa en https://marc.info/?l=bugtraq&m=101174569103289&w=2 Autor Alex Hernandez aka @alt3kx...

CVE-2024-49113

LDAP Nightmare An exploit for CVE-2024-49113 reported by Yuki Chen @guhe120. A vulnerability in Windows Lightweight Directory Access Protocol LDAP. Created by SafeBreach Labs published on January 1st 2025. For the full technical analysis of the vulnerability and how we managed to exploit it check...

CVE-2022-34715-POC

CVE-2022-34715-POC CVE-2022-34715-POC pcap nfssvr.sys versión 10.0.20348.825 root@kitploit: 0: kd r rax=0000000080000001 rbx=0000000000000000 rcx=ffffde87fe461150 rdx=0000000000000000 rsi=fffff8040811aa50 rdi=0000000000000008 rip=fffff80408067dbb rsp=ffffb400eb3e2630 rbp=ffffb400eb3e26b9...

CVE-2020-1350

CVE-2020-1350 SIGRed Denial of Service PoC Exploit This repo has my version of a DoS PoC exploit for the SIGRed vulnerability disclosed by MS and Check Point Research on July 14th, 2020. @maxpl0it also wrote a PoC that he published on July 15th, but I structured my exploit a little differently th...

strutt-cve-2014-0114

CVE-2014-0114 - Vulnerability in Struts 1 Parameters in a POST or GET request are handled as properties to be set with the form as a starting point. Parameters can be a path to a nested object. Apache Struts 1.x can be manipulated to call getClass on Form Beans. For example, one can directly...

AppleDOS

AppleDOS CVE-2018-4407 Basado en CVE-2018-4407 https://lgtm.com/blog/applexnuicmperrorCVE-2018-4407, este tweet y este video. El error es una vulnerabilidad de desbordamiento de montón en el manejo de paquetes maliciosos cuando el sistema operativo intenta enviar un mensaje ICMP que contiene...

CVE-2026-36522

CVE-2026-36522 Inyección no autenticada de NaN a través de MAVLinkPARAMSET en ArduPilot ArduPlane | ---|--- CVE| CVE-2026-36522 CWE| CWE-1287 Validación incorrecta del tipo de entrada especificado CVSS 3.1| 9.1 Crítico — AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H Afectado| ArduPilot ArduPlane 4.0.1...

CVE-2021-42697

Akka HTTP 10.1.x before 10.1.15 and 10.2.x before 10.2.7 can encounter stack exhaustion while parsing HTTP headers, which allows a remote attacker to conduct a Denial of Service attack by sending a User-Agent header with deeply nested comments. References MITRE Akka blog Arbitrary nesting of...

CVE-2022-31630---Proof-of-Concept-Exploit-untuk-PHP-7.4.33

CVE-2022-31630 - Proof of Concept Exploit for PHP 7.4.33 Warning: This code is created solely for educational purposes and testing in an isolated laboratory environment. Use on other systems without authorization is illegal and irresponsible. 📋 Description CVE-2022-31630 is an Out-of-Bounds OOB...

CVE-2024-40094

CVE-2024-40094 ENF ExecutableNormalizedFields Denial of Service Exploit This script exploits the CVE-2024-40094 vulnerability in graphql-java by triggering an ExecutableNormalizedFields ENF based denial of service. It builds a crafted GraphQL introspection query with deep nested aliases, designed...

CVE-2015-5374-DoS-PoC

CVE-2015-5374 Siemens SIPROTEC 4 and SIPROTEC Compact EN100 Ethernet Module CVE-2015-5374 Siemens SIPROTEC 4 and SIPROTEC Compact EN100 Ethernet Module ... Done, say goodbye! Metasploit Module This module sends a specially crafted packet to Port 50000/UDP could cause a denial of service of the...

CVE-2025-51529

CVE-2025-51529: WordPress Cookies and Content Security Policy Plugin DoS Vulnerability Incorrect Access Control in the AJAX endpoint functionality in jonkastonka Cookies and Content Security Policy plugin through version 2.29 allows remote attackers to cause a denial of service database server...

CVE-2011-3192-apache-exploit

CVE-2011-3192 This exploit triggers a denial of service condition in Apache versions 1.3.x, 2.0.64 and below and 2.2.19 and below. Developed in 2011 by Antonius ev1lut10n / w1sdom...

CVE-2024-38355-PoC

CVE-2024-38355 Demo Socket.IO Crash This project is a Proof of Concept demonstrating CVE-2024-38355 , a denial-of-service vulnerability in socket.io. The project was created for educational purposes to show the attack mechanism and how to protect applications. About the Vulnerability CVE-2024-383...

CVE-2025-0087

CVE-2025-0087 PoC DoS...

CVE-2021-42205

CVE-2021-42205 ELAN Miniport touchpad Windows driver before 24.21.51.2, as used in PC hardware from multiple manufacturers, allows local users to cause a system crash by sending a certain IOCTL request, because that request is handled twice. authentication| complexity| vector ---|---|--- not...

network-attack-detection

Detección de Ataques de Red mediante Aprendizaje Automático Descripción Este proyecto emplea técnicas de aprendizaje automático para clasificar ataques de red como escaneo de puertos, denegación de servicio DoS y malware. Los datos de entrada están en formato Netflow V9, un formato estándar...

CVE-2006-3747

Archivos sobre mi publicación en bugtraq y el primer exploit funcional para CVE-2006-3747 desbordamiento off-by-one en modrewrite LDAP de Apache. http://www.securityfocus.com/archive/1/443870 Fecha de publicación del POC/Exploit: 2006-08-20 Autor: Jacobo Avariento Gimeno ID de CVE: CVE-2006-3747 ...