cve-2023-44487-demo

⚡ CVE-2023-44487 Демо – Атака быстрого сброса HTTP/2 Этот проект демонстрирует уязвимость HTTP/2 «Быстрый сброс» CVE-2023-44487, которая позволяет злоумышленникам перегружать серверы с помощью фреймов RSTSTREAM, вызывая отказ в обслуживании DoS. Он включает: ✅ Тест эксплойта с помощью инструмента...

ban-exploitable-bitcoin-nodes

ban-exploitable-bitcoin-nodes Заблокируйте на своём узле все узлы, эксплуатируемые через уязвимость типа «отказ в обслуживании» CVE-2018-17144 Требования для bash-скрипта ban.sh Командный JSON-процессор jq. Установка в Linux на базе Debian root@kitploit: sudo apt-get install jq Загрузка и...

CVE-2022-21907

CVE-2022-21907 Описание 1. Этот репозиторий обнаруживает систему, уязвимую к CVE-2022-21907 CVSS:3.1 9.8, и при желании защищает от этой уязвимости. Я предлагаю 2 кода powershell в одну строку. 2. Я предлагаю скрипты на чистом python, powershell, ruby и модули metasploit, nmap для атаки на уязвим...

cve

CVE Énoncé du problème : Stackoverflow J'essaie de construire mon projet dans Docker, donc j'utilise Docker Desktop pour construire mon projet. Lorsque je construis l'image, j'obtiens ceci comme l'une de mes vulnérabilités root@kitploit: CVE-2024-26308 CWE-770 7.5 H Allocation of Resources Withou...

CVE-2022-41404-DoS-Protection

CVE-2022-41404-DoS-Protection Руководство по реализации ограничений ресурсов Apache Tomcat в Windows для защиты от уязвимости DoS CVE-2022-41404...

SUSE SLES15: tomcat11 / tomcat11-admin-webapps / tomcat11-el-6_0-api / etc (SUSE-SU-2026:4114-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4114-1 advisory. - CVE-2026-65182: Apache Tomcat: Bypass longest prefix security constraint bsc1276893. - CVE-2026-65183: Apache Tomcat: TOCTOU when...

Astra Linux – Vulnerability in Ruby 2.5

REXML is an XML toolkit for Ruby. The REXML gem before version 3.3.2 had some DoS vulnerabilities when parsing XML that contained many special characters, such as whitespace characters, , , and . The REXML gem versions 3.3.3 or later include patches to fix these vulnerabilities...

rsc-security-auditor

🛡️ RSC 보안 감사 도구 Next.js 및 React Server Components 스택에서 심각한 보안 취약점CVE-2025-66478, CVE-2025-55184을 탐지하세요. 🚨 긴급: 최근 공개된 정보2025년 12월에 따르면 React Server Components에서 심각한 DoS 및 RCE 취약점이 발견되었습니다. 이 도구는 package.json을 즉시 감사하는 데 도움을 줍니다. ⚡ 기능 🔒 프라이버시 우선: 100% 클라이언트 사이드. package.json 데이터는 브라우저를 절대 벗어나지 않습니다. ...

opentelemetry-collector security update

An update is available for opentelemetry-collector. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Collector with the supported components for a Rocky Enterpri...

CVE-2026-49315

DoS vulnerability in the input device module. Impact: Successful exploitation of this vulnerability may affect availability...

freerdp security update

An update is available for freerdp. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released...

Security Bulletin: Security Vulnerability in Apache Struts affects IBM Sterling B2B Integrator and IBM Sterling File Gateway (CVE-2025-64775)

Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway have addressed vulnerability due to Apache Struts Vulnerability Details CVEID:CVE-2025-64775 DESCRIPTION: Denial of Service vulnerability in Apache Struts, file leak in multipart request processing causes disk exhaustion. This issu...

Security Bulletin: Security Vulnerability in Spring MVC affects IBM Sterling B2B Integrator and IBM Sterling File Gateway (CVE-2024-38828)

Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway have addressed vulnerability due to Spring MVC Vulnerability Details CVEID:CVE-2024-38828 DESCRIPTION: Spring MVC controller methods with an @RequestBody byte method parameter are vulnerable to a DoS attack. CWE:CWE-400: Uncontroll...

Astra Linux – Vulnerability in golang-golang-x-net, containerd-app

The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which can lead to a Denial-of-Service DoS attack if an attacker provides specially crafted HTML content...

Astra Linux – Vulnerability in node-body-parser

body-parser is a Node.js body parsing middleware. body-parser version 1.20.3 is vulnerable to denial of service when url encoding is enabled. A malicious actor using a specially crafted payload could flood the server with a large number of requests, resulting in denial of service. This issue has...

Astra Linux – Vulnerability in Firefox and Thunderbird

DoS attack in the WebRTC signaling component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9...

Astra Linux – Vulnerability in Firefox

DoS attack in the Libraries component in NSS. This vulnerability has been fixed in Firefox 149 and Thunderbird 149...

Astra Linux – Vulnerability in Apache2

The Apache HTTP Server protocol handler for the HTTP/2 protocol checks the received request headers against the size limitations configured for the server. These restrictions are also applied to the HTTP/1 protocol. If any violations occur, an HTTP response is sent to the client with a status cod...

Astra Linux – Vulnerabilities in Python 2.7, Python 3.11, Python 3.7

The html.parser.HTMLParser class has worst-case quadratic complexity when processing certain malformed inputs, which could potentially lead to a heightened denial-of-service attack...

Astra Linux – Vulnerability in Firefox and Thunderbird

DoS attack due to an invalid pointer in the Audio/Video: Web Codecs component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11...