Winrar-CVE-2023-40477-POC

CVE-2023-4047 PoC Wild Pointer 제작 연구 자료: https://wildptr.io/winrar-cve-2023-40477-poc-new-vulnerability-winrar-security-research/ Recvol3.cpp 취약점: https://www.rarlab.com/vulnrev3names.html, https://www.win-rar.com/ 취약 버전: WinRAR = 6.22 테스트 방법? 자체 PoC를 생성하거나 첨부된 데모 RAR 파일을 테스트할 수 있습니다 압축 해제 시...

CVE-2026-65650

CVE-2026-65650 — PoC: DoS Autenticado no Upload de Avatar do Elgg Negação de serviço autenticada no recurso de upload de avatar do Elgg através de dimensões de imagem ilimitadas, causando exaustão de memória GD. Afetado: Elgg saveIconFromUploadedFile'avatar' return...

CVE-2026-49975-POC

CVE-2026-49975 — PoC HTTP/2 Bomb Эксплойт-концепт для CVE-2026-49975 — удалённая уязвимость типа «отказ в обслуживании» в реализациях сервера HTTP/2. Обнаружена Куангом Луонгом Calif Security Research, раскрыта 2 июня 2026 года. Только для авторизованного тестирования безопасности. Не используйте...

CVE-2026-32941

Sliver C2 のフレームワーク全体に存在する脆弱性により、無制御のメモリ割り当て CWE-789 / CWE-400 を引き起こして、プロセス全体で Out-of-Memory OOM クラッシュを発生させる、認証不要のリモートサービス拒否 DoS が可能になります。 参照: Tenable 再現手順: 1. 認証情報の取得: 取得または生成された Sliver インプラントから mTLS 証明書と秘密鍵を入手します。 2. PoC の編集: mtlspoc.go を開き、var ブロック内のプレースホルダー値 c2Endpoint、clientCertPEM、clientKeyP...

cve-2023-30800-multithread-doser

cve-2023-30800-multithread-doser 用于 CVE-2023-30800 的多线程 DoS Python 脚本 ⚠️ 注意：本人对使用此工具造成的任何损害不承担责任，该工具仅作为测试工具提供，仅可用于授权网络。 用法： dos.py --address IP-ADDRESS --threads THREAD-COUNT 依赖： Python 3.6 及以上 Requests 安装依赖： pip install requests CVE: "https://nvd.nist.gov/vuln/detail/CVE-2023-30800" POC:...

Intrusion-Alert-Educational-Network-IDS

🛡️ Intrusion-Alert-Educational-Network-IDS Un sistema de detección de intrusiones IDS ligero construido con Python para monitorear el tráfico de red y detectar posibles ataques DoS/DDoS basados en la tasa de solicitudes por IP. 📌 Características 📡 Captura de paquetes en tiempo real usando Scapy 📊...

CVE-2022-36234

CVE-2022-36234 का विवरण SimpleNetwork TCP सर्वर कमिट 29bc615f0d9910eb2f59aa8dff1f54f0e3af4496 में एक डबल फ्री भेद्यता पाई गई जिसका शोषण तैयार किए गए TCP पैकेटों के माध्यम से किया जाता है। डबल फ्री को ट्रिगर करने से क्लाइंट किसी भी SimpleNetwork TCP सर्वर को दूरस्थ रूप से क्रैश कर सकते हैं। अन्य...

ruby:3.3 security, bug fix, and enhancement update

An update is available for rubygem-mysql2, module.rubygem-mysql2, module.ruby, ruby, rubygem-pg, module.rubygem-pg. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE li...

ruby:4.0 security, bug fix, and enhancement update

An update is available for rubygem-mysql2, module.rubygem-mysql2, module.ruby, ruby, rubygem-pg, module.rubygem-pg. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE li...

Security update for liboqs (moderate)

openSUSE security update: security update for liboqs ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21634-1 Rating: moderate References: bsc1215751 bsc1246301 bsc1267001 bsc1267007 Cross-References: CVE-2025-52473 CVE-2026-44518 CVE-2026-46344 CVSS...

CVE-2022-26937

Windows 네트워크 파일 시스템 충돌 PoC CVE-2022-26937 root@kitploit: nt!KeBugCheckEx: fffff8038996efa0 48894c2408 mov qword ptr rsp+8,rcx ss:0018:ffffd000d589ae60=0000000000000139 1: kd !analyze -v Bugcheck Analysis KERNELSECURITYCHECKFAILURE 139 A kernel component has corrupted a critical data structure. Th...

CVE-2023-44487

Rapid Reset Client Rapid Reset Client é uma ferramenta para testar mitigações e exposição ao CVE-2023-44487 vetor de ataque DDoS de reinicialização rápida. Implementa um cliente HTTP/2 mínimo que abre um único socket TCP, negocia TLS, ignora o certificado e troca quadros de CONFIGURAÇÃO. Em...

CVE-2026-13156

CVE-2026-13156 — Integração Oficial SMTP do MailerSend !IMPORTANT Resumo: Foi descoberta uma vulnerabilidade de Cross-Site Request Forgery CSRF de Alta Gravidade CVE-2026-13156 na integração oficial do plugin MailerSend SMTP para WordPress 1.0.8. O manipulador de eliminação de configuração...

spurt

Spurt Introduzione Spurt è un potente strumento di stress test progettato per simulare volumi elevati di traffico e valutare le prestazioni e la resilienza dei server web. È stato testato su Linux. Spurt controlla prima se l'URL di destinazione è valido. Un modulo personalizzato viene utilizzato...

CVE-2026-47860 Unbounded decompression of attacker-supplied compressed message bodies

An attacker who can publish to a queue consumed by an application that has enabled message decompression can crash the consumer JVM with a single 1 MB message. Spring AMQP 4.1.0 Spring AMQP 4.0.0 - 4.0.4 Spring AMQP 3.2.0 - 3.2.12 Spring AMQP 2.4.18 and earlier...

CVE-2026-47860

CVE-2026-47860 affects Spring AMQP and stems from unbounded decompression of attacker-supplied compressed message bodies. An attacker with the ability to publish to a queue consumed by an application with message decompression enabled can crash the consumer JVM using a single message of approxima...

CVE-2026-47859 Unbounded memory allocation in RFC6587SyslogDeserializer (octet-counted framing) — remote DoS

RFC6587SyslogDeserializer, used by the Spring Integration syslog TCP inbound adapter to decode RFC 6587 / RFC 5424 frames, trusts the sender-supplied octet count of an octet-counted frame and allocates a byte array of exactly that size with no upper bound. Spring Integration 7.1.0 Spring...

CVE-2026-47859

CVE-2026-47859 affects Spring Integration 's RFC6587SyslogDeserializer , the component used by the syslog TCP inbound adapter to decode RFC 6587 / RFC 5424 frames. The root cause is that the deserializer trusts the sender-supplied octet count of an octet-counted frame and allocates a byte array o...

CVE-2026-47851

CVE-2026-47851 is a denial-of-service vulnerability in the Spring AI PDF Document Reader . When analyzing a PDF whose table of contents (outline tree) is deeply nested or cyclic, unbounded recursion triggers a StackOverflowError in the ingestion thread. The attack requires no privileges or user i...

Dosinator

DoSinator DoSinator ist ein leistungsstarkes Tool zum Testen von Denial-of-Service-Angriffen DoS, das in Python entwickelt wurde. Es wurde für Sicherheitsexperten und Forscher konzipiert und ermöglicht es ihnen, verschiedene DoS-Angriffe zu simulieren. Damit bietet es eine realistische Umgebung z...