CVE-2026-49975-POC

CVE-2026-49975 — PoC della Bomba HTTP/2 Exploit proof-of-concept per CVE-2026-49975, una vulnerabilità di denial-of-service remota nelle implementazioni del server HTTP/2. Scoperto da Quang Luong Calif Security Research, divulgato il 2 giugno 2026. Solo per test di sicurezza autorizzati. Non...

cve-2023-30800-multithread-doser

cve-2023-30800-multithread-doser 用于 CVE-2023-30800 的多线程 DoS Python 脚本 ⚠️ 注意：本人对使用此工具造成的任何损害不承担责任，该工具仅作为测试工具提供，仅可用于授权网络。 用法： dos.py --address IP-ADDRESS --threads THREAD-COUNT 依赖： Python 3.6 及以上 Requests 安装依赖： pip install requests CVE: "https://nvd.nist.gov/vuln/detail/CVE-2023-30800" POC:...

Intrusion-Alert-Educational-Network-IDS

🛡️ Intrusion-Alert-Educational-Network-IDS Un sistema di rilevamento intrusioni IDS leggero, costruito con Python per monitorare il traffico di rete e rilevare potenziali attacchi DoS/DDoS in base alla frequenza delle richieste per IP. 📌 Caratteristiche 📡 Sniffing dei pacchetti in tempo reale con...

CVE-2022-36234

CVE-2022-36234 का विवरण SimpleNetwork TCP सर्वर कमिट 29bc615f0d9910eb2f59aa8dff1f54f0e3af4496 में एक डबल फ्री भेद्यता पाई गई जिसका शोषण तैयार किए गए TCP पैकेटों के माध्यम से किया जाता है। डबल फ्री को ट्रिगर करने से क्लाइंट किसी भी SimpleNetwork TCP सर्वर को दूरस्थ रूप से क्रैश कर सकते हैं। अन्य...

ruby:3.3 security, bug fix, and enhancement update

An update is available for rubygem-mysql2, module.rubygem-mysql2, module.ruby, ruby, rubygem-pg, module.rubygem-pg. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE li...

ruby:4.0 security, bug fix, and enhancement update

An update is available for rubygem-mysql2, module.rubygem-mysql2, module.ruby, ruby, rubygem-pg, module.rubygem-pg. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE li...

PT-2026-82757

An integer overflow in the libavfilter/vf scale.c component of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service DoS via supplying a crafted video file...

CVE-2026-38347

A heap overflow in the ff_sws_alphablendaway function of libswscale/alphablend.c in FFmpeg (git-master commit 722a217) allows an attacker to trigger a Denial of Service via a crafted input. The vulnerability resides in the alpha blending pathway of FFmpeg's scaling library. No specific affected r...

EUVD-2026-67105

An issue in the ModifyAMFEventSubscriptionProcedure function processor/eventexposure.go of free5gc v4.1.0 allows attackers to cause a Denial of Service DoS via supplying a crafted PATCH request...

CVE-2026-38344

CVE-2026-38344 is a NULL pointer dereference in the get_min_buffer_size function located in /libswscale/slice.c of FFmpeg (version N-122528-gdd2976b9e1). An attacker can trigger a Denial of Service (DoS) by supplying a crafted video file to the affected library. No specific remediation or patched...

Security update for liboqs (moderate)

openSUSE security update: security update for liboqs ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21634-1 Rating: moderate References: bsc1215751 bsc1246301 bsc1267001 bsc1267007 Cross-References: CVE-2025-52473 CVE-2026-44518 CVE-2026-46344 CVSS...

CVE-2026-38348

An integer overflow in the libswscale/utils.c component of FFmpeg (build N-122528-gdd2976b9e1) allows an attacker to trigger a Denial of Service by supplying a crafted image file. The flaw resides in the scaling utility code and is tracked in FFmpeg's own issue tracker (issue #21588). No CVSS met...

CVE-2022-26937

Windows 네트워크 파일 시스템 충돌 PoC CVE-2022-26937 root@kitploit: nt!KeBugCheckEx: fffff8038996efa0 48894c2408 mov qword ptr rsp+8,rcx ss:0018:ffffd000d589ae60=0000000000000139 1: kd !analyze -v Bugcheck Analysis KERNELSECURITYCHECKFAILURE 139 A kernel component has corrupted a critical data structure. Th...

CVE-2023-44487

Rapid Reset Client Rapid Reset Client é uma ferramenta para testar mitigações e exposição ao CVE-2023-44487 vetor de ataque DDoS de reinicialização rápida. Implementa um cliente HTTP/2 mínimo que abre um único socket TCP, negocia TLS, ignora o certificado e troca quadros de CONFIGURAÇÃO. Em...

CVE-2026-13156

CVE-2026-13156 — Integração Oficial SMTP do MailerSend !IMPORTANT Resumo: Foi descoberta uma vulnerabilidade de Cross-Site Request Forgery CSRF de Alta Gravidade CVE-2026-13156 na integração oficial do plugin MailerSend SMTP para WordPress 1.0.8. O manipulador de eliminação de configuração...

spurt

Spurt Introduzione Spurt è un potente strumento di stress test progettato per simulare volumi elevati di traffico e valutare le prestazioni e la resilienza dei server web. È stato testato su Linux. Spurt controlla prima se l'URL di destinazione è valido. Un modulo personalizzato viene utilizzato...

CVE-2026-47860 Unbounded decompression of attacker-supplied compressed message bodies

An attacker who can publish to a queue consumed by an application that has enabled message decompression can crash the consumer JVM with a single 1 MB message. Spring AMQP 4.1.0 Spring AMQP 4.0.0 - 4.0.4 Spring AMQP 3.2.0 - 3.2.12 Spring AMQP 2.4.18 and earlier...

CVE-2026-47860

CVE-2026-47860 affects Spring AMQP and stems from unbounded decompression of attacker-supplied compressed message bodies. An attacker with the ability to publish to a queue consumed by an application with message decompression enabled can crash the consumer JVM using a single message of approxima...

CVE-2026-47859 Unbounded memory allocation in RFC6587SyslogDeserializer (octet-counted framing) — remote DoS

RFC6587SyslogDeserializer, used by the Spring Integration syslog TCP inbound adapter to decode RFC 6587 / RFC 5424 frames, trusts the sender-supplied octet count of an octet-counted frame and allocates a byte array of exactly that size with no upper bound. Spring Integration 7.1.0 Spring...

CVE-2026-47859

CVE-2026-47859 affects Spring Integration 's RFC6587SyslogDeserializer , the component used by the syslog TCP inbound adapter to decode RFC 6587 / RFC 5424 frames. The root cause is that the deserializer trusts the sender-supplied octet count of an octet-counted frame and allocates a byte array o...