53952 matches found
bandiview-7.05-vuln-PoC
bandiview-7.05-vuln-PoC Questo repository contiene un PoC per vulnerabilità scoperte in Bandiview 7.05 tramite fuzzing CVE-2024-45870 Vulnerabilità DoS nel parsing di file JXR CVE-2024-45871 Vulnerabilità DoS nel parsing di file PSD CVE-2024-45872 Stack Buffer Overflow nel parsing di file PSD...
apachedos
Questo strumento sfrutta CVE-2016-8740 per crashare i server che eseguono Apache HTTPD 2.4.17 - 2.4.23 con supporto HTTP2. Causa il crash di questi server costringendoli ad allocare quantità insanamente grandi di RAM, rendendo il computer inutilizzabile. Può essere scaricato qui dovrai eseguirlo...
kernel: netfilter: require Ethernet MAC header before using eth_hdr()
A flaw was found in the Linux kernel's netfilter component. Certain netfilter modules, including ip6teui64 and xtmac, accessed Ethernet MAC header data without first verifying that an Ethernet device was associated with the network packet or that the MAC header was present and of sufficient lengt...
CVE-2026-58097 ppp(8): missing length validation in mp_SetEnddisc()
mpSetEnddisc copied a user-supplied PSN endpoint value without length validation, allowing a buffer overflow via the ppp8 command interface. A local user with access to the ppp8 command interface can crash ppp8 or potentially execute arbitrary code as root...
cve-2023-44487-demo
⚡ CVE-2023-44487 Demo – HTTP/2 Rapid Reset Attack Dieses Projekt demonstriert die HTTP/2 „Rapid Reset“-Sicherheitslücke CVE-2023-44487, die es Angreifern ermöglicht, Server mit RSTSTREAM-Frames zu überlasten und einen Denial-of-Service DoS zu verursachen. Es beinhaltet: ✅ Exploit-Test mit...
Cisco Unified IP Conference Station 7937G - Denial-of-Service
Cisco Unified IP Conference Station 7937G 1-4-4-0 through 1-4-5-7 allows attackers to restart the device remotely via specially crafted packets that can cause a denial-of-service condition. Note: We cannot prove this vulnerability exists. Out of an abundance of caution, this CVE is being assigned...
CVE-2024-35106-POC
NEXTU FLETA Wifi6 Router DOS, Möglicher RCE POC Dieses Dokument beschreibt, wie der Exploit am EZNET FLETA WiFI-Router mittels der Schwachstelle CVE-2024-35106 durchgeführt wurde. Schwachstelleninformationen CVE-ID CVE-2024-35106 Hersteller des Produkts NEXTU Produkt FLATA AX1500 Wifi6 Router...
cve-2015-5477
cve-2015-5477 BIND9 TKEY assert DoS CVE-2015-5477 के लिए PoC root@kitploit: $ ps awux | grep -v grep | grep bind bind 2373 0.0 2.2 141164 13424 ? Ssl 14:58 0:00 /var/named/chroot/sbin/named -u bind -t /var/named/chroot -c /etc/named.conf $ python tkill.py 127.0.0.1 Begin emission: ..Finished to...
EUVD-2026-66134
BlueZ sdp-xml.c type confusion via RegisterProfileServiceRecord can crash bluetoothd local DoS: a crafted nested ServiceRecord can corrupt the SDP XML parser stack so scalar union data is treated as a sequence pointer, allowing a local caller to crash bluetoothd...
kernel: dm log: fix out-of-bounds write due to region_count overflow
A flaw was found in the Linux kernel's device-mapper log dm log component. A local attacker could exploit an integer overflow vulnerability where a 64-bit value is truncated to 32 bits, leading to undersized memory allocations. This allows for out-of-bounds writes to kernel memory during log...
CVE-2026-26449
In Stomper 5e2741e when a client sends a SEND frame missing the destination header field, the server triggers a null pointer dereference or access to invalid memory while processing the frame, causing the process to crash...
Oracle Linux 10 : nodejs24 (ELSA-2026-58819)
The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-58819 advisory. - Fix for CVE-2026-69192 & CVE-2026-54272 : ip-address Tenable has extracted the preceding description block directly from the Oracle Linux security...
Linux Distros Unpatched Vulnerability : CVE-2026-80185
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - BlueZ sdp-xml.c type confusion via RegisterProfileServiceRecord can crash bluetoothd local DoS: a crafted nested ServiceRecord can corrupt the SDP XML parser...
CVE-2025-51675
CVE-2025-51675 affects the openRISC OR1200 RISC-V processor, specifically at commit 83ac6b . The vulnerability stems from an inaccurate update of program counter (PC) values when SPR (Special Purpose Register) changes , which can result in a Denial of Service (DoS) . The CVSS 3.1 score is 7.5 (HI...
PT-2026-82352
In Reactor Core, applications that use the Flux.windowTimeout operator with fairBackpressure enabled are vulnerable to a Denial of Service DoS condition. Reactor Core 3.8.0 - 3.8.6 Reactor Core 3.5.0 - 3.7.19 Reactor Core 3.4.41 and earlier...
EUVD-2026-66754
Stomper 5e2741e is vulnerable to Use-After-Free. When a single client repeatedly issues SUBSCRIBE commands for the same destination over one connection and then closes that connection, the broker performs incorrect cleanup of its internal subscription structures. This results in a heap...
SUSE SLES15: golang-github-prometheus-alertmanager / etc (SUSE-SU-2026:3714-1)
The remote SUSE Linux SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3714-1 advisory. prometheus-postgresexporter: - CVE-2022-21698: Replace github.com/prometheus/clientgolang with version 1.11.1 and prevent validation bypass and...
CVE-2026-26449
Stomper (commit 5e2741e) is vulnerable to a null pointer dereference when a client sends a STOMP SEND frame missing the destination header field. The server crashes while processing the malformed frame, resulting in a denial of service. The CVSS 3.1 score is 7.5 (HIGH) with a vector of AV:N/AC:L/...
EUVD-2025-210803
An issue in Vanderbilt Industries, Acre Security SPC5300.000 Main Board v.3.14.1 allows a physically proximate attacker to cause a denial of service via the SPC Connect Pro software accepts replayed application-layer payloads injected into an active TCP session...