CVE-2026-80684

A flaw was found in the KVM Kernel-based Virtual Machine subsystem for s390 PCI devices in the Linux kernel. This vulnerability occurs when the airqivcreate function fails to allocate a resource, returning a NULL value that is not properly checked. An attacker, potentially a malicious guest user,...

CVE-2026-80671

A flaw was found in the Linux kernel's perf sched subsystem. Multiple vulnerabilities exist within the registerpid function when processing untrusted performance data. These include an integer overflow that can lead to out-of-bounds memory writes and a heap buffer overflow due to improper string...

CVE-2026-80620

A flaw was found in the Linux kernel. During the error handling of Message Signaled Interrupts eXtended MSI-X region setup, the kernel attempts to unmap an already freed memory region. This double unmap operation on a null pointer can lead to a kernel warning or crash. A local attacker could...

CVE-2017-8056

CVE-2017-8056 CVE-2017-8056 XML-RPC Exploit DoS ⭐ FOR LINUX : sudo apt-get update sudo apt-get install python3 sudp apt-get install python3-pip pip3 install colorama fakeuseragent pystyle 🧨 RUN TOOL : python3 main.py ⭐ FOR WINDOWS : Download & Install Python3 :...

CVE-2024-6387-Mitigation-Ansible-Playbook

CVE-2024-6387 Mitigation Ansible Playbook An Ansible Playbook to mitigate the risk of the regreSSHion RCE CVE-2024-6387 vulnerability until platforms update OpenSSH to a non-vulnerable version. The mitigation applied here is based on the Mitigation Advice provided by Red Hat. As noted there: Noti...

POC-CVE-2025-48988-CVE-2025-48976

CVE-2025-48988 & CVE-2025-48976 About This project runs a simple file upload endpoint with Tomcat 10.1.41 and a Jakarta Servlet. The exploit runs, by default, 1000 parallelized multipart requests with 1000 parts and 50 headers by part, from 50 workers. Run POC Build and run the Docker container:...

tkeypoc

PoC for CVE-2015-5477 BIND9 TKEY DoS This code sends UDP packet that crashes vulnerable BIND9 DNS servers. root@kitploit: elceef@osiris:/tkeypoc$ ./tkeypoc.py localhost CVE-2015-5477 BIND9 TKEY PoC Sending packet to localhost ... Done...

CVE-2024-35106-POC

NEXTU FLETA Router Wifi6 DOS, POC de RCE Potencial Este documento describe cómo se llevó a cabo el exploit en el router WiFI EZNET FLETA a través de la vulnerabilidad CVE-2024-35106. Información de la vulnerabilidad ID de CVE CVE-2024-35106 Fabricante del Producto NEXTU Producto FLATA AX1500 Wifi...

EUVD-2026-68458

HTML::FormFu versions through 2.08 for Perl allow resource exhaustion via an unbounded repeat count from the query string in Repeatable elements. When a Repeatable element has countername set, its process method reads the repeat count from the named query string parameter, checks only that it is ...

anomaly-flow

Anomaly-Flow Framework for implementing Intrusion Detection Systems NIDS aimed at identifying anomalies in network flows using Machine Learning models. Reference paper: Anomaly-Flow: A Multi-domain Federated Generative Adversarial Network for Distributed Denial-of-Service Detection Create the...

CVE-2026-80594

A flaw was found in the Linux kernel's ims-pcu driver. This vulnerability allows a malicious device to trigger an infinite loop by providing a specially crafted descriptor with a zero-length field during the parsing of CDC union descriptors. This can lead to a Denial of Service DoS condition,...

CVE-2022-21907

CVE-2022-21907 Description 1. This repository detects a system vulnerable to CVE-2022-21907 CVSS:3.1 9.8 and protects against this vulnerability if desired. I offer 2 powershell codes in 1 line. 2. I propose pure python, powershell, ruby scripts and metasploit, nmap modules to attack a vulnerable...

CVE-2023-48194

CVE-2023-48194 Overview Firmware download website: https://www.tenda.com.cn/download/detail-3683.html https://down.tenda.com.cn/uploadfile/AC8/V16.03.34.09.zip https://static.tenda.com.cn/tdcweb/download/uploadfile/AC8/V16.03.34.09.zip Affected version AC8/V16.03.34.09 Vulnerability details Tenda...

CVE-2026-81624

Undertow , the web server used in JBoss EAP and WildFly , contains a flaw in how it handles WebSocket connections . Specifically, configuration limits such as message buffer sizes and session timeouts default to being unlimited and cannot be adjusted, allowing a remote, unauthenticated attacker t...

EUVD-2024-55736

nodemailer before 6.9.9 contains a regular expression denial of service vulnerability in email parsing when attachDataUrls parameter is set or processing embedded file attachments. Attackers can send specially crafted emails with malicious data URLs or embedded attachments to cause the event loop...

cve-2021-34558

POC for CVE-2021-34558 root@kitploit: Run the malicious TLS server go run main.go -mode server Run a normal http.Get client call against the server which panics go run main.go -mode client There is a minor modification to ./vendor/github.com/refraction-networking/utls/handshakeserver.go to enable...

BIT-TOMCAT-2026-68763 Apache Tomcat: DoS via allocation leak in HTTP/2 backlog tracking when a stream is reset

Uncontrolled Resource Consumption vulnerability in Apache Tomcat via an allocation leak in the HTTP/2 backlog tracking when a stream is reset This issue affects Apache Tomcat: from 11.0.0 through 11.0.24, from 10.1.0 through 10.1.57, from 9.0.39 through 9.0.120. The following versions were EOL at...

CVE-2018-10546

CVE-2018-10546 A user can create specially crafted data that, when processed using a stream filter with 'convert.iconv.', will cause the target application to enter an infinite loop and consume excessive CPU resources CVE-2018-10546. The specific impact of these vulnerabilities depends on the...

CVE-2014-1773

CClipStack::PushClipRect Invalid Array Indexing First, starting with the callstack from the crash with pageheap enabled: ChildEBP RetAddr 0919aac8 6b58459f MSHTML!CWorldTransform::IsAxisAligned 0919ab40 6ba228e9 MSHTML!CDispSurface::CClipStack::PushClipRect+0x1a2 0919aba4 6be25b58...

CVE-2023-44487

Rapid Reset Client Rapid Reset Client is a tool for testing mitigations and exposure to CVE-2023-44487 rapid reset DDoS attack vector. It implements a minimal HTTP/2 client that opens a single TCP socket, negotiates TLS, ignores the certificate, and exchanges SETTINGS frames. The client then send...