ROOT-OS-DEBIAN-12-CVE-2026-34191 CVE-2026-34191 in apr-util - Patched by Root

Root has patched CVE-2026-34191 in the apr-util package for Root:Debian:12. Multiple fixed versions available...

ban-exploitable-bitcoin-nodes

ban-exploitable-bitcoin-nodes अपने नोड CVE-2018-17144 से सभी सेवा-निषेध-हमला भेद्यता शोषण योग्य नोड्स पर प्रतिबंध लगाएं bash स्क्रिप्ट ban.sh के लिए आवश्यकताएँ कमांड-लाइन JSON प्रोसेसर jq डेबियन-आधारित लिनक्स पर इंस्टॉल करें root@kitploit: sudo apt-get install jq स्क्रिप्ट डाउनलोड करें और उपयोग...

nmap-CVE-2022-21907

nmap-CVE-2022-21907 CVE-2022-21907 कमज़ोरी के लिए nse स्क्रिप्ट वाला रिपॉज़िटरी। यह विंडोज़ पर एक घटक IIS कमज़ोरी है। यह रिमोट कोड निष्पादन की अनुमति देता है। यह कमज़ोरी कर्नेल मॉड्यूल http.sys को प्रभावित करती है, जो अधिकांश बुनियादी IIS संचालन को संभालता है। पेलोड अपलोड करने के बाद, सर्वर काम...

tvsz

CVE-2018-6389 PoC node js multisite with proxy Questo script è basato su CVE-2018-6389, un problema piuttosto insidioso di Wordpress che, purtroppo, probabilmente non verrà risolto dal team che sviluppa la piattaforma, nonostante sia noto da molto tempo. !!! IMPORTANTE PRIMA DI PROSEGUIRE !!!...

nextjs-cve-2026-23870-checker

@emstack/nextjs-cve-2026-23870-checker Strumento CLI per la verifica e la correzione di tutte e 13 le vulnerabilità presenti nel Security Release di Next.js di maggio 2026, inclusa CVE-2026-23870 DoS nei React Server Components. Avvio rapido root@kitploit: Modalità interattiva consigliata npx...

cve-2015-7547-public

Server di attacco PoC per la vulnerabilità CVE-2015-7547 in glibc DNS stub resolver Per testare su macchina locale con una versione vulnerabile di glibc: root@kitploit: user@localhost:/$ echo 'nameserver 127.0.0.127' | sudo tee /etc/resolv.conf user@localhost:/$ echo 'nameserver 127.0.0.127' | su...

patch-manual-CVE-2025-26465-e-CVE-2025-26466

🛡️ Mitigazione Manuale - OpenSSH CVE-2025-26465 e CVE-2025-26466 🔍 Informazioni sullo Script Questo script applica mitigazioni manuali per i problemi di sicurezza in OpenSSH , senza la necessità di un aggiornamento immediato. 🚨 CVE-2025-26465 Rimuove VerifyHostKeyDNS per evitare l'intercettazione...

CVE-2024-6387-Mitigation-Ansible-Playbook

Playbook Ansible per la mitigazione di CVE-2024-6387 Un Playbook Ansible per mitigare il rischio della vulnerabilità regreSSHion RCE CVE-2024-6387 fino a quando le piattaforme aggiorneranno OpenSSH a una versione non vulnerabile. La mitigazione applicata qui si basa sul Consiglio di Mitigazione...

jdbc.postgresql.org: pgjdbc: Client-side Denial of Service via malicious SCRAM-SHA-256 authentication

A flaw was found in pgjdbc, an open-source PostgreSQL JDBC Driver. A malicious server can exploit this vulnerability by instructing the driver to perform SCRAM-SHA-256 Salted Challenge Response Authentication Mechanism Secure Hash Algorithm 256 authentication with an excessively large iteration...

the-sanitizer-is-the-weapon-cve-2026-68749-cve-2026-68750-quadratic-dos-in-elixir-html-sanitize-ex

CVE-2026-68749 / CVE-2026-68750 — PoC Quadratischer Denial-of-Service in htmlsanitizeex 1.5.3. Die Bibliothek dient dazu, nicht vertrauenswürdiges HTML zu neutralisieren, doch zwei unabhängige superlineare Codepfade ermöglichen es einer einzigen präparierten Anfrage, einen BEAM-Scheduler für...

CVE-2026-0049

CVE-2026-0049 — Android DNG zero-click DoS dngsdk MapTable add-overflow Materiale completo di ricerca e PoC. Analisi narrativa: 🇮🇹BLOG.md · 🇬🇧BLOG.en.md. Bug : overflow di interi unsigned su fAreaSpec.Plane + fAreaSpec.Planes in dngopcodeMapTable::ProcessArea dngsdk/source/dngmiscopcodes.cpp:388...

CVE-2022-24999

CVE-2022-24999 يحتوي هذا المستودع على عينات استغلال للثغرة التي وجدناها في مكتبة JS "qs" في ديسمبر 2021. تم إصلاح هذه الثغرة في express v4.17.3 و qs v6.10.3 v6.9.7, v6.8.3, v6.7.3, v6.6.1, v6.5.3, v6.4.1, v6.3.3, و v6.2.4. قنابل المصفوفات والسلاسل النصية في qs الإصدارات الضعيفة من "qs" تسمح بإنشا...

ipv6tools

IPv6Tools The IPv6Tools framework is a robust set of modules and plugins that allow a user to audit an IPv6 enabled network. The built-in modules support enumeration of IPv6 features such as ICMPv6 and Multicast Listener Discovery MLD. In addition, the framework also supports enumeration of Upper...

slowloris

slowloris.py - Simple slowloris in Python What is Slowloris? Slowloris is basically an HTTP Denial of Service attack that affects threaded servers. It works like this: 1. We start making lots of HTTP requests. 2. We send headers periodically every 15 seconds to keep the connections open. 3. We...

CVE-2002-0448

CVE-2002-0448 Xerver 2.10 - Vulnérabilités de déni de service par requêtes multiples Publication sur Exploit-db : https://www.exploit-db.com/exploits/21336/ Auteur Alex Hernandez alias @alt3kx...

CVE-2026-75575

Rocket.Chat exposes the sendForgotPasswordEmail Meteor method without a DDP rate limit, allowing an unauthenticated caller to invoke it via DDP or the HTTP route POST /api/v1/method.callAnon/sendForgotPasswordEmail. Because no DDPRateLimiter rule is registered, an attacker can send an unbounded v...

CVE-2002-0200

CVE-2002-0200 Cyberstop Web Server für Windows 0.1 erlaubt es entfernten Angreifern, einen Denial of Service über eine HTTP-Anfrage für einen MS-DOS-Gerätenamen zu verursachen. Externe Referenz unter https://marc.info/?l=bugtraq&m=101174569103289&w=2 Autor Alex Hernandez alias @alt3kx...

DEBIAN-CVE-2026-55373

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. Versions prior to 3.2.10, 3.3.12, and 3.4.13 contain an infinite-loop vulnerability in SampleCountChannel. The helper roundListSizeUp rounds a sample-list size up to the...

CVE-2026-55373 OpenEXR: OpenEXRUtil SampleCountChannel endEdit() can loop forever on UINT_MAX sample counts

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. Versions prior to 3.2.10, 3.3.12, and 3.4.13 contain an infinite-loop vulnerability in SampleCountChannel. The helper roundListSizeUp rounds a sample-list size up to the...

CVE-2026-55373

OpenEXR versions prior to 3.2.10, 3.3.12, and 3.4.13 contain an infinite-loop vulnerability in the SampleCountChannel component of OpenEXRUtil. The helper function roundListSizeUp() uses repeated unsigned left shifts to round a sample-list size up to the next power of two. When the input is UINT_...