nmap-CVE-2022-21907

nmap-CVE-2022-21907 CVE-2022-21907 कमज़ोरी के लिए nse स्क्रिप्ट वाला रिपॉज़िटरी। यह विंडोज़ पर एक घटक IIS कमज़ोरी है। यह रिमोट कोड निष्पादन की अनुमति देता है। यह कमज़ोरी कर्नेल मॉड्यूल http.sys को प्रभावित करती है, जो अधिकांश बुनियादी IIS संचालन को संभालता है। पेलोड अपलोड करने के बाद, सर्वर काम...

tvsz

CVE-2018-6389 PoC node js multisite with proxy Questo script è basato su CVE-2018-6389, un problema piuttosto insidioso di Wordpress che, purtroppo, probabilmente non verrà risolto dal team che sviluppa la piattaforma, nonostante sia noto da molto tempo. !!! IMPORTANTE PRIMA DI PROSEGUIRE !!!...

nextjs-cve-2026-23870-checker

@emstack/nextjs-cve-2026-23870-checker Strumento CLI per la verifica e la correzione di tutte e 13 le vulnerabilità presenti nel Security Release di Next.js di maggio 2026, inclusa CVE-2026-23870 DoS nei React Server Components. Avvio rapido root@kitploit: Modalità interattiva consigliata npx...

cve-2015-7547-public

Server di attacco PoC per la vulnerabilità CVE-2015-7547 in glibc DNS stub resolver Per testare su macchina locale con una versione vulnerabile di glibc: root@kitploit: user@localhost:/$ echo 'nameserver 127.0.0.127' | sudo tee /etc/resolv.conf user@localhost:/$ echo 'nameserver 127.0.0.127' | su...

patch-manual-CVE-2025-26465-e-CVE-2025-26466

🛡️ Mitigazione Manuale - OpenSSH CVE-2025-26465 e CVE-2025-26466 🔍 Informazioni sullo Script Questo script applica mitigazioni manuali per i problemi di sicurezza in OpenSSH , senza la necessità di un aggiornamento immediato. 🚨 CVE-2025-26465 Rimuove VerifyHostKeyDNS per evitare l'intercettazione...

CVE-2024-6387-Mitigation-Ansible-Playbook

Playbook Ansible per la mitigazione di CVE-2024-6387 Un Playbook Ansible per mitigare il rischio della vulnerabilità regreSSHion RCE CVE-2024-6387 fino a quando le piattaforme aggiorneranno OpenSSH a una versione non vulnerabile. La mitigazione applicata qui si basa sul Consiglio di Mitigazione...

jdbc.postgresql.org: pgjdbc: Client-side Denial of Service via malicious SCRAM-SHA-256 authentication

A flaw was found in pgjdbc, an open-source PostgreSQL JDBC Driver. A malicious server can exploit this vulnerability by instructing the driver to perform SCRAM-SHA-256 Salted Challenge Response Authentication Mechanism Secure Hash Algorithm 256 authentication with an excessively large iteration...

CVE-2022-24999

CVE-2022-24999 يحتوي هذا المستودع على عينات استغلال للثغرة التي وجدناها في مكتبة JS "qs" في ديسمبر 2021. تم إصلاح هذه الثغرة في express v4.17.3 و qs v6.10.3 v6.9.7, v6.8.3, v6.7.3, v6.6.1, v6.5.3, v6.4.1, v6.3.3, و v6.2.4. قنابل المصفوفات والسلاسل النصية في qs الإصدارات الضعيفة من "qs" تسمح بإنشا...

slowloris

slowloris.py - Simple slowloris in Python What is Slowloris? Slowloris is basically an HTTP Denial of Service attack that affects threaded servers. It works like this: 1. We start making lots of HTTP requests. 2. We send headers periodically every 15 seconds to keep the connections open. 3. We...

CVE-2002-0448

CVE-2002-0448 Xerver 2.10 - Vulnérabilités de déni de service par requêtes multiples Publication sur Exploit-db : https://www.exploit-db.com/exploits/21336/ Auteur Alex Hernandez alias @alt3kx...

CVE-2026-75575

Rocket.Chat exposes the sendForgotPasswordEmail Meteor method without a DDP rate limit, allowing an unauthenticated caller to invoke it via DDP or the HTTP route POST /api/v1/method.callAnon/sendForgotPasswordEmail. Because no DDPRateLimiter rule is registered, an attacker can send an unbounded v...

CVE-2002-0200

CVE-2002-0200 Cyberstop Web Server für Windows 0.1 erlaubt es entfernten Angreifern, einen Denial of Service über eine HTTP-Anfrage für einen MS-DOS-Gerätenamen zu verursachen. Externe Referenz unter https://marc.info/?l=bugtraq&m=101174569103289&w=2 Autor Alex Hernandez alias @alt3kx...

DEBIAN-CVE-2026-55373

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. Versions prior to 3.2.10, 3.3.12, and 3.4.13 contain an infinite-loop vulnerability in SampleCountChannel. The helper roundListSizeUp rounds a sample-list size up to the...

CVE-2026-55373 OpenEXR: OpenEXRUtil SampleCountChannel endEdit() can loop forever on UINT_MAX sample counts

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. Versions prior to 3.2.10, 3.3.12, and 3.4.13 contain an infinite-loop vulnerability in SampleCountChannel. The helper roundListSizeUp rounds a sample-list size up to the...

CVE-2026-55373 OpenEXR: OpenEXRUtil SampleCountChannel endEdit() can loop forever on UINT_MAX sample counts

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. Versions prior to 3.2.10, 3.3.12, and 3.4.13 contain an infinite-loop vulnerability in SampleCountChannel. The helper roundListSizeUp rounds a sample-list size up to the...

CVE-2026-55373

OpenEXR versions prior to 3.2.10, 3.3.12, and 3.4.13 contain an infinite-loop vulnerability in the SampleCountChannel component of OpenEXRUtil. The helper function roundListSizeUp() uses repeated unsigned left shifts to round a sample-list size up to the next power of two. When the input is UINT_...

rsc-security-auditor

🛡️ RSC Auditor di Sicurezza Rileva le vulnerabilità di sicurezza critiche CVE-2025-66478, CVE-2025-55184 nel tuo stack Next.js e React Server Components. 🚨 Urgente: Recenti divulgazioni Dic 2025 hanno rivelato vulnerabilità critiche DoS e RCE nei React Server Components. Questo strumento ti aiuta ...

Linux Distros Unpatched Vulnerability : CVE-2026-55059

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. Versions prior to 3.2.10, 3.3.12...

OpenSSL 1.1.1 < 1.1.1zi Multiple Vulnerabilities

The version of OpenSSL installed on the remote host is prior to 1.1.1zi. It is, therefore, affected by multiple vulnerabilities as referenced in the 1.1.1zi advisory. - Issue summary: Receiving a DTLS record for a future epoch while a handshake is in progress causes OpenSSL to buffer far more...

UBUNTU-CVE-2026-55373

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. Versions prior to 3.2.10, 3.3.12, and 3.4.13 contain an infinite-loop vulnerability in SampleCountChannel. The helper roundListSizeUp rounds a sample-list size up to the...