CVE-2022-21907

CVE-2022-21907 説明 1. このリポジトリは、CVE-2022-21907（CVSS:3.1 9.8 ）に脆弱なシステムを検出し、必要に応じてこの脆弱性から保護します。1行のPowerShellコードを2つ提供します。 2. 脆弱なIIS Webサーバーを攻撃するための、純粋なPython、PowerShell、Rubyスクリプトと、Metasploit、nmapモジュールを提供します（サーバーをクラッシュ（ブルースクリーン）させるDoS攻撃を実行します）。 検出と保護 スクリプト このスクリプトは、検出用のワンライナーコードを2つ、保護用のワンライナーコードを2つ実行しま...

rsc-security-auditor

🛡️ RSC セキュリティ監査ツール Next.js および React Server Components スタックにおける深刻なセキュリティ脆弱性（CVE-2025-66478、CVE-2025-55184）を検出します。 🚨 緊急: 2025年12月の最近の開示により、React Server Components に深刻な DoS および RCE 脆弱性が明らかになりました。このツールは、package.json を即座に監査するのに役立ちます。 ⚡ 機能 🔒 プライバシー最優先: 100% クライアントサイド。あなたの package.json データはブラウザから 決して...

cve

CVE 문제 설명: Stackoverflow Docker에서 내 프로젝트를 빌드하려고 합니다. 그래서 Docker Desktop을 사용하여 프로젝트를 빌드하고 있습니다. 이미지를 빌드하면 다음 항목이 내 취약점 중 하나로 표시됩니다. root@kitploit: CVE-2024-26308 CWE-770 7.5 H Allocation of Resources Without Limits or Throttling vulnerability in Apache Commons Compress. This issue affects Apache...

ban-exploitable-bitcoin-nodes

ban-exploitable-bitcoin-nodes Blocca tutti i nodi sfruttabili tramite la vulnerabilità di denial-of-service dal tuo nodo CVE-2018-17144 Requisiti per lo script bash ban.sh Processore JSON da riga di comando jq. Installazione su Linux basato su Debian root@kitploit: sudo apt-get install jq Scarica...

cve-2023-44487-demo

⚡ CVE-2023-44487 Demo – HTTP/2 Rapid Reset Attack Dieses Projekt demonstriert die HTTP/2 „Rapid Reset“-Sicherheitslücke CVE-2023-44487, die es Angreifern ermöglicht, Server mit RSTSTREAM-Frames zu überlasten und einen Denial-of-Service DoS zu verursachen. Es beinhaltet: ✅ Exploit-Test mit...

Security Bulletin: Security Vulnerability in Apache Struts affects IBM Sterling B2B Integrator and IBM Sterling File Gateway (CVE-2025-64775)

Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway have addressed vulnerability due to Apache Struts Vulnerability Details CVEID:CVE-2025-64775 DESCRIPTION: Denial of Service vulnerability in Apache Struts, file leak in multipart request processing causes disk exhaustion. This issu...

Security Bulletin: Security Vulnerability in Spring MVC affects IBM Sterling B2B Integrator and IBM Sterling File Gateway (CVE-2024-38828)

Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway have addressed vulnerability due to Spring MVC Vulnerability Details CVEID:CVE-2024-38828 DESCRIPTION: Spring MVC controller methods with an @RequestBody byte method parameter are vulnerable to a DoS attack. CWE:CWE-400: Uncontroll...

Astra Linux – Vulnerability in Ruby 2.5

REXML is an XML toolkit for Ruby. The REXML gem before version 3.3.2 had some DoS vulnerabilities when parsing XML that contained many special characters, such as whitespace characters, , , and . The REXML gem versions 3.3.3 or later include patches to fix these vulnerabilities...

Linux Distros Unpatched Vulnerability : CVE-2026-74542

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netfs: Fix folioqueue ENOMEM in writeback by adding a mempool Fix the handling of folioqueue allocation failure in writeback by adding a mempool and passing in...

Linux Distros Unpatched Vulnerability : CVE-2026-72497

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RDMA/bnxtre: Add a max slot check for SQ The variable WQE mode must be validated against the maximum slots supported by HW. The max supported value is 64K. Addi...

Cisco Adaptive Security Appliance (ASA) Remote Access SSL VPN DoS (cisco-sa-asaftd-vpn-dos-dzv4mQFF)

According to its self-reported version, the Cisco ASA software is affected by a denial of service vulnerability. A flaw exists due to insufficient error checking when processing HTTP requests. An unauthenticated, remote attacker can exploit this issue, via a crafted HTTP request to the Remote...

CVE-2026-11932 Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 and IBM Verify Identity Access Container 11.0 through 11.0.3 is vulnerable to a denial of service attack...

Security update for nodejs24 (important)

openSUSE security update: security update for nodejs24 ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21546-1 Rating: important References: bsc1272882 bsc1272941 bsc1272942 bsc1272943 bsc1272944 bsc1272945 bsc1272946 bsc1272947 bsc1272948 bsc127294...

CVE-2026-70348 Windows Management Services Denial of Service Vulnerability

...

Astra Linux – Vulnerability in containerd-app

The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which can lead to a Denial-of-Service DoS attack if an attacker provides specially crafted HTML content...

Astra Linux – Vulnerability in Firefox and Thunderbird

DoS attack in the WebRTC signaling component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9...

Astra Linux – Vulnerability in Firefox

DoS attack in the Libraries component in NSS. This vulnerability has been fixed in Firefox 149 and Thunderbird 149...

Linux Distros Unpatched Vulnerability : CVE-2026-68299

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - vmxnet3: fix BUGON in vmxnet3gethdrlen for Geneve packets vmxnet3gethdrlen assumes gdesc-rcd.v4/v6/tcp always describe the outer header, but for a...

EUVD-2026-54578

Hono is a Web application framework that provides support for any JavaScript runtime. From 4.12.0 to 4.12.33, the languageDetector middleware is vulnerable to algorithmic complexity denial of service when processing a crafted language tag containing a large number of hyphen separated subtags. To...

Linux Distros Unpatched Vulnerability : CVE-2026-71436

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Mermaid is a JavaScript tool that uses Markdown-inspired text to create and modify diagrams and charts. From version 10.6.0 until 10.9.8 and 11.16.1, Mermaid XY...