The vulnerability of the h2 library in the Rust programming language, related to uncontrolled resource consumption, allows attackers to cause service failures.

The vulnerability of the h2 library in the Rust programming language is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...

CVE-2023-44487

CVE-2023-44487 Escaneo básico de vulnerabilidades para comprobar si los servidores web pueden ser vulnerables a CVE-2023-44487 Esta herramienta comprueba si un sitio web es vulnerable a CVE-2023-44487 de forma completamente no invasiva. 1. La herramienta comprueba si un servidor web acepta...

CVE-2026-13156

CVE-2026-13156 — MailerSend Official SMTP Integration !IMPORTANT Abstract: A High-Severity Cross-Site Request Forgery CSRF vulnerability CVE-2026-13156 was discovered in the official MailerSend SMTP Integration plugin for WordPress 1.0.8. The configuration eradication handler...

apachedos

Esta herramienta usa CVE-2016-8740 para bloquear servidores que ejecutan Apache HTTPD 2.4.17 - 2.4.23 con soporte HTTP2. Bloquea estos servidores forzándolos a asignar cantidades increíblemente grandes de RAM, haciendo que la computadora sea inutilizable. Se puede descargar aquí necesitarás...

CVE-2023-30226

CVE-2023-30226 Rizin es un framework de ingeniería inversa bifurcado de radare2, se descubrió una falla en su código de análisis ELF que permitiría que un archivo manipulado realizara una denegación de servicio. Esto impediría que un usuario pudiera cargar el archivo en rizin, pero no tendría...

ban-exploitable-bitcoin-nodes

ban-exploitable-bitcoin-nodes Ban all denial-of-service vulnerability exploitable nodes from your node CVE-2018-17144 Requirements for the bash script ban.sh Command-line JSON processor jq. Install on Debian-based Linux root@kitploit: sudo apt-get install jq Download and use the script git clone...

NFSundown

Overview Proof-of-Concept exploit for NFSundown CVE-2025-38089. It can remotely trigger a kernel crash in an NFS server. Details A remote attacker can trigger a kernel null pointer dereference and crash the kernel by sending a specially crafted RPC request. This occurs due to improper handling of...

CVE-2026-28318-check

SolarWinds Serv-U DoS no autenticado: Script de detección seguro Un detector seguro, no destructivo para CVE-2026-28318 , una denegación de servicio no autenticada en SolarWinds Serv-U= 15.5.4.108. Una única POST que lleva Content-Encoding: deflate y un cuerpo alimenta ese cuerpo a un descompreso...

A-xex

A-xex Este proyecto es parte de un trabajo escolar centrado en la seguridad de redes. El autor no es responsable por el uso malicioso. El proyecto está siempre actualizándose Acerca de A-xex Framework root@kitploit: A-xex es una herramienta simple e intuitiva, que reúne muchas herramientas...

CVE-2026-49975-POC

CVE-2026-49975 — HTTP/2 Bomb PoC Proof-of-concept exploit for CVE-2026-49975, a remote denial-of-service vulnerability in HTTP/2 server implementations. Discovered by Quang Luong Calif Security Research, disclosed June 2, 2026. For authorized security testing only. Do not use against infrastructu...

An-Integrated-Wireless-Network-Forensic-Analysis-Framework

Un-Marco-Integrado-de-Análisis-Forense-de-Redes-Inalámbricas Este marco combina un conjunto de herramientas existentes de código abierto en un paquete integrado que automatiza el proceso de investigación forense. Es capaz de capturar tráfico de redes inalámbricas, analizar el tráfico capturado...

CVE-2016-2233

CVE-2016-2233 CVE-2016-2233 is a stack-based buffer overflow vulnerability related with a wide-used IRC software Hexchat. We build a IRC server and launch the attack on it to make all the client connected to the server crash. We exploited our attack on Ubuntu 12.04 using Python. We make a patch t...

http2-bomb

HTTP/2 Bomb — CVE-2026-49975 HTTP/2 Stream Amplification PoC · Docker · Web Console Vulnerability HTTP/2 allows multiplexing multiple streams over a single TCP connection. This PoC crafts specially formed HEADERS frames containing a large number of internal references, forcing the server to...

CVE-2021-44228

Log4j Vulnerabilities Update 19.12.2021: New vulnerabilities and new ways to exploit them in Log4j are constantly being discovered. We have added three flowcharts mind maps to the git repo that respectively describe vulnerable versions of Log4j, how to check if you are vulnerable, and mitigation ...

Vaim-sms

Vaim-sms ¿Qué es Vaim-sms ? Este es un bombardero de SMS que envía OTP al número de teléfono objetivo de forma ilimitada. Muchas veces solo quieres molestar o gastar una broma a tus amigos. Si te encuentras en esa situación, entonces este Bombardero de SMS es la herramienta perfecta para ti. Pued...

CVE-2026-32941

A framework-wide vulnerability in Sliver C2 allows for an unauthenticated, remote Denial of Service by triggering Uncontrolled Memory Allocation CWE-789 / CWE-400, leading to a process-wide Out-of-Memory OOM crash. References: Tenable Reproduction Steps: 1. Extract Credentials: Obtain the mTLS...

wifi-deauth

A DoS attack that disconnects all devices from a target wifi network. The network's password is not required Tested on Kali NetHunter Snapshot at the bottom IMPORTANT In some occasions, network APs might operate on both 5GHz and 2.4GHz under the same BSSID/SSID name. In order to truly bring the A...

CVE-2023-44487

Rapid Reset Client Rapid Reset Client es una herramienta para probar mitigaciones y exposición a CVE-2023-44487 vector de ataque DDoS de reinicio rápido. Implementa un cliente HTTP/2 mínimo que abre un único socket TCP, negocia TLS, ignora el certificado e intercambia marcos de CONFIGURACIÓN...

CVE-2026-49975

CVE-2026-49975 HTTP/2 Bomb PoC HTTP/2 Remote Denial of Service Vulnerability Replication Tool Vulnerability Overview CVE-2026-49975 is an HTTP/2 denial of service vulnerability affecting major web servers. The vulnerability was discovered by security company Calif using OpenAI Codex in early June...

CVE-2019-19511

CVE-2019-19511 Chevereto - 1.0.0 Free - 1.1.4 Free, = 3.13.4 Core, Remote Code Execution Description installer.php in Chevereto through 1.1.4 Free, and through 3.13.4 Core, allows remote authenticated admins to execute arbitrary PHP code by injecting this code into the setup process and overwriti...