CVE-2021-31166-Exploit

CVE-2021-31166-Exploit Exploit para la vulnerabilidad RCE de la pila de protocolos HTTP de Microsoft CVE-2021-31166 Una solicitud Http especialmente manipulada dirigida a una versión vulnerable de Windows resultará en un ataque DOS. Y el servidor se reiniciará con un error de pantalla azul...

Security Bulletin: DataStage on Cloud Pak for Data has several vulnerabilities

Summary Several vulnerabilities were found in DataStage on Cloud Pak for Data Vulnerability Details CVEID:CVE-2026-82101 DESCRIPTION: DataStage on Cloud Pak for Data could allow a remote authenticated attacker to cause a denial of service due to a path traversal vulnerability. CWE:CWE-22: Imprope...

Security Bulletin: DataStage on Cloud Pak for Data has several vulnerabilities due to open source software

Summary Open source packages are used as part of the overall processing in DataStage on Cloud Pak for Data. Vulnerability Details CVEID:CVE-2026-29181 DESCRIPTION: OpenTelemetry-Go is the Go implementation of OpenTelemetry. From 1.36.0 to 1.40.0, multi-value baggage: header extraction parses each...

gstreamer1-plugins-base: gstreamer: NULL/invalid-pointer dereference in gst_rtsp_message_parse_auth_credentials() when parsing a crafted Digest Authorization/WWW-Authenticate header

A NULL pointer dereference flaw was found in GStreamer's RTSP support library. The vulnerability occurs while parsing an Authorization or WWW-Authenticate header that uses Digest authentication. Specially crafted whitespace placement around a parameter's terminator can cause an internal length...

CVE-2017-8056

CVE-2017-8056 CVE-2017-8056 XML-RPC Exploit DoS ⭐ PARA LINUX : sudo apt-get update sudo apt-get install python3 sudp apt-get install python3-pip pip3 install colorama fakeuseragent pystyle 🧨 EJECUTAR HERRAMIENTA : python3 main.py ⭐ PARA WINDOWS : Descargar & Instalar Python3 :...

CVE-2026-85220

CVE-2026-85220 is a Denial-of-Service vulnerability in the Redis service of the Thinkst Canary honeypot. An unauthenticated remote attacker can trigger a DoS when the Redis service is enabled ; the Canary is not affected if the service is disabled. The CVSS 3.1 score is 3.7 (LOW) , reflecting hig...

EUVD-2026-83910

A vulnerability in the Thinkst Canary honeypot Redis service allows an unauthenticated remote attacker to execute a Denial-of-Service attack against the honeypot. The vulnerability is accessible when the Redis service is enabled only. The Canary is NOT affected if the Redis service is disabled...

CVE-2026-85220 Denial-of-Service in the Thinkst Canary Redis service

A vulnerability in the Thinkst Canary honeypot Redis service allows an unauthenticated remote attacker to execute a Denial-of-Service attack against the honeypot. The vulnerability is accessible when the Redis service is enabled only. The Canary is NOT affected if the Redis service is disabled...

Chrome-Skia-CVE-2024-8636

Corregido en Chrome M128: https://chromereleases.googleblog.com/2024/09/stable-channel-update-for-desktop10.html Pasos para reproducir: 1. Aplicar el parche chromium.diff a chromium. 2. Ejecutar genskpic.py para generar drawablepicture.skp.hh, luego mover el archivo generado a...

AirDroidPwner

AirDroidPwner CVE-2019-9599 Este exploit ya no es funcional Video PoC Exploit: https://www.youtube.com/watch?v=0QDM2246DM CVE: https://nvd.nist.gov/vuln/detail/CVE-2019-9599 Exploit-db: https://www.exploit-db.com/exploits/46337 ¿Qué es AirDroid? AirDroid es una de las herramientas más conocidas y...

Security Bulletin: Multiple Vulnerabilities affect CICS Transaction Gateway for Multiplatforms and CICS Transaction Gateway Desktop Edition.

Summary Due to the use of IBM® Runtime Environment Java™, CICS Transaction Gateway Desktop Edition and CICS Transaction Gateway for Multiplatforms are vulnerable to multiple vulnerabilities. CICS Transaction Gateway for Multiplatforms and CICS Transaction Gateway Desktop Edition have updated the...

USN-8792-1 memcached vulnerability

It was discovered that Memcached incorrectly handled ASCII authentication. A remote attacker could possibly use this issue to cause Memcached to crash, resulting in a denial of service...

USN-8792-1: Memcached vulnerability

It was discovered that Memcached incorrectly handled ASCII authentication. A remote attacker could possibly use this issue to cause Memcached to crash, resulting in a denial of service...

USN-8787-1 libxml2 vulnerabilities

It was discovered that libxml2 incorrectly handled certain XML elements under certain circumstances. An attacker could possibly use this issue to cause libxml2 to crash or execute arbitrary code. CVE-2026-86140 It was discovered that libxml2 incorrectly handled certain XML documents when used wit...

USN-8787-1: libxml2 vulnerabilities

It was discovered that libxml2 incorrectly handled certain XML elements under certain circumstances. An attacker could possibly use this issue to cause libxml2 to crash or execute arbitrary code. CVE-2026-86140 It was discovered that libxml2 incorrectly handled certain XML documents when used wit...

Winrar-CVE-2023-40477-POC

PoC de CVE-2023-4047 por Wild Pointer Lee la investigación: https://wildptr.io/winrar-cve-2023-40477-poc-new-vulnerability-winrar-security-research/ Vulnerabilidad de Recvol3.cpp: https://www.rarlab.com/vulnrev3names.html, https://www.win-rar.com/ Vulnerable: WinRAR = 6.22 ¿Cómo probarlo? Puedes...

CVE-2026-38763

CVE-2026-38763 An issue in Unistal Systems Pvt. Ltd. Protegent 360 v2.0.0.4 allows a local attacker to cause a denial of service in the kernel...

http2-bomb-analysis-paper

Bomba HTTP/2: Ataque de cadena de amplificación de referencia indexada HPACK Inmersión técnica independiente de un estudiante de secundaria Junio de 2026 TL;DR Este repositorio contiene mi análisis completo de la vulnerabilidad HTTP/2 Bomb CVE-2026-49975 / CVE-2026-47774, que encadena dos...

USN-8786-1 rsyslog vulnerability

It was discovered that rsyslog incorrectly calculated buffer sizes when replacing strings. A remote attacker could possibly use this issue to cause rsyslog to crash, resulting in a denial of service...

USN-8786-1: rsyslog vulnerability

It was discovered that rsyslog incorrectly calculated buffer sizes when replacing strings. A remote attacker could possibly use this issue to cause rsyslog to crash, resulting in a denial of service...