rapidresetclient

Rapid Reset Client Rapid Reset Client is a tool for testing mitigations and exposure to CVE-2023-44487 Rapid Reset DDoS attack vector. It implements a minimal HTTP/2 client that opens a single TCP socket, negotiates TLS, ignores the certificate, and exchanges SETTINGS frames. The client then send...

CVE-2025-26466

CVE-2025-26466 CVE-2025-26466 の PoC 作者: Fikret Can Gurbuz 使用方法 root@kitploit: python3 poc.py -i -p 手順は以下の通りです: 1. ポートに TCP 接続する 2. サーバーのバナーを受信する SSH-2.0-OpenSSHX.Xp1 3. クライアントバナーを送信する SSH-2.0-YourClient\r\n 4. wrapsshpacketbuildkexinit を送信する 5. サーバーの KEXINIT 応答を受信する 6. buildping の送信をループする ! KEX...

cryptpad-cve-2025-51846-advisory

CVE-2025-51846 – Unbounded WebSocket Frame Flood Enables Remote Denial of Service Severity: High CVSS 7.5 CWE: 400 – Uncontrolled Resource Consumption Resource Exhaustion, CWE: CWE-770 – Allocation of Resources Without Limits or Throttling Status: Fixed Confirmed affected: CryptPad 2025.3.1...

Apache-Hunter

ApacheHunter - Escáner Avanzado de Servidores Apache Desarrollado por Rownok Ahmed Khan GitHub:https://github.com/Rk-000 ApacheHunter es un potente escáner diseñado para detectar servidores Apache, identificar versiones y comprobar la vulnerabilidad CVE-2024-22393 Pixel Flood en instalaciones de...

CVE-2017-11499

Node.js固有のセキュリティ脆弱性 定数ハッシュテーブルシード CVE-2017-11499 Node.jsは、ハッシュテーブルのシードが特定のリリースバージョンで一定であったため、ハッシュフラッディングによるリモートDoS攻撃を受けやすい状態でした。これは、V8スナップショットがデフォルトで有効な状態でビルドされた結果、起動時に初期のランダム化されたシードが上書きされてしまったためです。この脆弱性を報告してくれたGoogle Project ZeroのJann Horn氏に感謝します。 ハッシュフラッディング脆弱性の一般的なカテゴリについてはこちらで読むことができます。...

CVE-2025-15474

Vulnerabilidad de Denegación de Servicio DoS en Cerradura Inteligente BLE Una inundación de conexiones Bluetooth Low Energy BLE no autenticadas puede impedir de manera confiable que los usuarios legítimos desbloqueen el dispositivo interrumpiendo la entrada del teclado y forzando estados de bloqu...

CVE-2016-10708

SSH NEWKEYS 洪水 PoC（CVE-2016-10708） 描述 此概念验证脚本利用 OpenSSH 7.4 之前版本中的一个漏洞（CVE-2016-10708），通过发送意外的 SSHMSGNEWKEYS 数据包导致拒绝服务（DoS）。它支持两种模式： scan ：连接到一个或多个 SSH 服务器，获取其横幅，解析 OpenSSH 版本，并报告目标是否存在漏洞。 attack ：打开多个并发连接，用精心构造的 NEWKEYS 消息向服务器发起洪水攻击，触发拒绝服务状态。 警告与法律声明...

DEBIAN-CVE-2026-89604

In the Linux kernel, the following vulnerability has been resolved: efivarfs: Rate limit statfs handler Ravi reports that statfs may be called by unprivileged users on the efivarfs mount point, which may result in a flood of calls to the QueryVariableInfo runtime service. These calls are...

overload

Overload Una herramienta de pruebas de estrés de red basada en Python que incluye métodos de ataque de Capa 2, Capa 4 y Capa 7 para pruebas de seguridad autorizadas. !WARNING Este proyecto ha sido archivado y ya no se mantiene activamente. Aunque el código fuente sigue disponible, no se planean...

DDoS-PHP-Script

Script PHP de DDoS Script para realizar un ataque DDoS UDP flood con PHP Uso Desde el servidor web visite la página: http://127.0.0.1/ddos.php?pass=apple&host=TARGET&port=PORT&time=SECONDS&packet=NUMBER&bytes=NUMBER Desde la terminal: php ./ddos.php host=TARGET port=PORT time=SECONDS packet=NUMBE...

Linux Distros Unpatched Vulnerability : CVE-2026-57226

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - suricata - None Ubuntu Linux - detect/filedata: heap buffer overflow in SWF decompression depth handling CVE-2026-57226 Note that Nessus relies o...

CVE-2025-55972-Remote-Unauthenticated-Denial-of-Service-DoS-in-TCL-Smart-TV-UPnP-DLNA-AVTransport

CVE-2025-55972-Remote-Unauthenticated-Denial-of-Service-DoS-in-TCL-Smart-TV-UPnP-DLNA-AVTransport A TCL Smart TV running a vulnerable UPnP/DLNA MediaRenderer implementation is affected by a remote, unauthenticated Denial of Service DoS. Vendor: TCL Technology Group Corporation Product: TCL Smart ...

CVE-2026-36957

CVE-2026-36957: Denial of Service via HTTP Flood on Boa Web Server CVE ID: CVE-2026-36957 Date: 2026-04-29 Discoverer: Kirubel Solomne Vendor: Shenzhen Dibit Network Equipment Co., Ltd. Product: Dbit Router Firmware Version: V1.0.0 CWE: CWE-400 - Uncontrolled Resource Consumption Description The...

CVE-2026-78662

A flaw was found in golang.org/x/crypto/ssh. A malicious remote attacker could flood a channel's incoming requests before it is established, leading to a deadlock of the entire connection. This could result in a denial of service DoS for legitimate users. Mitigation Red Hat is not aware of a...

CVE-2022-51008

PocketMine-MP before 4.12.3 fails to limit unauthenticated sessions, allowing attackers to exhaust player slots by creating sessions without sending LoginPacket. Attackers can flood the server with unauthenticated connections that occupy max-player slots, preventing legitimate players from joinin...

CVE-2021-44320

Parrot AR.Drone version 1 and 2 does not employ a suitable mechanism to prevent denial-of-service DoS attacks. An attacker can harm the device availability i.e., video streaming and control by using tool to perform an IPv4 flood attack. Verified attacks includes SYN flooding and UDP flooding...

SUSE CVE-2026-78662

Previously, a channel registered in the mux's chanList is not usable until it is established. A malicious peer was able flood the channel's incomingRequests, deadlocking the entire connection. Now, we add an atomic established state, set when a channel becomes usable. Until such a time,...

CVE-2021-44320

Parrot AR.Drone version 1 and 2 does not employ a suitable mechanism to prevent denial-of-service DoS attacks. An attacker can harm the device availability i.e., video streaming and control by using tool to perform an IPv4 flood attack. Verified attacks includes SYN flooding and UDP flooding...

CVE-2021-44320

Parrot AR.Drone versions 1 and 2 lack a suitable mechanism to prevent denial-of-service attacks. An unauthenticated, remote attacker can exploit IPv4 flood attacks —specifically SYN flooding and UDP flooding —to disrupt device availability, including video streaming and control . The root cause i...

Linux Distros Unpatched Vulnerability : CVE-2026-78662

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Previously, a channel registered in the mux's chanList is not usable until it is established. A malicious peer was able flood the channel's incomingRequests,...