Lucene search
+L

1626362 matches found

RedHat Linux
RedHat Linux
added 2026/09/14 4:12 p.m.3 views

golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses

A flaw was found in golang.org/x/crypto/ssh. A remote malicious SSH peer can exploit this by sending unsolicited global request responses, which fills an internal buffer and blocks the connection's read loop. This prevents the associated resources from being released, leading to a resource leak p...

9.1CVSS0.00621EPSS
SaveExploits0References9
RedHat Linux
RedHat Linux
added 2026/09/14 4:12 p.m.3 views

golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted AES-GCM packet decoder inputs

A flaw was found in golang.org/x/crypto/ssh. A remote attacker could send specially crafted inputs to the AES-GCM packet decoder. This could lead to an incorrectly placed cast from bytes to an integer, causing a server-side panic and resulting in a Denial of Service DoS for the affected system...

7.5CVSS0.00473EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
added 2026/09/14 4:12 p.m.4 views

golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters

A flaw was found in golang.org/x/crypto/ssh. The RSA and DSA public key parsers in the affected component did not enforce size limits on key parameters. This vulnerability allows an unauthenticated client to provide a crafted public key with an excessively large modulus or DSA parameter during...

7.5CVSS0.00467EPSS
SaveExploits0References9
RedHat Linux
RedHat Linux
added 2026/09/14 4:12 p.m.4 views

golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey

A flaw was found in golang.org/x/crypto/ssh/knownhosts. This vulnerability occurs because the system did not correctly check for the revocation status of a SignatureKey belonging to a Certificate Authority CA. A remote attacker could potentially exploit this by presenting a revoked key, leading t...

9.1CVSS0.07314EPSS
SaveExploits0References8
Vulnrichment
Vulnrichment
added 2026/09/14 4:12 p.m.3 views

CVE-2026-53496 ExifReader HEIC/AVIF ISO-BMFF parser throws uncaught RangeError on truncated boxes

ExifReader is a JavaScript Exif information parser. Prior to 4.40.1, ExifReader.load and the asynchronous file and URL loaders can pass attacker-supplied HEIC or AVIF data to the ISO-BMFF parser in src/image-header-iso-bmff.js, where findMetaBox and parseBox accept an eight-byte box header withou...

5.3CVSS
SaveExploits0References3
CVE
CVE
added 2026/09/14 4:12 p.m.36 views

CVE-2026-53496

ExifReader (npm package exifreader), a JavaScript Exif metadata parser, is vulnerable to denial of service via crafted HEIC/AVIF files in versions prior to 4.40.1 . The ISO-BMFF parser in src/image-header-iso-bmff.js accepts an 8-byte box header without verifying that required fields remain withi...

5.3CVSS
SaveExploits0References3
EUVD
EUVD
added 2026/09/14 4:12 p.m.5 views

EUVD-2026-77628

ExifReader is a JavaScript Exif information parser. Prior to 4.40.1, ExifReader.load and the asynchronous file and URL loaders can pass attacker-supplied HEIC or AVIF data to the ISO-BMFF parser in src/image-header-iso-bmff.js, where findMetaBox and parseBox accept an eight-byte box header withou...

5.3CVSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/09/14 4:12 p.m.6 views

CVE-2026-53496 ExifReader HEIC/AVIF ISO-BMFF parser throws uncaught RangeError on truncated boxes

ExifReader is a JavaScript Exif information parser. Prior to 4.40.1, ExifReader.load and the asynchronous file and URL loaders can pass attacker-supplied HEIC or AVIF data to the ISO-BMFF parser in src/image-header-iso-bmff.js, where findMetaBox and parseBox accept an eight-byte box header withou...

5.3CVSS
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/14 4:12 p.m.8 views

Fault-Injection-Finder

故障注入查找器 root@kitploit: ▄▖ ▜ ▗ ▄▖ ▘ ▗ ▘ ▄▖▘ ▌ ▙▖▀▌▌▌▐ ▜▘ ▐ ▛▌ ▌█▌▛▘▜▘▌▛▌▛▌ ▙▖▌▛▌▛▌█▌▛▘ ▌ █▌▙▌▐▖▐▖ ▟▖▌▌ ▌▙▖▙▖▐▖▌▙▌▌▌ ▌ ▌▌▌▙▌▙▖▌ ▙▌ Geeoon Chung 和 Nate Snyder 本仓库是我们故障注入攻击项目的软件部分。硬件部分请查看此仓库。 项目总览 本项目旨在找出程序执行中被跳过/NOP 后会导致安全问题的指令。 1. 预处理 1. 加载二进制文件 2. 识别被 NOP 后更有可能导致安全问题的指令。 2. Unicorn 模拟 1. 运行程序,将第 n...

6AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/14 4:12 p.m.5 views

geacon

Geacon Goを使ってCobaltStrikeのBeaconを実装する このプロジェクトはプロトコル分析とリバースエンジニアリングの学習のみを目的としています。権利が侵害された場合は、プロジェクトを削除するようご連絡ください。また、最後に、違法に使用しないでください。 使い方 1. チームサーバーをセットアップし、httpリスナーを起動します。チームサーバーは .cobaltstrike.beaconkeys ファイルを生成します。 2. Jetbrains Ideaを使用してBeaconToolをコンパイルし、コマンド java -jar BeaconTool.jar...

5.9AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/14 4:12 p.m.146 views

geacon

Geacon Using Go to implement CobaltStrike's Beacon This project is for learning protocol analysis and reverse engineering only, if someone's rights have been violated, please contact me to remove the project, and the last DO NOT USE IT ILLEGALLY How to play 1. Setup the teamserver and start a htt...

5.6AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/14 4:12 p.m.16 views

blackhat-python3

Python 3 "Black Hat Python" 源代码 Justin Seitz 所著《Black Hat Python》一书的源代码。代码已完全转换为 Python 3,并按照 PEP8 标准重新格式化,同时进行了重构,以消除因实现已弃用库而导致的依赖问题。...

5.8AI score
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2026/09/14 4:11 p.m.4 views

CVE-2026-84445 gRPC-Go: Denial of Service (DoS) via crash due to missing `:authority` and `Host` headers in the xDS servers

gRPC-Go is the Go language implementation of gRPC. Prior to 1.82.2 and 1.83.2, servers created with xds.NewGRPCServer allow internal/transport/http2server.go to accept an RPC containing neither the :authority header nor the Host header, while RouteAndProcess in internal/xds/server/routing.go...

8.7CVSS
SaveExploits0References10
Cvelist
Cvelist
added 2026/09/14 4:11 p.m.8 views

CVE-2026-84445 gRPC-Go: Denial of Service (DoS) via crash due to missing `:authority` and `Host` headers in the xDS servers

gRPC-Go is the Go language implementation of gRPC. Prior to 1.82.2 and 1.83.2, servers created with xds.NewGRPCServer allow internal/transport/http2server.go to accept an RPC containing neither the :authority header nor the Host header, while RouteAndProcess in internal/xds/server/routing.go...

8.7CVSS
SaveExploits0References10
CVE
CVE
added 2026/09/14 4:11 p.m.43 views

CVE-2026-84445

CVE-2026-84445 affects gRPC-Go prior to versions 1.82.2 and 1.83.2 . Servers created via xds.NewGRPCServer() accept RPCs containing neither the :authority nor Host header. The RouteAndProcess function in internal/xds/server/routing.go then assumes an authority value exists and indexes an empty sl...

8.7CVSS
SaveExploits0References10
EUVD
EUVD
added 2026/09/14 4:11 p.m.5 views

EUVD-2026-77627

gRPC-Go is the Go language implementation of gRPC. Prior to 1.82.2 and 1.83.2, servers created with xds.NewGRPCServer allow internal/transport/http2server.go to accept an RPC containing neither the :authority header nor the Host header, while RouteAndProcess in internal/xds/server/routing.go...

8.7CVSS
SaveExploits0References10
Kitploit
Kitploit
added 2026/09/14 4:11 p.m.8 views

github-search

github-search GitHub上で検索を実行するためのツール集。 インストール root@kitploit: git clone https://github.com/gwen001/github-search cd github-search pip3 install -r requirements.txt ほとんどの場合、GitHubは検索を実行するためにトークンを必要とします。 クローンしたリポジトリディレクトリに .tokens ファイルを作成し、1行に1つのトークンを記述できます。 または 以下のように環境変数(推奨)を設定することもできます:...

6AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/14 4:09 p.m.7 views

Pantheon

Pantheon Pantheonについて Pantheonは、さまざまな国のネットワークカメラに関する情報を表示できるGUIアプリケーションであり、保護されていないカメラ向けの統合ライブフィードも備えています。 機能 Pantheonは、API クローラーの実行を可能にします。元々はAPI(Insecamなど)を使用しない機能もありましたが、Googleの利用規約が当初のスクレイピング機構の妨げになりました。 インストール 1. git clone https://github.com/josh0xA/Pantheon.git 2. cd Pantheon 3. pip3 instal...

6.3AI score
SaveExploits0
Cvelist
Cvelist
added 2026/09/14 4:09 p.m.5 views

CVE-2026-54156 node-opcua: Unbounded nonce cache enables unauthenticated heap exhaustion DoS

node-opcua is an OPC UA implementation for TypeScript and Node.js. Prior to 2.166.0, the process-global galreadyUsedNonce cache used by nonceAlreadyBeenUsed in packages/node-opcua-secure-channel/source/server/serversecurechannellayer.ts records nonces from OpenSecureChannelRequest and CreateSessi...

7.5CVSS
SaveExploits0References3
CVE
CVE
added 2026/09/14 4:09 p.m.25 views

CVE-2026-54156

node-opcua (an OPC UA implementation for TypeScript/Node.js) versions >=2.1.9 through

7.5CVSS
SaveExploits0References3
Rows per page
Query Builder