PHP_8.1.x_Exploit

🚀 PHP CVE 自动驾驶仪 自动检测和利用关键 PHP 漏洞 CVE-2024-4577 绕过, CVE-2025-14177, CVE-2025-14180, CVE-2025-14178 PHP8.1.xExploit.sh 是一个单文件、零配置 的安全评估工具，能够自动发现易受攻击的 PHP 端点，并利用影响 PHP 8.1.34 之前版本 （2024 年 12 月发布）的四个高危 CVE 。它无需手工构建载荷 ——只需提供一个 URL，脚本会自动完成从爬取到远程代码执行的全部工作。完全自动驾驶模式 ——无需用户提示即可自动检测和利用。 特性 完全自主的自动驾驶模式 – 给定一...

CVE-2017-7529-Nginx---Remote-Integer-Overflow-Exploit

此存储库没有 README。...

CVE-2017-7529-

CVE-2017-7529-Nginx Range Header 整数溢出 Nginx 是一款高性能 Web 服务器，也是一款广泛使用的开源 Web 服务器，常用于反向代理、缓存服务器等。 在 Nginx 1.13.2 及更低版本中，存在一个因整数溢出导致的漏洞，攻击者可通过操纵 Range 头，泄露超出原始响应范围的内存片段或敏感信息。 Reference https://www.freebuf.com/articles/web/140178.html 漏洞环境搭建 输入以下命令以启动存在漏洞的 Nginx 环境。 bash docker compose up -d...

Linux Distros Unpatched Vulnerability : CVE-2026-49919

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In ttfacecolrblendlayer of ttcolr.c, there is a possible remote code execution due to an integer overflow. This could lead to local escalation of privilege with...

Google Chrome < 154.0.8037.97 Multiple Vulnerabilities

The version of Google Chrome installed on the remote macOS host is prior to 154.0.8037.97. It is, therefore, affected by multiple vulnerabilities as referenced in the 202610stable-channel-update-for-desktop advisory. - Use after free in FedCM in Google Chrome prior to 154.0.8037.97 allowed a remo...

CVE-2026-95616

An integer overflow in WSS4J's DER bounds check lets an oversized allocation pass validation. An unauthenticated attacker can send a SOAP message carrying an X.509 certificate whose SubjectKeyIdentifier extension declares a length of 0x7FFFFFFF; WSS4J decodes this while resolving the signature's...

openSUSE 16 Security Update : python-pymongo (openSUSE-SU-2026:22003-1)

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:22003-1 advisory. Changes in python-pymongo: - CVE-2026-96749: integer overflow in BSON document encoding allows an unprivileged user to write outside the bounds ...

libvirt security, bug fix, and enhancement update

11.10.0-12.7.0.1 - Set SOURCEDATEEPOCH from changelog Orabug: 32019554 11.10.0-12.7.el98 - remote: Fix integer overflow in RPC handler for virNodeGetFreePages CVE-2026-18917 RHEL-245282, CVE-2026-18917 - qemu: Always assume support for 'QEMUCAPSSETACTION' RHEL-242549 - qemu: Remove unused...

RockyLinux 8 : gawk (RLSA-2026:73511)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:73511 advisory. gawk: gawk: Memory corruption via integer overflow CVE-2026-40468 gawk: gawk: Denial of Service due to Use After Free vulnerability in io.c CVE-2026-404...

Linux Distros Unpatched Vulnerability : CVE-2026-93546

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Integer overflow in moddavfs in Apache HTTP Server through 2.4.68 allows an authenticated WebDAV client with write access to crash worker processes and...

Google Chrome < 154.0.8037.97 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 154.0.8037.97. It is, therefore, affected by multiple vulnerabilities as referenced in the 202610stable-channel-update-for-desktop advisory. - Use after free in FedCM in Google Chrome prior to 154.0.8037.97 allowed a...

PT-2026-104389

Integer overflow in Skia in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: High...

Debian dsa-6538 : redis - security update

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6538 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6538-1 [email protected] https://www.debian.org/securit...

Oracle Linux 9 : libvirt (ELSA-2026-74424)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-74424 advisory. - remote: Fix integer overflow in RPC handler for virNodeGetFreePages CVE-2026-18917 RHEL-245282, CVE-2026-18917 - util: virFileChownFiles: do not...

CVE-2026-93546

A flaw was found in httpd. An integer overflow in the moddavfs module occurs when processing Web Distributed Authoring and Versioning WebDAV PROPPATCH requests that declare an excessive number of XML namespaces. An authenticated remote attacker with write access can exploit this flaw to crash...

PCP: PCP: Denial of Service due to signed integer overflow

A signed integer overflow in the PCP pmGetPDU function can be exploited via crafted network packets during PDU processing or SASL negotiation. This permanently blinds the affected daemon, resulting in a total denial of service DoS for subsequent packet reads...

PCP: PCP: Denial of Service due to signed integer overflow

A signed integer overflow in the PCP pmGetPDU function can be exploited via crafted network packets during PDU processing or SASL negotiation. This permanently blinds the affected daemon, resulting in a total denial of service DoS for subsequent packet reads...

GO-2026-6498 RabbitMQ amqp091-go: Silent Data Truncation and State Corruption via Shortstr Integer Overflow in github.com/rabbitmq/amqp091-go

RabbitMQ amqp091-go: Silent Data Truncation and State Corruption via Shortstr Integer Overflow in github.com/rabbitmq/amqp091-go...

CVE-2026-62735

CVE-2026-62735 Información Esta vulnerabilidad fue descubierta originalmente por Siyeon Wi. Reproduje la vulnerabilidad de forma independiente con fines educativos y de estudio de caso. La vulnerabilidad también fue demostrada en Pwn2Own Berlin 2026. Referencias: Estado de TrendAI Zero Day...

CVE-2025-46817-PoC

CVE-2025-46817 Redis 整数溢出漏洞利用工具 一个针对 Redis 整数溢出漏洞 CVE-2025-46817 的轻量级 C 语言利用工具。 🚀 功能特性 轻量级 ：单一 C 文件，除 hiredis 外无外部依赖 高性能 ：原生编译，性能最大化 彩色输出 ：美观的终端颜色和图标 崩溃检测 ：自动检测服务器崩溃 版本检查 ：识别存在漏洞的 Redis 版本 超时支持 ：可配置连接超时时间 📋 环境要求 Ubuntu/Debian sudo apt-get update sudo apt-get install build-essential libhiredis-dev...