CVE-2025-1974_IngressNightmare_PoC

CVE-2025-1974IngressNightmare poc IngressNightmare Script Un script de Python para automatizar el envío de cargas útiles JSON a una lista de IPs mediante curl, capturando respuestas y dividiéndolas en informes XML de éxito y fallo. Características Envía solicitudes HTTPS POST con una carga útil...

Exihibitor-RCE

Exhibitor-RCE Exhibitor Web Ui 1.7.1 RCE, CVE-2019-5029 Paso 1: $ git clone https://github.com/thehunt1s0n/Exihibitor-RCE/ Paso 2: $ cd Exihibitor-RCE/ Paso 3 opcional: Es posible que necesites editar la carga útil de datos json en el script. Para ello, simplemente captura la solicitud usando Bur...

CVE-2022-1040

CVE-2022-1040 que el PoC te acompañe Encontrado por ahí curl --insecure -H "X-Requested-With: XMLHttpRequest" -X POST 'https://x.x.x.x/userportal/Controller?mode=8700&operation=1&datagrid=179&json="🦞":"test"'...

CVE-2016-4010

CVE-2016-4010 CVE-2016-4010 Ejecuta exploit.php para generar el payload json Ejecuta exploit.py con el payload generado en triggervulnerabilitypayload...

AlmaLinux 9.6 [TuxCare] Security Update: grafana / grafana-selinux (ALMALINUX9.6:CLSA-2026:1783354657)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1783354657 advisory. - The public dashboard query endpoint does not limit request body size before processing, allowing unauthenticated attackers to trigger...

CVE-2023-31719

CVE-2023-31719 Es posible inyectar código SQL en el parámetro JSON "username" del endpoint /api/signin mediante una solicitud HTTP POST "username":"test' OR 2891=LIKECHAR65,66,67,68,69,70,71,UPPERHEXRANDOMBLOB500000000/2-- ZJMj","password":"test" Nombre del producto afectado: FUXA Versión afectad...

react-ssr-vulnerability

CVE-2025-55182 - React Server Components RCE POC Este es un PoC con fines educativos y de investigación en seguridad únicamente. Esta vulnerabilidad ha sido parcheada en las últimas versiones de los paquetes afectados. Utiliza esta herramienta solo en sistemas que te pertenezcan o sobre los que...

grafana: Grafana: Denial of Service due to excessive memory allocation via large JSON payloads

A flaw was found in Grafana. An unauthenticated attacker can exploit the public dashboard query endpoint by sending arbitrarily large JSON payloads. This vulnerability, caused by a lack of request body size limits, triggers excessive memory allocation, leading to a denial of service through memor...

RLSA-2026:54184 Important: grafana security update

Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Security Fixes: grafana: Grafana: Denial of Service due to excessive memory allocation via large JSON payloads CVE-2026-42127 For more details about the security issues, including the...

CVE-2026-86204

PocketMine-MP versions before 5.39.2 fail to limit JSON payload size in ModalFormResponsePacket handling, allowing authenticated players to cause denial of service. Attackers can send modal form response packets with massive JSON arrays to exhaust server memory and CPU resources, rendering the...

CVE-2023-54395

PocketMine-MP versions before 4.12.5 contain a denial-of-service vulnerability in ModalFormResponsePacket processing that allows attackers to cause server resource exhaustion by sending large JSON payloads. Attackers can send numerous oversized modal form response packets to consume CPU time and...

EUVD-2026-74915

PocketMine-MP versions before 5.39.2 fail to limit JSON payload size in ModalFormResponsePacket handling, allowing authenticated players to cause denial of service. Attackers can send modal form response packets with massive JSON arrays to exhaust server memory and CPU resources, rendering the...

CVE-2026-86204 PocketMine-MP before 5.39.2 Denial of Service via ModalFormResponsePacket

PocketMine-MP versions before 5.39.2 fail to limit JSON payload size in ModalFormResponsePacket handling, allowing authenticated players to cause denial of service. Attackers can send modal form response packets with massive JSON arrays to exhaust server memory and CPU resources, rendering the...

CVE-2026-86204 PocketMine-MP before 5.39.2 Denial of Service via ModalFormResponsePacket

PocketMine-MP versions before 5.39.2 fail to limit JSON payload size in ModalFormResponsePacket handling, allowing authenticated players to cause denial of service. Attackers can send modal form response packets with massive JSON arrays to exhaust server memory and CPU resources, rendering the...

CVE-2026-86204 PocketMine-MP before 5.39.2 Denial of Service via ModalFormResponsePacket

PocketMine-MP versions before 5.39.2 fail to limit JSON payload size in ModalFormResponsePacket handling, allowing authenticated players to cause denial of service. Attackers can send modal form response packets with massive JSON arrays to exhaust server memory and CPU resources, rendering the...

CVE-2026-86204

PocketMine-MP versions before 5.39.2 fail to limit JSON payload size in ModalFormResponsePacket handling. An authenticated player can send modal form response packets containing massive JSON arrays, exhausting server memory and CPU resources and rendering the server unresponsive (denial of servic...

CVE-2023-54395

PocketMine-MP versions before 4.12.5 are vulnerable to a denial of service via ModalFormResponsePacket processing. An attacker with low privileges can send numerous oversized JSON payloads in modal form response packets to consume server CPU time , exhausting resources and preventing the server f...

CVE-2023-54395 PocketMine-MP before 4.12.5 Denial of Service via ModalFormResponsePacket

PocketMine-MP versions before 4.12.5 contain a denial-of-service vulnerability in ModalFormResponsePacket processing that allows attackers to cause server resource exhaustion by sending large JSON payloads. Attackers can send numerous oversized modal form response packets to consume CPU time and...

CVE-2023-54395: Inefficient Algorithmic Complexity

PocketMine-MP versions before 4.12.5 contain a denial-of-service vulnerability in ModalFormResponsePacket processing that allows attackers to cause server resource exhaustion by sending large JSON payloads. Attackers can send numerous oversized modal form response packets to consume CPU time and...

PT-2026-89007

PocketMine-MP versions before 5.39.2 fail to limit JSON payload size in ModalFormResponsePacket handling, allowing authenticated players to cause denial of service. Attackers can send modal form response packets with massive JSON arrays to exhaust server memory and CPU resources, rendering the...