Lucene search
+L

22009 matches found

Kitploit
Kitploit
added 2026/09/02 12:13 a.m.6 views

CVE-2015-7547

CVE-2015-7547 https://github.com/fjserna/CVE-2015-7547 So I tried to see if many things crash on CentOS6. root@kitploit: ./CVE-2015-7547-poc.py & vi /etc/resolve.conf --------------------------------------------------------------- options single-request-reopen nameserver 8.8.8.8 nameserver...

8.1CVSS8AI score0.91057EPSS
SaveExploits17References1
Kitploit
Kitploit
added 2026/09/01 11:52 p.m.2 views

CVE-2024-42461

Solution for ECDSA and EDDSA Signature Verification Problems Description Problems have been identified in the verification of ECDSA and EDDSA signatures in the Wycheproof project. Missing checks during the signature decoding stage allow adding or removing zero bytes, which affects the ability to...

9.1CVSS6.7AI score0.00617EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/01 11:13 p.m.4 views

CVE-2026-42945-POC

CVE-2026-42945 NGINX Rift - HTB-Ready Exploit Standalone exploit for the NGINX heap buffer overflow vulnerability discovered in 2024. This version is optimized for HackTheBox and CTF environments where you can't set up Docker containers. Vulnerability Details CVE-2026-42945 is a critical heap...

9.2CVSS7.4AI score0.68047EPSS
SaveExploits42References1
Kitploit
Kitploit
added 2026/09/01 9:25 p.m.7 views

exploit-CVE-2016-6515

OpenSSH remote DOS Before 7.3 OpenSSH does not limit password lengths for password authentication, which allows remote attackers to cause a denial of service crypt CPU consumption via a long string. This bug resides in auth-passwd.c in authpassword function. Attackers can exploit this issue to...

7.8CVSS6.9AI score0.58568EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/09/01 9:02 p.m.2 views

xortool

xortool.py Una herramienta para hacer análisis xor: adivinar la longitud de la clave basado en conteo de caracteres iguales adivinar la clave basado en conocimiento del carácter más frecuente Aviso: xortool ahora solo funciona en Python 3. La versión antigua de Python 2 está disponible en la rama...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/01 7:48 p.m.61 views

duplicut

Duplicut :scissors: Quickly dedupe massive wordlists, without changing the order...

5.4AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/01 7:26 p.m.4 views

cve_2026_31431

CVE-2026-31431 "Copy Fail" Toolkit Detector and proof-of-concept LPE for the Linux algifaead / authencesn page-cache scratch-write bug disclosed 2026-04-29. Disclosure writeup: https://xint.io/blog/copy-fail-linux-distributions Authorization Use only on hosts you own or are explicitly engaged to...

7.8CVSS6.4AI score0.99907EPSS
SaveExploits239
Kitploit
Kitploit
added 2026/09/01 7:21 p.m.4 views

CLZero

CLZero 一个用于模糊测试 HTTP/1.1 CL.0 请求走私攻击向量的项目。 关于 感谢 @albinowax、@defparam 和 @d3d,否则这个工具不会存在。受工具 Smuggler 启发,所有攻击手法改编自 Smuggler 和 https://portswigger.net/research/how-to-turn-security-research-into-profit...

5.9AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/01 6:57 p.m.2952 views

openssl

Welcome to the OpenSSL Project OpenSSL is a robust, commercial-grade, full-featured Open Source Toolkit for the Transport Layer Security TLS, formerly SSL, Datagram TLS DTLS, and QUIC protocols. The protocol implementations are based on a full-strength general purpose cryptographic library, which...

5.7AI score
SaveExploits0References29
Kitploit
Kitploit
added 2026/09/01 4:54 p.m.4 views

CVE-2022-45059-demo

CVE-2022-45059-demo Las versiones 7.0.0, 7.0.1, 7.0.2, 7.0.3, 7.1.0, 7.1.1 y 7.2.0 de Varnish Cache tienen una vulnerabilidad de contrabando de solicitudes donde un atacante puede solicitar que el encabezado content-length se convierta en hop-by-hop. Esta es una demostración que consiste en una...

7.5CVSS7.1AI score0.01438EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/01 4:20 p.m.5 views

CVE-2017-11882

CVE-2017-11882 Overview From the perspective of exploit effectiveness, it can kill all versions of Office from 2003 to 2016, and the entire attack environment is very simple to build. This vulnerability is caused by the Equation Editor in Office software. Because the editor process does not...

9.3CVSS7.8AI score0.99945EPSS
SaveExploits33
NVD
NVD
added 2026/09/01 3:17 p.m.5 views

CVE-2026-75538

An attacker that connects to an open Erlang TCP port that uses the inet driver with packet,4 mode can use a signed overflow in an incorrect packet length calculation to overflow the receive buffer into the VM allocator area and beyond up to about 2 GB. This would easily trash the allocated block'...

8.2CVSS
SaveExploits0References4
NVD
NVD
added 2026/09/01 3:17 p.m.3 views

CVE-2026-71380

Missing Release of Resource after Effective Lifetime vulnerability in Erlang/OTP inets httpd allows an unauthenticated remote attacker to cause denial of service by sending valid request headers with a large Content-Length and then stalling before the body is complete...

8.7CVSS
SaveExploits0References5
NVD
NVD
added 2026/09/01 3:17 p.m.7 views

CVE-2026-71562

Improper Validation of Specified Quantity in Input vulnerability in Erlang/OTP inets httpc allows a malicious or compromised HTTP server to degrade availability by returning a numeric header whose value is a very long run of digits. httpchandler.erl converts the server-supplied Content-Length wit...

6.3CVSS
SaveExploits0References6
NVD
NVD
added 2026/09/01 3:17 p.m.5 views

CVE-2026-70405

Improper Validation of Specified Quantity in Input vulnerability in Erlang/OTP snmp allows a remote attacker to degrade availability by sending an SNMP message containing a BER INTEGER whose length field is arbitrarily large. snmppdus:decintegernotag/1 defaults its size limit to infinity, and...

6.3CVSS
SaveExploits0References6
EUVD
EUVD
added 2026/09/01 2:50 p.m.4 views

EUVD-2026-69246

Improper Validation of Specified Quantity in Input vulnerability in Erlang/OTP snmp allows a remote attacker to degrade availability by sending an SNMP message containing a BER INTEGER whose length field is arbitrarily large. snmppdus:decintegernotag/1 defaults its size limit to infinity, and...

6.3CVSS5.9AI score
SaveExploits0References6
CVE
CVE
added 2026/09/01 2:48 p.m.5 views

CVE-2026-75538

CVE-2026-75538 is a signed integer overflow in the Erlang/OTP inet TCP driver when operating in {packet,4} mode. An unauthenticated remote attacker can trigger an incorrect packet-length calculation that overflows the receive buffer into the BEAM VM allocator area (up to ~2 GB), corrupting alloca...

8.2CVSS6.1AI score
SaveExploits0References4
Cvelist
Cvelist
added 2026/09/01 2:48 p.m.13 views

CVE-2026-75538 A Signed Length Overflow in Erlang/OTP's inet TCP Driver Overflows the Receive Buffer Into BEAM VM Memory From an Unauthenticated Peer

An attacker that connects to an open Erlang TCP port that uses the inet driver with packet,4 mode can use a signed overflow in an incorrect packet length calculation to overflow the receive buffer into the VM allocator area and beyond up to about 2 GB. This would easily trash the allocated block'...

8.2CVSS
SaveExploits0References4
OSV
OSV
added 2026/09/01 2:48 p.m.4 views

EEF-CVE-2026-75538 A Signed Length Overflow in Erlang/OTP's inet TCP Driver Overflows the Receive Buffer Into BEAM VM Memory From an Unauthenticated Peer

Summary An attacker that connects to an open Erlang TCP port that uses the inet driver with packet,4 mode can use a signed overflow in an incorrect packet length calculation to overflow the receive buffer into the VM allocator area and beyond up to about 2 GB. This would easily trash the allocate...

8.2CVSS6AI score
SaveExploits0References3
CVE
CVE
added 2026/09/01 2:42 p.m.12 views

CVE-2026-73812

Erlang/OTP inets (HTTP server module) is vulnerable to HTTP Request Smuggling (CL.TE desync) when deployed behind a Content-Length-preferring front-end proxy. The root cause is in httpd:check_header/3 , which rejects duplicate Content-Length headers but never validates the simultaneous presence o...

8.3CVSS5.9AI score
SaveExploits0References4
Rows per page
Query Builder