Lucene search
+L

22008 matches found

Kitploit
Kitploit
added 2026/09/01 11:13 p.m.4 views

CVE-2026-42945-POC

CVE-2026-42945 NGINX Rift - Exploit listo para HTB Exploit independiente para la vulnerabilidad de desbordamiento de búfer en el heap de NGINX descubierta en 2024. Esta versión está optimizada para entornos de HackTheBox y CTF donde no se pueden configurar contenedores Docker. Detalles de la...

9.2CVSS7.4AI score0.68047EPSS
SaveExploits42
Kitploit
Kitploit
added 2026/09/01 9:25 p.m.7 views

exploit-CVE-2016-6515

DOS remoto de OpenSSH Antes de la versión 7.3, OpenSSH no limita la longitud de las contraseñas para la autenticación por contraseña, lo que permite a atacantes remotos provocar una denegación de servicio consumo de CPU por crypt mediante una cadena larga. Este fallo reside en auth-passwd.c en la...

7.8CVSS6.9AI score0.58568EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/09/01 9:02 p.m.2 views

xortool

xortool.py Una herramienta para hacer análisis xor: adivinar la longitud de la clave basado en conteo de caracteres iguales adivinar la clave basado en conocimiento del carácter más frecuente Aviso: xortool ahora solo funciona en Python 3. La versión antigua de Python 2 está disponible en la rama...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/01 7:48 p.m.61 views

duplicut

Duplicut :scissors: Quickly dedupe massive wordlists, without changing the order...

5.4AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/01 7:21 p.m.4 views

CLZero

CLZero Un proyecto para fuzzing de vectores de ataque de contrabando de solicitudes HTTP/1.1 CL.0. Acerca de Gracias a @albinowax, @defparam y @d3d, de lo contrario esta herramienta no existiría. Inspirado por la herramienta Smuggler, todos los gadgets de ataque adaptados de Smuggler y...

5.8AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/01 6:57 p.m.2952 views

openssl

Welcome to the OpenSSL Project OpenSSL is a robust, commercial-grade, full-featured Open Source Toolkit for the Transport Layer Security TLS, formerly SSL, Datagram TLS DTLS, and QUIC protocols. The protocol implementations are based on a full-strength general purpose cryptographic library, which...

5.7AI score
SaveExploits0References29
Kitploit
Kitploit
added 2026/09/01 4:54 p.m.4 views

CVE-2022-45059-demo

CVE-2022-45059-demo Las versiones 7.0.0, 7.0.1, 7.0.2, 7.0.3, 7.1.0, 7.1.1 y 7.2.0 de Varnish Cache tienen una vulnerabilidad de contrabando de solicitudes donde un atacante puede solicitar que el encabezado content-length se convierta en hop-by-hop. Esta es una demostración que consiste en una...

7.5CVSS7.1AI score0.01438EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/01 4:20 p.m.5 views

CVE-2017-11882

Resumen de CVE-2017-11882 Desde el punto de vista del efecto de explotación, puede vulnerar todas las versiones de Office, de 2003 a 2016, y la construcción de todo el entorno de ataque es muy sencilla. Esta vulnerabilidad es causada por el Editor de ecuaciones presente en el software de Office...

9.3CVSS7.8AI score0.99945EPSS
SaveExploits33
NVD
NVD
added 2026/09/01 3:17 p.m.5 views

CVE-2026-75538

An attacker that connects to an open Erlang TCP port that uses the inet driver with packet,4 mode can use a signed overflow in an incorrect packet length calculation to overflow the receive buffer into the VM allocator area and beyond up to about 2 GB. This would easily trash the allocated block'...

8.2CVSS
SaveExploits0References4
NVD
NVD
added 2026/09/01 3:17 p.m.3 views

CVE-2026-71380

Missing Release of Resource after Effective Lifetime vulnerability in Erlang/OTP inets httpd allows an unauthenticated remote attacker to cause denial of service by sending valid request headers with a large Content-Length and then stalling before the body is complete...

8.7CVSS
SaveExploits0References5
NVD
NVD
added 2026/09/01 3:17 p.m.7 views

CVE-2026-71562

Improper Validation of Specified Quantity in Input vulnerability in Erlang/OTP inets httpc allows a malicious or compromised HTTP server to degrade availability by returning a numeric header whose value is a very long run of digits. httpchandler.erl converts the server-supplied Content-Length wit...

6.3CVSS
SaveExploits0References6
NVD
NVD
added 2026/09/01 3:17 p.m.5 views

CVE-2026-70405

Improper Validation of Specified Quantity in Input vulnerability in Erlang/OTP snmp allows a remote attacker to degrade availability by sending an SNMP message containing a BER INTEGER whose length field is arbitrarily large. snmppdus:decintegernotag/1 defaults its size limit to infinity, and...

6.3CVSS
SaveExploits0References6
EUVD
EUVD
added 2026/09/01 2:50 p.m.3 views

EUVD-2026-69246

Improper Validation of Specified Quantity in Input vulnerability in Erlang/OTP snmp allows a remote attacker to degrade availability by sending an SNMP message containing a BER INTEGER whose length field is arbitrarily large. snmppdus:decintegernotag/1 defaults its size limit to infinity, and...

6.3CVSS5.9AI score
SaveExploits0References6
Cvelist
Cvelist
added 2026/09/01 2:48 p.m.8 views

CVE-2026-75538 A Signed Length Overflow in Erlang/OTP's inet TCP Driver Overflows the Receive Buffer Into BEAM VM Memory From an Unauthenticated Peer

An attacker that connects to an open Erlang TCP port that uses the inet driver with packet,4 mode can use a signed overflow in an incorrect packet length calculation to overflow the receive buffer into the VM allocator area and beyond up to about 2 GB. This would easily trash the allocated block'...

8.2CVSS
SaveExploits0References4
CVE
CVE
added 2026/09/01 2:48 p.m.5 views

CVE-2026-75538

CVE-2026-75538 is a signed integer overflow in the Erlang/OTP inet TCP driver when operating in {packet,4} mode. An unauthenticated remote attacker can trigger an incorrect packet-length calculation that overflows the receive buffer into the BEAM VM allocator area (up to ~2 GB), corrupting alloca...

8.2CVSS6.1AI score
SaveExploits0References4
OSV
OSV
added 2026/09/01 2:48 p.m.2 views

EEF-CVE-2026-75538 A Signed Length Overflow in Erlang/OTP's inet TCP Driver Overflows the Receive Buffer Into BEAM VM Memory From an Unauthenticated Peer

Summary An attacker that connects to an open Erlang TCP port that uses the inet driver with packet,4 mode can use a signed overflow in an incorrect packet length calculation to overflow the receive buffer into the VM allocator area and beyond up to about 2 GB. This would easily trash the allocate...

8.2CVSS6AI score
SaveExploits0References3
CVE
CVE
added 2026/09/01 2:42 p.m.9 views

CVE-2026-73812

Erlang/OTP inets (HTTP server module) is vulnerable to HTTP Request Smuggling (CL.TE desync) when deployed behind a Content-Length-preferring front-end proxy. The root cause is in httpd:check_header/3 , which rejects duplicate Content-Length headers but never validates the simultaneous presence o...

8.3CVSS5.9AI score
SaveExploits0References4
EUVD
EUVD
added 2026/09/01 2:42 p.m.4 views

EUVD-2026-69235

httpd function checkheader/3 rejects duplicate Content-Length per CVE-2026-23941 but never checks for the TE+CL co-presence that RFC 9112 §6.3 identifies as a probable smuggling attempt. handlebody/3 frames by chunked and silently discards Content-Length. A CL-preferring front-end paired with...

8.3CVSS5.9AI score
SaveExploits0References4
Cvelist
Cvelist
added 2026/09/01 2:42 p.m.9 views

CVE-2026-73812 inets, httpd: HTTP Request Smuggling via Transfer-Encoding and Content-Length

httpd function checkheader/3 rejects duplicate Content-Length per CVE-2026-23941 but never checks for the TE+CL co-presence that RFC 9112 §6.3 identifies as a probable smuggling attempt. handlebody/3 frames by chunked and silently discards Content-Length. A CL-preferring front-end paired with...

8.3CVSS
SaveExploits0References4
IBM Security Bulletins
IBM Security Bulletins
added 2026/09/01 2:34 p.m.6 views

Security Bulletin: IBM Storage Fusion Data Foundation is vulnerable to Request Smuggling.

Summary undici is used by IBM Storage Fusion Data Foundation, which could cause Request Smuggling. CVE-2026-1525, CVE-2026-1526, CVE-2026-1527, CVE-2026-1528, CVE-2026-2229. Vulnerability Details CVEID:CVE-2026-1525 DESCRIPTION: Undici allows duplicate HTTP Content-Length headers when they are...

9.8CVSS6.8AI score0.0115EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder