w48crash

WebMod Stack Buffer Overflow CVE-2007-1260 por cybermind Kevin Masterson [email protected] Sitio de WebMod archivado: https://web.archive.org/web/20080517044559/http://djeyl.net/w.php Versiones vulnerables: 0.48, tanto Win32 como Linux. Las versiones anteriores pueden ser vulnerables. Esto...

eero-zero-length-ipv6-options-header-dos

eeroOS Ethernet Interface Denial of Service Vulnerability CVE-2023-5324 If eero Pro 5 devices receive an IPv6 packet where the payload length is zero and contains a hop-by-hop or destination options extension header that refers to another hop-by-hop or destination options extension header that...

CVE-2024-38828

CVE-2024-38828 Vulnerability Description The test checks behavior/reaction in Spring Framework with and without the CVE-2024-38828 vulnerability. In ByteArrayHttpMessageConverter, memory is allocated in ByteArrayOutputStream based on the Content-Length request header, which may not match reality ...

CVE-2011-4862

CVE-2011-4862 Final Project for Security and Privacy CS 600.443 | Fall 2018 I originally tried to use diff to make a patch. I patched it the way I thought it would be, before looking at the real patch. encrypt.patch is this original patch that I made with teh diff. However, when we tried applying...

CVE-2019-19945_Test

CVE-2019-19945Test This is the code for the first Proposed CVE 1. Install Docker 2. Build & RUN Server cd Server docker build -t server/cve . docker run -d --name server -p 80:80 server/cve 3. Get Server Container IP Linux sudo docker container inspect server | grep -i IPAddress Windows Powershel...

sandsifter

s a n d s i f t e r : the x86 processor fuzzer Overview The sandsifter audits x86 processors for hidden instructions and hardware bugs, by systematically generating machine code to search through a processor's instruction set, and monitoring execution for anomalies. Sandsifter has uncovered secre...

CVE-2022-30190

CVE-2022-30190 CVE-2022-30190 CVE-2022-30190 Follina POC Host exploit.html on localhost, port 80. Open the docx to pop calc. To change the remote address the doc points to, open in 7Z and edit word\rels\document.xml.rels to point to a new location. YOU MUST keep the exclamation mark. It will...

jackson

Analysis and Remediation of Security Vulnerabilities in Jackson core 2.13.5 CVE-2025-52999 SNYK-JAVA-COMFASTERXMLJACKSONCORE-15365924 SNYK-JAVA-COMFASTERXMLJACKSONCORE-15907551 GHSA-2m67-wjpj-xhg9 SNYK-JAVA-COMFASTERXMLJACKSONCORE-7569538 Sonatype-2022-6438 This branch...

xortool

xortool.py Una herramienta para hacer análisis xor: adivinar la longitud de la clave basado en conteo de caracteres iguales adivinar la clave basado en conocimiento del carácter más frecuente Aviso: xortool ahora solo funciona en Python 3. La versión antigua de Python 2 está disponible en la rama...

openssh_dos

Debido a que los servidores OpenSSH no restringen la longitud de la contraseña de inicio de sesión, puedes provocar que estos servidores se bloqueen enviando contraseñas muy largas que utilizan grandes cantidades de la CPU del servidor para calcular su hash. Esta vulnerabilidad se conoce como...

exploit-CVE-2016-6515

DOS remoto de OpenSSH Antes de la versión 7.3, OpenSSH no limita la longitud de las contraseñas para la autenticación por contraseña, lo que permite a atacantes remotos provocar una denegación de servicio consumo de CPU por crypt mediante una cadena larga. Este fallo reside en auth-passwd.c en la...

CVE-2024-12084

CVE-2024-12084 A heap-based buffer overflow flaw was found in the rsync daemon. This issue is due to improper handling of attacker-controlled checksum lengths s2length in the code. When MAXDIGESTLEN exceeds the fixed SUMLENGTH 16 bytes, an attacker can write out of bounds in the sum2 buffer. How...

CVE-2019-11043-Docker

一个包含易受攻击版本PHP-FPM CVE-2019-11043 和 nginx 的 Docker 镜像。 运行 docker run --rm -p8080:80 akamajoris/cve-2019-11043 你应该能够通过 http://your-ip:8080/ 访问该 Web 应用程序。 利用 从 https://github.com/neex/phuip-fpizdam 构建一个二进制文件，然后 root@kitploit: root@debian:/gopath/bin curl "localhost:8080/?a=/bin/sh+-c+'which+which'" ...

CVE-2024-53922

An issue was discovered in the buffer queue driver in Samsung Automotive Processor Exynos Auto 8890, V7, V9, and V920. Lack of a length check leads to a Denial of Service in the kernel...

CVE-2026-38332

TinyEXIF before 1.1.0 has a heap-based buffer over-read in EntryParser::Fetch methods reachable via a crafted SubjectArea length...

CVE-2024-53922

A lack of a length check in the buffer queue driver of Samsung's Exynos Auto 8890, V7, V9, and V920 automotive processors allows a local attacker to trigger a kernel Denial of Service . The PT-2026-45932 advisory also references potential unauthorized access with patches pending from Samsung. CVS...

CVE-2025-40019-POC

prueba de concepto para CVE-2025-40019 CVE-2025-40019 es el mecanismo de Vector de Inicialización Sal-Sector Cifrado crypto/essiv.c que tiene una validación insuficiente de la longitud de los Datos de Autenticación Asociados AAD en relación con el tamaño del Vector de Inicialización IV, lo que...

cve-2011-4862

cve-2011-4862 I originally tried to use diff to make a patch. I patched it the way I thought it would be, before looking at the real patch. encrypt.patch is this original patch that I made with teh diff. However, when we tried applying this patch to freeBSD, it would not accept it. Instead, we ha...

CVE-2026-89640

A flaw was found in the Linux kernel's Common Internet File System CIFS implementation. When performing a file range remapping operation with a zero length, an integer underflow can occur if the offset exceeds the file size. This can lead to corruption of the byte count in file system control...

Linux Distros Unpatched Vulnerability : CVE-2026-89743

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - misc: nsm: bound the device-reported response length nsmsendrecvmsglocked stores the virtqueue used- ring length reported by the NSM device into msg-resp.len...