cve-2022-21907

CVE-2022-21907 此包将检测对 CVE-2022-21907 的利用尝试。 https://corelight.com/blog/detecting-cve-2022-21907 检测方法： HTTP HTTP 数据必须 = 1750 字节，并且 在利用 HTTP 请求的末尾未观察到 HTTP/1.1。 使用方法： root@kitploit: $ zeek -Cr your.pcap packages $ cat notice.log separator \x09 setseparator , emptyfield empty unsetfield - path notic...

CVE-2007-2447

ExploitDev 之旅 6 | CVE-2007-2447 | Samba 3.0.20 3.0.25rc 'Username' map script' 命令执行 原始漏洞利用：https://www.exploit-db.com/exploits/16320 漏洞利用名称： Samba username map script RCE CVE： 2007-2447 靶机： Lame - HackTheBox 描述 在低于 3.0.25 的 Samba 版本中存在一个漏洞，攻击者可以通过向 SMB 服务器发送畸形的请求作为用户名来执行系统命令。 工作原理 以下是使用 nohup...

CVE-2020-35391

CVE-2020-35391 Tenda f3 畸形HTTP请求头处理漏洞。 运行 root@kitploit: python3 CVE-2020-35391.py --help python3 CVE-2020-35391.py python3 CVE-2020-35391.py -i http://127.0.0.1:8080 python3 CVE-2020-35391.py -l ip.txt Tenda F3 Shodan Dork 漏洞利用...

CVE-2002-0748

摘要 Gold exploit - 远程 Web 服务器容易遭受拒绝服务攻击。 描述 通过发送以两个 LF 字符结尾的请求（而非正常的 CR LF CR LF 序列，CR = 回车符，LF = 换行符），可以终止 Web 服务器。 攻击者可以利用此漏洞使该服务器以及所有 LabView 应用程序崩溃。 Gleen Research Center | NASA - LabVIEW Web Server DoS 漏洞 解决方案 升级您的 LabView 软件，或禁用日志记录来运行 Web 服务器。 参考 https://seclists.org/bugtraq/2002/Apr/334...

CVE-2023-38434

CVE-2023-38434 xHTTP 提交 72f812d 及更早版本在 xhttp.c 的 closeconnection 函数第 595 行存在双重释放漏洞。 root@kitploit: ifconn-request.public.headers.list != NULL freeconn-request.public.headers.list; 为了确认该漏洞，请使用调试符号和地址消毒器编译 xHTTP 服务器（包含在本仓库中）： root@kitploit: unzip xHTTP.zip cd xHTTP-main gcc example.c xhttp.c -o mai...

CVE-2026-67184-Unauthenticated-NULL-Pointer-Dereference-Crashes-the-Server-TinyWeb-

Aviso de seguridad: La desreferencia de puntero NULL no autenticada provoca el bloqueo del servidor TinyWeb ID de CVE asignado: CVE-2026-67184 Resumen Cuando TinyWeb no puede analizar una línea de solicitud, devuelve un error pero deja el puntero URL de la solicitud establecido en NULL. El llamad...

CVE-2026-16687

IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 is affected by a vulnerability in the ASMI web interface. An unauthenticated attacker with network access can send the FSP a malformed request, allowing arbitrary code...

UBUNTU-CVE-2026-59902

Netty is an asynchronous, event-driven network application framework. Prior to 4.1.137.Final and 4.2.17.Final, io.netty.handler.codec.sctp.SctpMessageCompletionHandler limits incomplete messages and fragment counts but not maxBufferedBytes, allowing unauthenticated peers to exhaust memory with...

CVE-2026-18846

IBM i 7.6, 7.5, 7.4, and 7.3 s vulnerable to a buffer overflow from improperly validating client data. By sending malformed requests to one of the host servers, a remote attacker could leverage this vulnerability to cause a denial-of-server DoS for that server...

CVE-2026-18846

CVE-2026-18846 – IBM i host servers Affected products/versions: IBM i 7.3, 7.4, 7.5, 7.6. Root cause and impact: The vulnerability is a buffer overflow caused by improper validation of client data, which can be exploited by sending malformed requests to a host server to cause a denial of service ...

CVE-2026-65936

A malformed Bluetooth connection request message can cause the RS9116W/SiWx917 to leak potentially sensitive information. See vulnerability B-E4 in the related paper below...

CVE-2026-65936

A malformed Bluetooth connection request message can cause the RS9116W/SiWx917 to leak potentially sensitive information. See vulnerability B-E4 in the related paper below...

EUVD-2026-53449

A vulnerability in the Simple Network Management Protocol SNMP subsystem of Cisco IOS XE Software could allow an authenticated, remote attacker to cause an affected device to reload, resulting in a denial of service DoS condition. This vulnerability is due to improper error handling when parsing...

CVE-2026-67304

FreeRDP had a null pointer dereference vulnerability in the smartcard device control request cleanup when reader-state decoding fails (affects FreeRDP prior to 3.29.0). An attacker can send malformed smartcard IRP requests with non-zero cReaders and truncated reader-state data to crash the proces...

CVE-2026-67184

TinyWeb through 0.0.8 contains a null pointer dereference vulnerability that allows unauthenticated remote attackers to crash worker processes by sending a malformed HTTP request line with an invalid version string. The HttpParser::execute function fails to allocate the Url object when version...

CVE-2026-67184 TinyWeb 0.0.8 Null Pointer Dereference DoS via Malformed HTTP Request

TinyWeb through 0.0.8 contains a null pointer dereference vulnerability that allows unauthenticated remote attackers to crash worker processes by sending a malformed HTTP request line with an invalid version string. The HttpParser::execute function fails to allocate the Url object when version...

EUVD-2026-45513

In the Linux kernel, the following vulnerability has been resolved: NFSv4/pNFS: reject zero-length raddr in nfs4decodempdsaddr nfs4decodempdsaddr decodes the rnetid and raddr opaques of a netaddr4 from a GETDEVICEINFO multipath-DS body, then immediately calls strrchrbuf, '.' to locate the port...

CVE-2026-48068 @grpc/grps-js: A malformed request can cause a server crash

@grpc/grps-js implements the core functionality of gRPC purely in JavaScript, without a C++ addon. Prior to 1.9.16, 1.10.12, 1.11.4, 1.12.7, 1.13.5, and 1.14.4, an invalid incoming HTTP/2 stream initiation can cause a server process created using @grpc/grpc-js to crash. This issue is fixed in...

CVE-2026-51599

An insufficient input validation vulnerability in the RTSP service of MERCURY MIPC252W v1.0.5 Build 230306 Rel.79931n allows an unauthenticated remote attacker to render an individual TCP connection temporarily unusable via sending an RTSP request with a Content-Length header but no corresponding...

CVE-2026-51599

CVE-2026-51599 affects MERCURY MIPC252W v1.0.5 Build 230306 Rel.79931n. The issue is an insufficient input validation in the RTSP service where an RTSP request with a Content-Length header but no body causes the RTSP parser to enter a body-waiting state, leading to the connection being silently c...