848 matches found
CVE-2026-9621
A denial-of-service security issue exists within RSLinx® Classic. The security issue stems from improper handling of a malformed packet. A crafted CIP packet can cause the RSLinx® Classic service to crash, requiring a restart of the service to recover...
CVE-2026-9621
Rockwell Automation RSLinx® Classic is affected by a denial-of-service vulnerability caused by improper handling of a malformed CIP packet . A network attacker can send a crafted CIP packet that crashes the RSLinx® Classic service, requiring a manual restart to recover. The issue is rated CVSS 4....
CVE-2026-9621 RSLinx Classic® - Multiple Vulnerabilities
A denial-of-service security issue exists within RSLinx® Classic. The security issue stems from improper handling of a malformed packet. A crafted CIP packet can cause the RSLinx® Classic service to crash, requiring a restart of the service to recover...
massh-enum
+----------------+ | massh-enum 1.0 | +----------------+ root@kitploit: التعداد الجماعي لأسماء المستخدمين لـ OpenSSH من الإصدار 2.3 إلى 7.4 CVE-2018-15473 يحتوي هذا السكريبت على سكريبت بايثون لماثيو دالي الترخيص: GPLv3, الوصف تعاني إصدارات OpenSSH من 2.3 إلى 7.4 من ثغرة تعداد أسماء المستخدمين. يم...
CVE-2018-15473
CVE-2018-15473 OpenSSH 7.7 - تعداد أسماء المستخدمين الطريقة يمكن للمهاجم محاولة مصادقة مستخدم باستخدام حزمة غير صالحة على سبيل المثال، حزمة مقطوعة، و: إذا كان المستخدم غير صالح غير موجود، فإن userauthpubkey ترجع فورًا، ويرسل الخادم رسالة SSH2MSGUSERAUTHFAILURE إلى المهاجم؛ إذا كان المستخدم صالحًا...
nhi-zero-trust-bypass
परियोजना: एनएचआई रहस्यों में हेरफेर करने और शून्य-विश्वास नीतियों को दरकिनार करने के लिए प्रोटोकॉल कमजोरियों का शोषण स्क्रीनशॉट नीचे प्रदर्शन के वास्तविक स्क्रीनशॉट दिए गए हैं। अधिक जानकारी के लिए, screenshots/README.md देखें। 1. DNS शोषण BIND क्रैश A. शोषण पैकेट भेजा गया Scapy BIND को एक दोषपूर्...
open-ssh-user-enumeration
سكريبت تعداد أسماء مستخدمي OpenSSH CVE-2018-15473 يتحقق هذا السكريبت من ثغرة تعداد أسماء المستخدمين في OpenSSH الإصدار 7.7 وما قبله CVE-2018-15473. يقوم بإرسال حزمة مصادقة غير صالحة ويفسر استجابة خادم SSH لتحديد أسماء المستخدمين الصالحة. الكود الأصلي: https://www.exploit-db.com/download/45233...
CVE-2020-0796
CVE-2020-0796 Un PoC e Scanner ancora più semplice per CVE-2020-0796, poiché utilizza pacchetti statici. C'è una protezione per prevenire l'uso accidentale su IP pubblici non farlo e un interruttore on/off per il crash. Richiede solo Python 3 vanilla! Modalità scansione: root@kitploit: python3...
CVE-2005-1794
creationtimestamp| type| source ---|---|--- 2026-08-27 16:00:03+00:00| seen| Telegram/tjdPFWmK8d3uOic7fBL4SWiO2RjxR5x57I46YuEU7JS4U 2026-08-28 00:00:36+00:00| seen| Telegram/tjdPFWmK8d3uOic7fBL4SWiO2RjxR5x57I46YuEU7JS4U...
openssl: QUIC server may trigger double free when processing INITIAL packet
A flaw was found in OpenSSL. A malformed INITIAL packet with an invalid DCID destination connection ID can cause the QUIC server to double free the QRX object. This issue leads to memory corruption, causing the termination of the QUIC server process and resulting in a denial of service...
ALPINE-CVE-2026-18798
Issue summary: QUIC server may double free QRX QUIC record layer RX object when channel creation fails for initial packet. Impact summary: Double free leads to heap corruption, which typically results in termination of QUIC server process, leading to Denial of Service. There is so far no evidence...
CVE-2026-18798
Issue summary: QUIC server may double free QRX QUIC record layer RX object when channel creation fails for initial packet. Impact summary: Double free leads to heap corruption, which typically results in termination of QUIC server process, leading to Denial of Service. There is so far no evidence...
CVE-2026-74704
In the Linux kernel, the following vulnerability has been resolved: net/sched: schcake: drop WARNON1 for malformed packets in ACK filter The schcake ACK filter parses packets to find the TCP header and filter duplicated ACKs if the flow is backlogged. The parsing code contains a WARNON1 which can...
CVE-2026-74704
CVE-2026-74704 affects the Linux kernel 's sch_cake qdisc ACK filter (net/sched). The parsing code contains a WARN_ON(1) that is triggered by a malformed IP header while locating the TCP header. The code already skips the offending packet, making the warning redundant. Depending on system configu...
SUSE CVE-2026-72351
In the Linux kernel, the following vulnerability has been resolved: gue: validate REMCSUM private option length GUE private flags can indicate that remote checksum offload metadata is present. The private flags field itself is accounted for by guehdrflagslen, but guehdrprivflagslen currently...
Linux Distros Unpatched Vulnerability : CVE-2026-74704
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/sched: schcake: drop WARNON1 for malformed packets in ACK filter The schcake ACK filter parses packets to find the TCP header and filter duplicated ACKs if...
CVE-2026-18821
IBM PowerVM Hypervisor FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 Power Systems Firmware is affected by a vulnerability in partition firmware during network boot. An unauthenticated attacker on the same network as a partition undergoing...
Security Bulletin: This Power System update is being released to address CVE-2026-18821
Summary Power Systems Firmware is affected by a vulnerability in partition firmware during network boot. An unauthenticated attacker on the same network as a partition undergoing network boot can send a malformed packet, allowing arbitrary code to be executed in the partition firmware and...
CVE-2026-72348
In the Linux kernel, the following vulnerability has been resolved: netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop The ah, hbh and rt matches check that the fixed extension header is present, then use the header length field to derive the advertised extension header lengt...
CVE-2026-72334
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: fix malformed ISOEND/CONT handling Core specification Part C vol 4 sec 5.4.5 does not exclude empty ISOCONT, ISOEND packets. We currently reject them if they are last. If controller sends malformed sequence ISOSTA...