CVE-2020-0796

CVE-2020-0796 Un PoC y escáner aún más simple para CVE-2020-0796, ya que utiliza paquetes estáticos. Hay una protección para evitar el uso accidental en direcciones IP públicas no hagas eso y un interruptor de encendido/apagado para activar el bloqueo. ¡Solo requiere Python 3 básico! Modo de...

open-ssh-user-enumeration

OpenSSH Username Enumeration Script CVE-2018-15473 This script checks for the OpenSSH 7.7 and prior username enumeration vulnerability CVE-2018-15473. It sends a malformed authentication packet and interprets the SSH server’s response to identify valid usernames. original code:...

CVE-2020-35669

CVE-2020-35669 dummy server please run dummy server using 1st terminal root@kitploit: sudo nc -l 127.0.0.1 80 apply given diff root@kitploit: diff --git a/main.dart b/main.dart index 8c78291..a46f4d0 100644 --- a/main.dart +++ b/main.dart @@ -4,7 +4,7 @@ import 'package:http/src/request.dart'; vo...

CVE-2023-38434

CVE-2023-38434 xHTTP commit 72f812d y versiones anteriores sufren de una vulnerabilidad de doble liberación en closeconnection en xhttp.c, línea 595. root@kitploit: ifconn-request.public.headers.list != NULL freeconn-request.public.headers.list; Para confirmar la vulnerabilidad, compile el servid...

cve-2018-15473

CVE-2018-15473: Enumeración de Usuarios de OpenSSH OpenSSH hasta 7.7 permite a atacantes remotos enumerar nombres de usuario válidos enviando solicitudes de autenticación malformadas y observando respuestas diferenciales del servidor. Detalles Campo| Valor ---|--- Software afectado| OpenSSH 2.3...

CVE-2016-3627

CVE-2016-3627 Uso: xmllint --valid --recover CVE-2016-3627.xml root@kitploit: xxd CVE-2016-3627.xml 00000000: 3c21 444f 4354 5950 455b 3c21 454e 5449 0... S="&Y 00000030: 4e3b N;...

CVE-2026-67184-Unauthenticated-NULL-Pointer-Dereference-Crashes-the-Server-TinyWeb-

Security Advisory: Unauthenticated NULL Pointer Dereference Crashes the Server TinyWeb Assigned CVE ID: CVE-2026-67184 Summary When TinyWeb fails to parse a request line, it returns an error but leaves the request's URL pointer set to NULL. The caller ignores the error and passes the request to t...

CVE-2025-70330

🧩 CVE-2025-70330: Vulnerabilidad de análisis de archivos en Easy Grade Pro 4.1 Un ejemplo educativo creado para mostrar a principiantes que la investigación de vulnerabilidades mediante ingeniería inversa es posible desde el principio. 📑 Índice de contenidos Por qué existe este repositorio Relaci...

FreeIPMI before 1.6.19 has a stack-based buffer overflow in _ipmi_sel_oem_fujitsu_get_sel_entry_long_text in libfreeipmi/sel/ipmi-sel-string-fujitsu-irmc-common.c via malformed Fujitsu SEL long-text responses.

...

Colord: Slow rejection of oversized malformed color strings

...

EUVD-2026-58053

vLLM: Unauthenticated Internal Path and Username Disclosure via Validation Error Messages...

CVE-2026-85730 smol-toml: Denial of Service via malformed TOML documents

smol-toml is a small, fast, and correct TOML parser and serializer. Prior to 1.7.1, parse can enter an infinite loop when a value inside an array or inline table is followed by a comment with no trailing newline. In src/util.ts, skipUntil calls indexOfNewline, receives -1 at the end of input, and...

CVE-2026-85730 smol-toml: Denial of Service via malformed TOML documents

smol-toml is a small, fast, and correct TOML parser and serializer. Prior to 1.7.1, parse can enter an infinite loop when a value inside an array or inline table is followed by a comment with no trailing newline. In src/util.ts, skipUntil calls indexOfNewline, receives -1 at the end of input, and...

CVE-2026-85730 smol-toml: Denial of Service via malformed TOML documents

smol-toml is a small, fast, and correct TOML parser and serializer. Prior to 1.7.1, parse can enter an infinite loop when a value inside an array or inline table is followed by a comment with no trailing newline. In src/util.ts, skipUntil calls indexOfNewline, receives -1 at the end of input, and...

CVE-2026-85730

smol-toml , a lightweight TOML parser and serializer for JavaScript/TypeScript, is vulnerable to a Denial of Service via malformed TOML documents prior to version 1.7.1 . The root cause lies in src/util.ts, where skipUntil() calls indexOfNewline() and receives -1 at end-of-input, causing the curs...

PoC-CVE-2025-69421

CVE-2025-69421 crash-only reproducer This repository contains a minimal malformed PKCS12 file that reproduces CVE-2025-69421 in an isolated laboratory environment. The generated PFX contains EncryptedData whose EncryptedContentInfo omits the optional encryptedContent field. Vulnerable OpenSSL...

Authentication Bypass Using an Alternate Path or Channel

Overview fastify is an overhead web framework, for Node.js. Affected versions of this package are vulnerable to Authentication Bypass Using an Alternate Path or Channel via malformed URLs in the fourOhFour router in lib/four-oh-four.js. An attacker can reach an encapsulated not-found handler and...

CVE-2026-76169

A flaw was found in fastify. Malformed URLs can be routed to a custom not-found handler of a different plugin, bypassing the intended security checks. This allows an unauthenticated attacker to access and read the full response of an authentication-protected private fallback, leading to informati...

CVE-2026-76169

fastify versions = 4.0.0 and before 5.12.2 can route a malformed URL sent under one plugin prefix to the custom not-found handler of a different sibling plugin, and invoke it without the preHandler hook declared for that handler. The internal not-found router for encapsulated handlers dispatches...

CVE-2026-76169

Fastify (versions >= 4.0.0 and