CVE-2024-58381

PocketMine-MP before 5.11.1 contains a denial of service vulnerability in LoginPacket JSON processing that allows remote attackers to crash the server by sending malformed JSON data. Attackers can exploit improper object initialization from scalar JSON types to trigger unset required properties,...

CVE-2024-58381

PocketMine-MP before 5.11.1 is vulnerable to a denial of service in its LoginPacket JSON processing . A remote attacker can crash the server by sending malformed JSON data, exploiting improper object initialization from scalar JSON types that triggers unset required properties. The vulnerability ...

CVE-2023-54393 PocketMine-MP before 4.20.5 Denial of Service via LoginPacket

PocketMine-MP versions before 4.20.5 contain a denial of service vulnerability in LoginPacket JSON parsing due to improper validation in the JsonMapper dependency. Attackers can send malformed JSON structures in LoginPacket to crash the server...

cve-2026-64725-poc

仓库里有什么？ 这是针对 CVE-2026-64725 的一个 PoC。有关详细信息，请参阅 源代码 和 博客文章。 如何复现？ 平台 已在 macOS 26.4.1（build 25E253；Darwin 25.4.0 xnu-12377.101.151；Apple Silicon T8103 / M1）上发现。 Apple 确认 macOS/iOS/iPadOS 26.6 均存在漏洞。 PoC 1. 确保你的 Mac 运行的是最新版 macOS 2. 确保你已安装 Python 3.6+ 和 clang 3. 将仓库克隆到你的 Mac 上 4. 生成一个最小化的畸形 AIFF...

CVE-2023-40294-and-CVE-2023-40295

当我在自己的环境中运行 boron 时，在处理略微畸形的输入时，偶然发现了 libboron（libboron.so.2 版本 2.0.8）中的 2 个堆缓冲区溢出。这已在 Mac x8664 和 Linux x8664 上正式测试过： 复现文件 reproduction.zip 编译 git clone https://github.com/0branch/boron.git cd boron ./configure && make sudo make install && sudo ldconfig root@kitploit: CVE-2023-40294 iparseblk.c ...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.19.46 security and extras update

Red Hat OpenShift Container Platform release 4.19.46 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.19. Red Hat Product Security has rated this update as having a security impact of...

Security Advisory 0177

Security Advisory 0177 PDF Date: September 9, 2026 Revision | Date | Changes ---|---|--- 1.0 | September 9, 2026 | Initial release The CVE-ID tracking this issue: CVE-2026-77190 CVSSv3.1 Base Score: 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSSv4.0 Base Score: 6.0...

SAP NetWeaver Memory Corruption (3747649)

The version of the SAP NetWeaver kernel detected on the remote host is affected by a memory corruption vulnerability as referenced in SAP Security Note 3747649: - A memory safety vulnerability exists in the Extended Passport Protocol EPP processing library. Under specific conditions, an...

xmldom: Parser silently accepts a not-well-formed end tag whose name is followed by a line break and trailing content

Summary xmldom's parser silently accepts a not-well-formed end tag whose valid name is followed by trailing content — e.g. . The element is closed, the trailing content is discarded, and no error is reported, even though the XML end-tag production allows only optional whitespace after the name an...

xmldom: Quadratic-time parsing via the malformed-input recovery path — `parseElementStartPart` re-scan and `normalize()` adjacent-text merge

Summary xmldom's malformed-input error-recovery path has two quadratic-time On² behaviors that a single crafted input triggers together, so a tiny, highly compressible document tens of KB stalls the Node.js event loop for multiple seconds. It is reachable from DOMParser.parseFromString under...

NPM: Colord: Slow rejection of oversized malformed color strings

NPM: Colord: Slow rejection of oversized malformed color strings vulnerability discovered by ? in WordPress Npm colord versions 2.9.4...

CVE-2026-1010-WebSocket-Connection-Smuggling-via-Malformed-Upgrade-Header

CVE-2026-1010 – WebSocket 连接走私 概述 反向代理和后端对如何解析带有畸形 WebSocket 升级头的 HTTP 请求存在分歧。代理将其视为一个请求，而后端将其解释为两个，从而允许攻击者走私一个隐藏请求。这可能导致缓存中毒或访问控制绕过。 漏洞详情 类型： 连接走私 / 请求拆分 影响： 未授权访问内部端点，缓存中毒。 根本原因： 代理在未规范化请求的情况下转发该请求，后端对 Upgrade 头的 WebSocket 检测触发后，将后续数据作为新的 HTTP 请求处理。 漏洞利用演示 1. 启动代理和后端： root@kitploit: python...

CVE-2025-31650

Apache Tomcat 10.1.39 - サービス拒否 DoS このツールは、不正な priority ヘッダーを使用した大規模な非同期HTTP/2リクエストフラッドを実行して、バージョン10.1.10から10.1.39までを実行しているApache Tomcatサーバーの安定性をテストします。 ⚠️ これは厳密に教育および研究目的 のみです。 ❌ 著者は、違法または無許可の使用について一切責任を負いません 。 🧰 機能 ランダム化された不正なHTTP/2 priority ヘッダーを送信 マルチスレッド非同期アーキテクチャ httpx リアルタイムの可用性監視...

CVE-2010-1205

libpng =1.4.2 の脆弱性 CVE-2010-1205 を利用したサンプルエクスプロイト gregbook - libpng ソースに付属するサンプルプログラム群 generate - libpng で読み込む際にヒープオーバーフローを引き起こす悪意のある PNG ファイルを生成 再現手順: ./build.sh すべてのライブラリと実行ファイルをビルド。gregbook/rpng2-x は libpng-1.4.2 バグあり にリンクされる ./generate/build/generate xploit.png（不正な形式の PNG ファイル）を生成 cd gregbook...

net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame

A flaw was found in the HTTP/2 protocol implementation within the Go standard library golang.org/x/net and net/http/internal/http2. A remote attacker can exploit this vulnerability by sending a specially crafted HTTP/2 SETTINGS frame with the SETTINGSMAXFRAMESIZE parameter set to zero. This...

Important: Red Hat Security Advisory: Red Hat build of MicroShift 4.20.37 security update

Red Hat build of MicroShift release 4.20.37 is now available with updates to packages and images that include a security update. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

Important: Red Hat Security Advisory: Red Hat build of MicroShift 4.22.13 security update

Red Hat build of MicroShift release 4.22.13 is now available with updates to packages and images that include a security update. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.20.37 security and extras update

Red Hat OpenShift Container Platform release 4.20.37 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.20. Red Hat Product Security has rated this update as having a security impact of...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.21.32 security and extras update

Red Hat OpenShift Container Platform release 4.21.32 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.21. Red Hat Product Security has rated this update as having a security impact of...

CVE-2026-44756

A memory safety vulnerability exists in the Extended Passport Protocol EPP processing library. Under specific conditions, an unauthenticated attacker could exploit a crafted network request containing a malformed EPP header, potentially resulting in undefined behavior and abnormal program...