35590 matches found
net/mail: golang: net/mail: Denial of Service via pathological email address parsing
A flaw was found in the net/mail package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the consumePhrase function, it can lead to excessive resource consumption due to quadratic...
net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution
A flaw was found in net/url, a component of golang. This vulnerability arises when resolving relative paths that contain numerous parent directory '..' segments. A remote attacker could exploit this by providing a specially crafted path, leading to quadratic time complexity and excessive memory...
net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service
A flaw was found in the net/http component of the Go standard library. When a server is configured to support unencrypted HTTP/2, it reads initial bytes from new connections to detect the HTTP/2 client preface. However, the ReadHeaderTimeout is not correctly applied during this process. This...
CVE-2022-1227_Exploit
CVE-2022-1227Exploit 一个用于利用 CVE-2022-1227 的脚本。 背景 推荐使用 Ubuntu 20.10。 Podman TODO：添加此漏洞的原理说明 安装 Podman 按照官方文档中的说明操作： https://podman.io/getting-started/installationinstalling-on-linux 对于 Ubuntu 20.10，安装命令应为： root@kitploit: sudo apt-get install podman=3.4.4+ds1-1ubuntu1 快速开始 简单利用 在本节中，我们尝试一个简单的 PoC，...
net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service
A flaw was found in the net/http component of the Go standard library. When a server is configured to support unencrypted HTTP/2, it reads initial bytes from new connections to detect the HTTP/2 client preface. However, the ReadHeaderTimeout is not correctly applied during this process. This...
net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution
A flaw was found in net/url, a component of golang. This vulnerability arises when resolving relative paths that contain numerous parent directory '..' segments. A remote attacker could exploit this by providing a specially crafted path, leading to quadratic time complexity and excessive memory...
OHTS
OHTS CVE-2017-8759 | Vulnerabilidad de ejecución remota de código en .NET Framework 1. Introducción Existe una vulnerabilidad de ejecución remota de código cuando Microsoft .NET Framework procesa entradas no confiables. Un atacante que explotara con éxito esta vulnerabilidad en software que utili...
CVE-2023-22098
CVE-2023-22098 - Oracle VM VirtualBox 7.0.10 r158379 逃逸 嘿，VM 魔法师们， 2023 年，杰出的安全研究员 Andy Nguyen（@TheFlow0）发现了 VirtualBox 中 Virtio-net 的多个漏洞。所有赞誉归于他的出色工作。 本仓库包含 CVE-2023-22098 的利用程序 。 有关漏洞的深入分析、Virtio-net 内部机制的一些探讨、调试环境设置以及开发此利用程序的指南，请前往我的文章。 破解愉快 🚀...
NuReaper
NuReaper — NuGet 包安全扫描器 ⚠️ 正在开发中 — 该项目正在积极开发中。核心扫描引擎已正常工作；数据库持久化、缓存和完整测试覆盖计划在后续迭代中实现。 NuReaper 是一个 .NET 8 后端 API，可自动分析 NuGet 包的安全性。您提供任何 NuGet 包的链接，系统会递归下载其整个依赖树，反编译编译后的代码，并扫描每个方法以查找恶意模式——返回详细的威胁报告。 🔍 面向非技术读者： 可以把它想象成在手机上安装一个应用。随之而来的是，数十个较小的库会自动安装。NuReaper...
CVE-2022-31199
CVE-2022-31199 - Netwrix Auditor RCE 漏洞利用 POC 🔍 漏洞概述 CVE-2022-31199 是 Netwrix Auditor 10.5 之前版本中存在的一个严重的不安全对象反序列化漏洞。该漏洞存在于监听 TCP 9004 端口的未受保护的 .NET Remoting 服务中，允许未经身份验证的远程攻击者以 NT AUTHORITY\SYSTEM 权限实现任意代码执行。 漏洞详情 CVE ID : CVE-2022-31199 CVSS 评分 : 9.8 严重 CWE : CWE-502 不可信数据的反序列化 受影响版本 : Netwrix...
CVE-2023-21768-dotnet
CVE-2023-21768 - Dotnet Dotnet / C 对 AFD-for-WinSock-EoP 漏洞利用的移植 参考资料： https://github.com/zoemurmure/CVE-2023-21768-AFD-for-WinSock-EoP-exploit https://github.com/chompie1337/WindowsLPEAFDCVE-2023-21768 为什么？ 有时你无法使用编译好的二进制文件。 如何操作？ 在 PowerShell 中运行以下命令。 root@kitploit: $PWSHPID =...
CVE-2023-23397
CVE-2023-23397 概念验证 这是 CVE-2023-23397 的概念验证 PoC 利用脚本，该漏洞存在于 Windows Microsoft Outlook 客户端中。 前提条件 Python 3 pywin32 包 使用方法 Windows 1. 通过运行 pip install pywin32 安装所需的 pywin32 包。 2. 使用以下命令运行脚本：python Exploit.py 。 Kali Linux 1. 通过运行 pip install pywin32 安装所需的 pywin32 包。 2. 在攻击者机器上启动一个 SMB 服务器，例如...
net/mail: golang: net/mail: Denial of Service via pathological email address parsing
A flaw was found in the net/mail package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the consumePhrase function, it can lead to excessive resource consumption due to quadratic...
Important: Red Hat Security Advisory: Red Hat build of MicroShift 4.19.46 security update
Red Hat build of MicroShift release 4.19.46 is now available with updates to packages and images that include a security update. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...
kernel: can:bcm: arbitrary kernel code execution leading to escalate privileges
A flaw was found in the Linux kernel in net/can/bcm.c in can: bcm, where an unprivileged local user can exploit this vulnerability to execute arbitrary code within the kernel, which leads to a local privilege escalation LPE. This allows the attacker to gain root privileges and take full control o...
EUVD-2026-74296
A flaw was found in DPDK lib/vhost. Missing length validation before reading commanddata in the virtio-net control-queue handler can cause an out-of-bounds read and a host process crash...
seal-security-nuget-demo-net7
Demostración de Navegador + CLI NuGet/C — Edición .NET 7 ¿Por qué un fork de .NET 7? Este es un fork redirigido del demo canónico seal-security-nuget-demo que apunta a net9.0. La historia del exploit, los controladores y la lista de paquetes sellados son idénticos — solo difiere elTargetFramework...
Microsoft Visual Studio Products (September 2026)
The Microsoft Visual Studio Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - Heap-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a network. CVE-2026-69439 - Heap-based buffer overflow in...
The vulnerability of the iucv_sock_getsockopt() function in the net/iucv/af_iucv.c module, which is part of the Linux kernel’s networking functions, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the iucvsockgetsockopt function in the net/iucv/afiucv.c module, which implements networking functions in the Linux kernel, is related to the pointer manipulation. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...
RHCOS 4 : Red Hat build of MicroShift 4.19.46 (RHSA-2026:63636)
The remote Red Hat Enterprise Linux CoreOS 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:63636 advisory. - net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGSMAXFRAMESIZE frame...