Linux Distros Unpatched Vulnerability : CVE-2026-46729

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NULL Pointer Dereference vulnerability in Apache HTTP Servers modheartmonitor over unicast listener. This issue affects Apache HTTP Server: from 2.4.0 through...

CVE-2024-55511

CVE-2024-55511 此存储库已归档并移至这里 Macrium Reflect 8.1.8017之前版本中存在空指针解引用漏洞，允许本地攻击者通过执行特制可执行文件导致系统崩溃或提升权限。 我目前正在为此漏洞编写一篇分析文章。该文章将尽量适合初学者，以引导新手进入Windows内核利用领域。敬请期待！...

SMBGhost-SMBleed-scanner

Escáner de SMBGhost CVE-2020-0796 y SMBleed CVE-2020-1206 c 2020 ZecOps, Inc. - https://www.zecops.com - Encuentra errores de atacantes Destinado únicamente para fines educativos y pruebas en entornos corporativos. ZecOps no asume ninguna responsabilidad por el código, úselo bajo su propio riesgo...

THM-Steel_Mountain-CVE-2014-6287

THM-SteelMountain-CVE-2014-6287 Un análisis de la máquina Steel Mountain de TryHackMe.com y el exploit para CVE-2014-6287 Créditos No me atribuyo el mérito del descubrimiento y la explotación originales de esta vulnerabilidad. ¡Gracias a las siguientes personas! Descubrimiento: Daniele Linguaglos...

CVE-2026-82357

RT-Labs AB C-Open CANopen contains a NULL pointer dereference if the LSS protocol is used to configure the device. An object defined by the user application may not have all required subindexes for object 0x1018. An unauthenticated, remote attacker with access to the CAN bus, through a compromise...

CVE-2026-82357

The RT-Labs AB C-Open CANopen software contains a NULL pointer dereference vulnerability occurring when the LSS protocol is utilized to configure the device. The root cause is triggered if a user-defined application object lacks all required subindexes for object 0x1018 . An unauthenticated, remo...

CVE-2026-82357 RT-Labs AB C-Open CANopen NULL pointer dereference

RT-Labs AB C-Open CANopen contains a NULL pointer dereference if the LSS protocol is used to configure the device. An object defined by the user application may not have all required subindexes for object 0x1018. An unauthenticated, remote attacker with access to the CAN bus, through a compromise...

EUVD-2026-91022

RT-Labs AB C-Open CANopen contains a NULL pointer dereference if the LSS protocol is used to configure the device. An object defined by the user application may not have all required subindexes for object 0x1018. An unauthenticated, remote attacker with access to the CAN bus, through a compromise...

CVE-2026-34159-Vulnerability-Research-Analysis-Detection

CVE-2026-34159-Investigación-Análisis-Detección-de-Vulnerabilidades Omisión crítica de validación de búfer en deserializetensor llama.cpp b8492. Un búfer de tensor nulo omite la comprobación de límites, lo que permite lectura/escritura arbitraria no autenticada mediante GRAPHCOMPUTE. Omisión de...

CVE-2026-31431

CVE-2026-31431 — De un puntero NULL a root: explotando AFALG AEAD en el kernel de Linux Clase de bug: Desreferencia de puntero NULL → escritura fuera de límites en el heap → sobrescritura de credenciales Subsistema afectado: net/alg/afalg.c Impacto: Escalada de privilegios local usuario sin...

cve-2026-23398-poc

Laboratorio: CVE-2026-23398 ICMP / ipnopmtudisc=3 Laboratorio reproducible para el fallo del kernel Linux en icmptagvalidation desreferencia de puntero NULL cuando net.ipv4.ipnopmtudisc = 3 y llega un ICMP Fragmentation Needed cuya cabecera IPv4 interna citada utiliza un número de protocolo sin...

testanull-CVE-2021-22005.py

Este repositorio no tiene un README...

CVE-2025-4476-Exploit

CVE-2025-4476-Exploit A small Python test client to send HTTP GET requests with an oversized Authorization: Basic header. This tool is intended for lab testing and research into header-parsing issues e.g., null-dereference / crash bugs such as CVE-2025-4476 in libsoup. It demonstrates how a...

Orbit-Fox_SSRF_CVE-2025-10874

CVE-2025-10874 - Prueba de Concepto SSRF en Orbit Fox Exploit de prueba de concepto que demuestra la vulnerabilidad de Server-Side Request Forgery SSRF en el plugin Orbit Fox de WordPress con bypass de inyección de byte nulo. Artículo detallado: https://ryanmroth.com/articles/orbit-fox-ssrf...

CVE-2025-24990_POC

Controlador de módem Agere de Windows ltmdm64.sys. Este controlador es muy antiguo y no se carga de forma predeterminada en mi máquina de pruebas, por lo que lo explotaré en un escenario BYOVD. Curiosamente, según mi investigación, este controlador ha existido desde Windows 7 y tiene al menos un...

PoC-CVE-2026-1357

PoC CVE-2026-1357: WPvivid Backup & Migration The Migration, Backup, Staging – WPvivid Backup & Migration plugin for WordPress is vulnerable to Unauthenticated Arbitrary File Upload in versions up to and including 0.9.123. This is due to improper error handling in the RSA decryption process...

CVE-2026-9032

Tapo C120 v1 and C200 v5 contain a NULL pointer dereference in the HTTPS onboarding connect request parser. The interface is reachable without authentication after initial setup and does not validate that a password field is present for certain authentication and encryption parameter combinations...

EUVD-2026-90980

Tapo C120 v1 and C200 v5 contain a NULL pointer dereference in the HTTPS onboarding connect request parser. The interface is reachable without authentication after initial setup and does not validate that a password field is present for certain authentication and encryption parameter combinations...

CVE-2026-9032

The Tapo C120 v1 and C200 v5 cameras are vulnerable to a NULL pointer dereference within the HTTPS onboarding connect request parser. The flaw exists because the interface—accessible without authentication after initial setup—fails to validate the presence of a password field for specific authent...

CVE-2026-47563

A flaw was found in xorg-x11-drv-nvidia. A local user can trigger an invalid memory access NULL pointer dereference in the driver's kernel mode layer. A successful exploit could allow an attacker to execute arbitrary code with elevated system privileges, access sensitive information, or cause a...