acceleratortroll

AcceleratorTroll™ Abusare di CVE-2023-28206 per creare qualcosa di utile. Tabella di marcia Al momento stiamo ancora cercando di capire come funziona la vulnerabilità e come sfruttarla per qualcosa di diverso dai panics. Dimostrare che la vulnerabilità può essere utilizzata per ottenere privilegi...

http_bridge

Http ब्रिज प्रेरणा मैंने इस प्रोग्राम को एक अवधारणा प्रमाण के रूप में लिखा है ताकि इस विचार का परीक्षण किया जा सके कि tcp स्ट्रीम पैकेट्स को सरल http अनुरोधों जैसे PUT, PATCH, POST, GET के माध्यम से भेजा जा सके, बिना CONNECT विधि जैसे प्रॉक्सी तरीके का उपयोग किए। साथ ही रस्ट भाषा पर अपने नौसिखिए...

esp8266_deauther

ESP8266 Deauther Scannen Sie nach WiFi-Geräten, blockieren Sie ausgewählte Verbindungen, erstellen Sie Dutzende von Netzwerken und verwirren Sie WiFi-Scanner. Neue Dokumentation Hallo 👋 Bitte besuchen Sie Deauther.com für Informationen zu diesem Projekt. Hier sind einige Schnelllinks: Kaufen...

CVE-2025-24054_PoC

Questo repository non contiene un README...

Arecibo

Arecibo Endpoint para Exfiltração Fora de Banda DNS e HTTP Autores Juan Manuel Fernández @TheXC3LL & Pablo Martinez @Xassiz Exfiltração DNS Crie um novo token: root@kitploit: curl localhost:5000/generatedns "htoken": "c008b5dd22817c50441522f917c66743" Agora você pode usar este token identificativ...

CVE-2022-21882

CVE-2022-21882 Win32k-Sicherheitslücke zur Erhöhung von Privilegien Nur für Windows 10 21H2...

BIT-KEYCLOAK-2026-7307 Keycloak: keycloak: denial of service via specially crafted saml input

A flaw was found in Keycloak. A remote, unauthenticated attacker can send a specially crafted XML input to the Security Assertion Markup Language SAML endpoint. This malicious input can cause high CPU usage and worker thread starvation, leading to a Denial of Service DoS where the server becomes...

BIT-KEYCLOAK-2026-4634 Keycloak: keycloak: denial of service via excessive processing of openid connect scope parameters

A flaw was found in Keycloak. An unauthenticated attacker can exploit this vulnerability by sending a specially crafted POST request with an excessively long scope parameter to the OpenID Connect OIDC token endpoint. This leads to high resource consumption and prolonged processing times, ultimate...

Wordpress-DOS

Exploit CVE-2018-6389 per siti WordPress Un piccolo script DOS che sfrutta una vulnerabilità non patchata nei siti WordPress. Usa /wp-admin/load-scripts.php per richiedere script aggiuntivi dal server di hosting. Include un'ampia lista di script come payload della richiesta. Questa implementazion...

BIT-KEYCLOAK-2026-2575 Keycloak: keycloak: denial of service due to excessive samlrequest decompression

A flaw was found in Keycloak. An unauthenticated remote attacker can trigger an application level Denial of Service DoS by sending a highly compressed SAMLRequest through the SAML Redirect Binding. The server fails to enforce size limits during DEFLATE decompression, leading to an OutOfMemoryErro...

DHEater

DHEater DHEater is the proof-of-concept implementation of the DHEat attack CVE-2002-20001. It saturates a server's CPU by enforcing Diffie-Hellman ephemeral DHE or elliptic-curve Diffie-Hellman ephemeral ECDHE key exchange over both TLS and SSH. For further information about the attack visit the...

log4j-docker

Log4j-Schwachstelle - Proof-of-concept Dieses Repo enthält die Docker- und k8s-YAMLs, die benötigt werden, um die Log4j-Schwachstelle nachzubilden siehe unten. Folgen Sie diesem Blog, um zu verstehen, wie alles zusammenhängt. Docker-Images erstellen Falls Sie die Docker-Images anpassen müssen...

EUVD-2026-65453

Ech0 through 4.5.6 registers the PUT /api/echo/like/:id endpoint on the public router group without authentication or rate limiting. Unauthenticated attackers can increment the favcount counter of any echo including private echoes by supplying its UUID, which can be harvested from the public GET...

CVE-2026-79661

Ech0 (through 4.5.6) exposes the PUT /api/echo/like/:id endpoint on its public router group with no authentication and no rate limiting . An unauthenticated attacker can increment the fav_count counter of any echo—including private ones—by supplying its UUID, which is harvestable from the public ...

CVE-2026-79658

Ech0 versions before 5.0.1 are vulnerable to a denial-of-service attack via the Accept-Language header. The i18n middleware, which runs on every HTTP request, passes the header unfiltered to golang.org/x/text/language.ParseAcceptLanguage. A gap in the CVE-2022-32149 mitigation caps - characters b...

EUVD-2026-65456

Ech0 before 5.0.1 does not impose any size or shape limit on the Accept-Language header processed by its i18n middleware, which runs on every HTTP request. The header is passed unfiltered to go-i18n's NewLocalizer, which internally calls golang.org/x/text/language.ParseAcceptLanguage. The...

CVE-2026-79658 Ech0 before 5.0.1 Denial of Service via Accept-Language

Ech0 before 5.0.1 does not impose any size or shape limit on the Accept-Language header processed by its i18n middleware, which runs on every HTTP request. The header is passed unfiltered to go-i18n's NewLocalizer, which internally calls golang.org/x/text/language.ParseAcceptLanguage. The...

CVE-2026-78684

vLLM versions prior to 0.27.0 are susceptible to a denial-of-service condition through improper handling of the DeepStream backend. The root cause is a failure to classify DeepStream as a GPU backend combined with missing pixel-limit enforcement in the decode path. An unauthenticated attacker can...

Invoke-BSOD

Invoke-BSOD Für den Fall, dass ein Computer erledigt werden soll – ohne Admin-Rechte! BSOD-Methode von hier: https://github.com/Leurak/MEMZ/blob/master/WindowsTrojan/Source/Destructive/KillWindows.cL10-L18 Invoke-BSOD.ps1 Ein PowerShell-Skript, um einen Blue Screen of Death BSOD ohne Admin-Rechte...

CVE-2022-21882

CVE-2022-21882 Win32k Elevazione dei privilegi Tecniche ispirate da: https://github.com/L4ys/CVE-2022-21882 https://github.com/exploitblizzard/Windows-Privilege-Escalation-CVE-2021-1732...