httpd: Apache HTTP Server: Arbitrary code execution or denial of service via use-after-free in mod_ldap per-directory configuration

A flaw was found in Apache HTTP Server when using the modldap module in a per-directory configuration. This use-after-free vulnerability allows a remote attacker to potentially execute arbitrary code or cause a denial of service DoS due to improper memory handling. This could lead to system...

CVE-2015-5374-DoS-PoC

CVE-2015-5374 Siemens SIPROTEC 4 e SIPROTEC Compact EN100 Ethernet Module CVE-2015-5374 Siemens SIPROTEC 4 and SIPROTEC Compact EN100 Ethernet Module ... Done, say goodbye! Módulo Metasploit Este módulo envia um pacote especialmente elaborado para a Porta 50000/UDP que pode causar uma negação de...

CVE-2022-22965_PoC

Este repositorio nao tem um README...

RLSA-2026:59220 Important: nginx security update

nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security Fixes: nginx: NGINX: Heap buffer over-read allows memory modification or denial of service CVE-2026-56434 nginx: NGINX: Memory disclosure and denial o...

python-pyasn1 security update

An update is available for python-pyasn1. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Python is an interpreted, interactive, object-oriented programming...

nginx security update

An update is available for nginx. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list nginx is a web and proxy server supporting HTTP and other protocols, with a...

qark

Quick Android Review Kit This tool is designed to look for several security related Android application vulnerabilities, either in source code or packaged APKs. The tool is also capable of creating "Proof-of-Concept" deployable APKs and/or ADB commands, capable of exploiting many of the...

python-pyasn1 security update

An update is available for python-pyasn1. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Python is an interpreted, interactive, object-oriented programming...

apache-tomcat-log4j

Log4j2 CVE-2021-44228 Vulnerabilità POC in Apache Tomcat Anteprima Configurazione Avviare il server tomcat root@kitploit: git clone cd apache-tomcat-10.0.14/bin startup.bat Servire la classe exploit root@kitploit: cd exploit py -m http.server 8888 root@kitploit: cd exploit java -cp...

Bitrix24DoS

Bitrix24 DoS Exploit Dieses Repository enthält ein Python-Skript, das entwickelt wurde, um eine Denial-of-Service DoS-Sicherheitslücke in Bitrix24 auszunutzen. Bitte beachten Sie, dass dieses Skript nur für Bildungszwecke gedacht ist und seine Verwendung für unbefugte Aktivitäten illegal und...

bash-tls-reneg-attack

bash-tls-reneg-attack Ein Bash-Skript, das versucht, einen Server mit TLS-Neuverhandlungen zu überfluten, indem es den OpenSSL-Client verwendet. Siehe CVE-2011-1473 und CVE-2011-1473 für Details. Verwendung: ./tls-reneg.sh some.hostname.here:port...

acceleratortroll

AcceleratorTroll™ Abusare di CVE-2023-28206 per creare qualcosa di utile. Tabella di marcia Al momento stiamo ancora cercando di capire come funziona la vulnerabilità e come sfruttarla per qualcosa di diverso dai panics. Dimostrare che la vulnerabilità può essere utilizzata per ottenere privilegi...

http_bridge

Http ब्रिज प्रेरणा मैंने इस प्रोग्राम को एक अवधारणा प्रमाण के रूप में लिखा है ताकि इस विचार का परीक्षण किया जा सके कि tcp स्ट्रीम पैकेट्स को सरल http अनुरोधों जैसे PUT, PATCH, POST, GET के माध्यम से भेजा जा सके, बिना CONNECT विधि जैसे प्रॉक्सी तरीके का उपयोग किए। साथ ही रस्ट भाषा पर अपने नौसिखिए...

CVE-2025-24054_PoC

Questo repository non contiene un README...

Arecibo

Arecibo Endpoint para Exfiltração Fora de Banda DNS e HTTP Autores Juan Manuel Fernández @TheXC3LL & Pablo Martinez @Xassiz Exfiltração DNS Crie um novo token: root@kitploit: curl localhost:5000/generatedns "htoken": "c008b5dd22817c50441522f917c66743" Agora você pode usar este token identificativ...

BIT-KEYCLOAK-2026-7307 Keycloak: keycloak: denial of service via specially crafted saml input

A flaw was found in Keycloak. A remote, unauthenticated attacker can send a specially crafted XML input to the Security Assertion Markup Language SAML endpoint. This malicious input can cause high CPU usage and worker thread starvation, leading to a Denial of Service DoS where the server becomes...

BIT-KEYCLOAK-2026-4634 Keycloak: keycloak: denial of service via excessive processing of openid connect scope parameters

A flaw was found in Keycloak. An unauthenticated attacker can exploit this vulnerability by sending a specially crafted POST request with an excessively long scope parameter to the OpenID Connect OIDC token endpoint. This leads to high resource consumption and prolonged processing times, ultimate...

Wordpress-DOS

Exploit CVE-2018-6389 per siti WordPress Un piccolo script DOS che sfrutta una vulnerabilità non patchata nei siti WordPress. Usa /wp-admin/load-scripts.php per richiedere script aggiuntivi dal server di hosting. Include un'ampia lista di script come payload della richiesta. Questa implementazion...

BIT-KEYCLOAK-2026-2575 Keycloak: keycloak: denial of service due to excessive samlrequest decompression

A flaw was found in Keycloak. An unauthenticated remote attacker can trigger an application level Denial of Service DoS by sending a highly compressed SAMLRequest through the SAML Redirect Binding. The server fails to enforce size limits during DEFLATE decompression, leading to an OutOfMemoryErro...

DHEater

DHEater DHEater is the proof-of-concept implementation of the DHEat attack CVE-2002-20001. It saturates a server's CPU by enforcing Diffie-Hellman ephemeral DHE or elliptic-curve Diffie-Hellman ephemeral ECDHE key exchange over both TLS and SSH. For further information about the attack visit the...