BIT-KEYCLOAK-2026-4634 Keycloak: keycloak: denial of service via excessive processing of openid connect scope parameters

A flaw was found in Keycloak. An unauthenticated attacker can exploit this vulnerability by sending a specially crafted POST request with an excessively long scope parameter to the OpenID Connect OIDC token endpoint. This leads to high resource consumption and prolonged processing times, ultimate...

Wordpress-DOS

Exploit CVE-2018-6389 per siti WordPress Un piccolo script DOS che sfrutta una vulnerabilità non patchata nei siti WordPress. Usa /wp-admin/load-scripts.php per richiedere script aggiuntivi dal server di hosting. Include un'ampia lista di script come payload della richiesta. Questa implementazion...

BIT-KEYCLOAK-2026-2575 Keycloak: keycloak: denial of service due to excessive samlrequest decompression

A flaw was found in Keycloak. An unauthenticated remote attacker can trigger an application level Denial of Service DoS by sending a highly compressed SAMLRequest through the SAML Redirect Binding. The server fails to enforce size limits during DEFLATE decompression, leading to an OutOfMemoryErro...

DHEater

DHEater DHEater is the proof-of-concept implementation of the DHEat attack CVE-2002-20001. It saturates a server's CPU by enforcing Diffie-Hellman ephemeral DHE or elliptic-curve Diffie-Hellman ephemeral ECDHE key exchange over both TLS and SSH. For further information about the attack visit the...

log4j-docker

Log4j-Schwachstelle - Proof-of-concept Dieses Repo enthält die Docker- und k8s-YAMLs, die benötigt werden, um die Log4j-Schwachstelle nachzubilden siehe unten. Folgen Sie diesem Blog, um zu verstehen, wie alles zusammenhängt. Docker-Images erstellen Falls Sie die Docker-Images anpassen müssen...

EUVD-2026-65453

Ech0 through 4.5.6 registers the PUT /api/echo/like/:id endpoint on the public router group without authentication or rate limiting. Unauthenticated attackers can increment the favcount counter of any echo including private echoes by supplying its UUID, which can be harvested from the public GET...

CVE-2026-79661

Ech0 (through 4.5.6) exposes the PUT /api/echo/like/:id endpoint on its public router group with no authentication and no rate limiting . An unauthenticated attacker can increment the fav_count counter of any echo—including private ones—by supplying its UUID, which is harvestable from the public ...

CVE-2026-79658

Ech0 versions before 5.0.1 are vulnerable to a denial-of-service attack via the Accept-Language header. The i18n middleware, which runs on every HTTP request, passes the header unfiltered to golang.org/x/text/language.ParseAcceptLanguage. A gap in the CVE-2022-32149 mitigation caps - characters b...

EUVD-2026-65456

Ech0 before 5.0.1 does not impose any size or shape limit on the Accept-Language header processed by its i18n middleware, which runs on every HTTP request. The header is passed unfiltered to go-i18n's NewLocalizer, which internally calls golang.org/x/text/language.ParseAcceptLanguage. The...

CVE-2026-79658 Ech0 before 5.0.1 Denial of Service via Accept-Language

Ech0 before 5.0.1 does not impose any size or shape limit on the Accept-Language header processed by its i18n middleware, which runs on every HTTP request. The header is passed unfiltered to go-i18n's NewLocalizer, which internally calls golang.org/x/text/language.ParseAcceptLanguage. The...

CVE-2026-78684

vLLM versions prior to 0.27.0 are susceptible to a denial-of-service condition through improper handling of the DeepStream backend. The root cause is a failure to classify DeepStream as a GPU backend combined with missing pixel-limit enforcement in the decode path. An unauthenticated attacker can...

CVE-2022-21882

CVE-2022-21882 Win32k Elevazione dei privilegi Tecniche ispirate da: https://github.com/L4ys/CVE-2022-21882 https://github.com/exploitblizzard/Windows-Privilege-Escalation-CVE-2021-1732...

SNMPocalypse-Cisco-Bug-Lets-Hackers-Crash-or-Command-Devices

SNMPocalypse-Cisco-Fehler-lässt-Hacker-Geräte-zum-Absturz-bringen-oder-steuern CVE-2023-20352 ist ein kritischer Stack-Überlauf-Fehler in der SNMP-Engine von Cisco IOS/IOS XE. Mit nur präparierten SNMP-Paketen können entfernte Angreifer Systeme zum Absturz bringen oder die Root-Kontrolle...

CVE-2025-27533-Exploit-for-Apache-ActiveMQ

CVE-2025-27533-Exploit-for-Apache-ActiveMQ PoC exploit para CVE-2025-27533 , uma vulnerabilidade de Negação de Serviço DoS no Apache ActiveMQ. Esta ferramenta envia pacotes OpenWire maliciosos para esgotar a memória heap da JVM do servidor alvo, e potencialmente derrubar o serviço ActiveMQ na por...

CVE-2021-40444-POC

CVE-2021-40444-POC Ein Versuch, die Microsoft MSHTML Remote Code Execution RCE Schwachstelle mit dem Metasploit Framework nachzubilden. funktioniert am besten, wenn nicht in FlareVM ausgeführt VORBEREITUNG Klonen Sie das Repository von https://github.com/lockedbyte/CVE-2021-40444 Bereiten Sie die...

tf-log4j-aws-poc

Readme Descrizione del progetto Questi file di progetto dimostrano una proof-of-concept della vulnerabilità log4j CVE-2021-44228 su AWS utilizzando Terraform Infrastructure-as-a-code. Ci sono 2 demo in questo progetto: 1. single-instance contiene un server vulnerabile, puoi usare il tuo computer...

CVE-2026-12600

Denial-of-service DoS vulnerability in the internal JPEG2000 JPX decoding implementation of the Poppler fork developed by Innodata Labs. When an application processes an untrusted PDF file containing specially crafted JPXDecode images, a remote attacker can cause uncontrolled memory consumption...

logrus-dos-poc

CVE-2025-65637: Sicherheitslücke für Denial-of-Service in Logrus Dieses Verzeichnis enthält Proof-of-Concept-Code und Testskripte für die Denial-of-Service DoS-Sicherheitslücke in github.com/sirupsen/logrus, die als CVE-2025-65637 eingetragen ist. Zusammenfassung der Sicherheitslücke CVE-ID :...

CVE-2025-29927-PoC-Exploit

CVE-2025-29927-PoC-Exploit Next.js 미들웨어의 권한 부여 우회Authorization Bypass에 대한 개념 증명PoC 취약한 버전을 여기에서 테스트할 수 있습니다: https://github.com/lirantal/vulnerable-nextjs-14-CVE-2025-29927 실행 실행 방법은 간단합니다. 1. Python3 CVE-2025-29927-PoC-Exploit.py 도메인 이름을 입력하라는 메시지가 표시됩니다. 두 가지 옵션이 있습니다: 첫째, 도메인 이름만 입력하세요. 둘째, 경로...

C2-Blockchain

C2-Blockchain Questo è un C2 implementato tramite Smart Contract Ethereum basati sul server Ropsten TestNet Per saperne di più su come abbiamo realizzato questa PoC, fai riferimento alla serie qui. Abbiamo spiegato tutto, dall'introduzione alla blockchain all'uso degli smart contract con Python...