kernel: netfilter: conntrack_irc: fix possible out-of-bounds read

A flaw was found in the Linux kernel's netfilter conntrackirc module. This vulnerability allows for a possible out-of-bounds read. When parsing network traffic, if a command string is matched but subsequent parsing fails, the system does not properly exit, leading to the flaw. This could...

kernel: sctp: purge outqueue on stale COOKIE-ECHO handling

A flaw was found in the Linux kernel's Stream Control Transmission Protocol SCTP implementation. This vulnerability, a use-after-free, occurs when the system processes a Stale Cookie ERROR during the setup or reconfiguration of an SCTP association. A remote attacker could exploit this by sending...

kernel: netfilter: ipset: fix race between dump and ip_set_list resize

A flaw was found in the Linux kernel's netfilter ipset component. A race condition exists between the ipsetlist resize operation and dump operations. This can lead to a use-after-free vulnerability, where memory is accessed after it has been deallocated. A successful exploitation of this flaw cou...

CVE-2021-35211

Serv-U CVE-2021-35211 शोषण DoS की संभावना - अपने जुड़ाव के नियमों की जाँच करें यह शोषण हर बार काम नहीं करता, लेकिन यह पर्याप्त रूप से काम करता है कि लगभग 5 या 6 में से 1 बार शेलकोड चलाएगा। हालांकि, कभी-कभी असफल शोषण Serv-U सर्वर को क्रैश कर देगा। कृपया सुनिश्चित करें कि आपके जुड़ाव के नियम सेवा म...

CVE-2025-58434-Flowiseai-Auth-Bypass-PoC

CVE-2025-58434 Flowiseai Auth Bypass PoC...

CVE-2024-44083

CVE-2024-44083 Lässt IDA in den meisten Versionen siehe Kompatibilitätsabschnitt abstürzen, wenn die schädliche Binärdatei geöffnet wird. Haftungsausschluss Diese Software wird "wie besehen" nur zu Bildungs- und Forschungszwecken bereitgestellt. Der Autor übernimmt keine Verantwortung für Schäden...

CVE-2026-58097

FreeBSD ppp(8) contains a buffer overflow in mp_SetEnddisc() , which copies a user-supplied PSN endpoint discriminator value without length validation. A local user in the "network" group (required to run the setuid-root ppp(8)) can exploit this via the command interface to crash ppp(8) or potent...

CVE-2026-58096

FreeBSD ppp(8) contains an out-of-bounds write in LcpDecodeConfig(), which failed to validate the length of received multilink endpoint discriminator options against the minimum required by RFC 1717 . A malicious PPP peer can trigger the bug with undersized options, potentially crashing ppp(8) or...

CVE-2026-58096 ppp(8): missing length validation in LcpDecodeConfig()

LcpDecodeConfig did not validate the length of received endpoint discriminator options against the minimum required by RFC 1717. Undersized options would trigger an out-of-bounds write. A malicious PPP peer can exploit CVE-2026-58095 and CVE-2026-58096 to crash ppp8 or potentially execute arbitra...

EUVD-2026-66247

LcpDecodeConfig did not validate the length of received endpoint discriminator options against the minimum required by RFC 1717. Undersized options would trigger an out-of-bounds write. A malicious PPP peer can exploit CVE-2026-58095 and CVE-2026-58096 to crash ppp8 or potentially execute arbitra...

CVE-2026-58096 ppp(8): missing length validation in LcpDecodeConfig()

LcpDecodeConfig did not validate the length of received endpoint discriminator options against the minimum required by RFC 1717. Undersized options would trigger an out-of-bounds write. A malicious PPP peer can exploit CVE-2026-58095 and CVE-2026-58096 to crash ppp8 or potentially execute arbitra...

cve-2021-40449-poc

Questo repository non contiene un README...

CVE-2026-80189

LeafWiki extracts an uploaded ZIP archive without limiting how much data it will write. ZipExtractor.ExtractToDir in internal/importer/zipextractor.go opens each entry and copies it to the destination with io.Copy, which runs to the end of the decompressed stream, so only the size of the uploaded...

weblogicPoc

weblogicPoc Weblogic Vuln POC EXP cve-2020-2551 cve-2020-2555 cve-2020-2883 , ... Patch CVE-2020-2551 Aggiornamento della versione originale https://github.com/Y4er/CVE-2020-2551.git che incontrava il problema che i server con indirizzi privati non possono essere testati tramite connessione...

CVE-2026-39902

creationtimestamp| type| source ---|---|--- 2026-08-26 05:00:03+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/99731 2026-08-27 00:00:10+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/99731...

CVE-2018-0802_POC

CVE-2018-0802POC usage: cve-2018-0802poc.py -h -e EXECUTABLE -o OUTPUT Il file .rtf di esempio sfrutta la vulnerabilità per eseguire la calcolatrice...

CVE-2020-14882-POC

Este repositorio nao tem um README...

CVE-2022-0337-RePoC

Questo repository non contiene un README...

ofbiz-poc

ofbiz-poc CVE-2020-9496 e CVE20209496 utilizzano dnslog per la verifica batch di poc ed exp delle vulnerabilità OFBizCVE20209496.py e OFBizCVE202126295.py sono per la verifica di singole vulnerabilità ofbizpoc.py è per la verifica batch di due vulnerabilità, salva i siti da verificare in batch in...

cve-2023-44487-demo

⚡ CVE-2023-44487 Demo – HTTP/2 Rapid Reset Attack Dieses Projekt demonstriert die HTTP/2 „Rapid Reset“-Sicherheitslücke CVE-2023-44487, die es Angreifern ermöglicht, Server mit RSTSTREAM-Frames zu überlasten und einen Denial-of-Service DoS zu verursachen. Es beinhaltet: ✅ Exploit-Test mit...