733403 matches found
kernel: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check
A flaw was found in the Linux kernel's netfilter conntrack TCP state machine. A remote attacker can exploit this vulnerability by sending a specially crafted sequence of TCP Transmission Control Protocol packets, specifically a SYN synchronize packet followed by an RST reset packet with an invali...
kernel: scsi: target: iscsi: Validate CHAP_R length before base64 decode
A flaw was found in the Linux kernel's iSCSI target functionality. This vulnerability allows a remote attacker to cause a buffer overflow by sending a specially crafted Challenge-Handshake Authentication Authentication Protocol CHAP response. The system fails to validate the length of the...
kernel: sctp: purge outqueue on stale COOKIE-ECHO handling
A flaw was found in the Linux kernel's Stream Control Transmission Protocol SCTP implementation. This vulnerability, a use-after-free, occurs when the system processes a Stale Cookie ERROR during the setup or reconfiguration of an SCTP association. A remote attacker could exploit this by sending...
kernel: i2c: stub: Reject I2C block transfers with invalid length
A flaw was found in the Linux kernel's i2c-stub driver. A local user with access to the /dev/i2c- device can exploit this vulnerability by issuing an I2C System Management Bus SMBus input/output control ioctl command with a specially crafted block transfer length. This invalid length can cause th...
kernel: nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page
A flaw was found in the Linux kernel's nvmet subsystem. An unauthenticated remote attacker could exploit an out-of-bounds heap read vulnerability in the Discovery Get Log Page function. By sending a specially crafted request with a manipulated offset, an attacker could read sensitive kernel memor...
kernel: Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count
A flaw was found in the Linux kernel's synaptics-rmi4 input driver. This vulnerability occurs because the driver incorrectly allocates memory for a keymap, leading to an out-of-bounds memory access. A local user with access to a specially crafted input device could exploit this to read or write t...
K000163099: Linux kernel vulnerability CVE-2026-53253
Security Advisory Description In the Linux kernel, the following vulnerability has been resolved: Bluetooth: bnep: reject short frames before parsing A BNEP peer can send a short BNEP SDU. bneprxframe reads the packet type byte immediately and, for control packets, reads the control opcode and...
CVE-2024-23334-PoC
CVE-2024-23334-PoC पायथन AioHTTP लाइब्रेरी sudo apt install python3-venv लैब सेटअप root@kitploit: git clone https://github.com/z3rObyte/CVE-2024-23334-PoC cd CVE-2024-23334-PoC python3 -m venv .env chmod +x ./.env/bin/activate source ./.env/bin/activate pip3 install -r requirements.txt python3...
CVE-2017-7092-PoC
CVE-2017-7092-PoC...
Nagios XI 5.5.6-5.7.5 - Authenticated Remote Command Injection
Nagios XI 5.5.6 through 5.7.5 is susceptible to authenticated remote command injection. There is improper sanitization of authenticated user-controlled input by a single HTTP request via the file /usr/local/nagiosxi/html/includes/configwizards/cloud-vm/cloud-vm.inc.php. This in turn can lead to...
Cisco Unified IP Conference Station 7937G - Denial-of-Service
Cisco Unified IP Conference Station 7937G 1-4-4-0 through 1-4-5-7 allows attackers to restart the device remotely via specially crafted packets that can cause a denial-of-service condition. Note: We cannot prove this vulnerability exists. Out of an abundance of caution, this CVE is being assigned...
CVE-2023-44487
HTTP/2 Rapid Reset: CVE-2023-44487 Descrizione Questo repository contiene il codice proof-of-concept PoC per la vulnerabilità HTTP/2 Rapid Reset identificata come CVE-2023-44487. Panoramica della Vulnerabilità CVE ID : CVE-2023-44487 Impatto : Negazione del Servizio DoS Protocolli Interessati :...
Kentico-Xperience-before-13.0.178---XSS-POC
Questo repository non contiene un README...
glibc: Fix out-of-bounds array write in tdelete
A flaw was found in glibc. An out-of-bounds array write vulnerability exists within the tdelete function. This issue occurs due to incorrect management of array sizes, which can lead to memory corruption. A local attacker with low privileges could potentially exploit this to cause a denial of...
GHSA-5X78-73V4-XG6W vulnerabilities
Vulnerabilities for packages: pgcat...
Libssh2-Exploit
Libssh2-Exploit Obiettivi In questo progetto, miriamo a creare un exploit per una vulnerabilità di lettura fuori dai limiti in libssh2 descritta in CVE-2019-13115. Creare un server ssh malintenzionato per causare il crash di un client che si connette ad esso e vedere se questo può essere sfruttat...
USN-8681-1 openjdk-25 vulnerabilities
It was discovered that the JSSE component of OpenJDK 25 did not correctly authenticate users. A remote attacker could possibly use this issue to read or modify sensitive data. CVE-2026-46968 It was discovered that the JSSE component of OpenJDK 25 did not correctly authorize users. A remote attack...
VulnLLM-R
VulnLLM-R: LLM di Ragionamento Specializzato per il Rilevamento di Vulnerabilità Paper: arXiv:2512.07533 Codice e Dati: GitHub Demo: Demo web Modello: Modello 7B Ambiente e dataset 🛠️ Creare l'ambiente Installare Git LFS e clonare il repository i file LFS vengono scaricati automaticamente durante...