EUVD-2026-70232

A user account with permission to deploy artifacts to a hosted Maven repository could upload a POM file containing an oversized metadata field. This causes future attempts to list or browse that repository's components to permanently fail until an administrator repairs the underlying data. Only t...

CVE-2026-77121 Nexus Repository 3 - Denial of Service via Unbounded Maven POM Metadata Fields

A user account with permission to deploy artifacts to a hosted Maven repository could upload a POM file containing an oversized metadata field. This causes future attempts to list or browse that repository's components to permanently fail until an administrator repairs the underlying data. Only t...

CVE-2025-15467

CVE-2025-15467 Desbordamiento de búfer de pila en el análisis de CMS AuthEnvelopedData de OpenSSL. Vulnerabilidad Existe un desbordamiento de búfer de pila en evpciphergetasn1aeadparams al analizar parámetros de cifrado AEAD por ejemplo, AES-GCM en contenido CMS AuthEnvelopedData. Un IV de tamaño...

cve-2026-34473-unauthenticated-dos-zte-routers

CVE-2026-34473：中兴路由器中未认证的拒绝服务漏洞，影响全球超过14万台设备（17+个型号） 关于CVE-2026-34473的技术分解，源自原始披露集和固件分析工件。 实时网站： https://minanagehsalalma.github.io/cve-2026-34473-unauthenticated-dos-zte-routers/ 本仓库重点： 通过超大的application/x-www-form-urlencoded POST请求实现未认证的拒绝服务。 基于从提取的固件中解码的cgilua/post.lua解析器逻辑的根因分析。...

WaSonar

免责声明 ：本工具仅用于教育目的和安全研究。开发者不对滥用行为负责。请负责任且合乎道德地使用。 WaSonar 是一个强大的 CLI 工具，专用于 WhatsApp 协议上的教育研究、设备追踪和压力测试。基于 Baileys 构建。 功能 • 安装 • 用法 功能 实时设备追踪 ：检测所有绑定设备（手机、网页、桌面）的精确在线/离线状态。 设备发现 ：列出目标号码绑定的所有设备（主手机 + 附属设备）。 资料提取 ：获取个人资料图片、状态/简介信息及 JID。 资源耗尽 ：使用超大反应负载（激进/缓慢模式）淹没设备。 安装 通过 NPM（推荐） root@kitploit: npm...

cve-2025-24035-rds-websocket-dos-test

CVE-2025-24035 WebSocket压力测试（安全） 🚨 免责声明 ：这不是漏洞利用。此脚本仅用于模拟，仅应在安全实验室环境中用于教育目的。 目的 此测试发送一个故意过大的WebSocket头部，以模拟针对RD网关服务（如受CVE-2025-24035影响的服务）的畸形请求。 法律声明 ⚠️ 未经明确授权，请勿针对任何系统使用此工具。未经授权的使用可能违法。 使用方法 root@kitploit: python3 testabnormalrdswebsocket.py 根据本地实验室设置修改脚本中的IP地址。...

EUVD-2026-56887

Django REST framework: Potential bypass of Django DATAUPLOADMAXMEMORYSIZE when parsing oversized JSON and urlencoded request bodies via DRF request.data...

libssh: libssh: denial of service via oversized SFTP read length

A flaw was found in libssh. A remote authenticated client can issue SSHFXPREAD requests with an arbitrarily large length, causing a libssh SFTP server to allocate excessive memory and potentially exhaust it through repeated requests...

libssh: libssh: denial of service via oversized SFTP read length

A flaw was found in libssh. A remote authenticated client can issue SSHFXPREAD requests with an arbitrarily large length, causing a libssh SFTP server to allocate excessive memory and potentially exhaust it through repeated requests...

CVE-2026-79921

A flaw was found in amqp091-go, a Go AMQP 0.9.1 client. A malicious AMQP broker could exploit this by sending oversized data frames, forcing the client to allocate excessive memory. This can lead to unexpected memory consumption and potentially cause the application to become unavailable, resulti...

CVE-2026-9625

A denial-of-service security issue exists within RSLinx® Classic. A crafted CIP packet with an oversized embedded message request can cause the RSLinx® Classic service to crash, requiring a restart of the service to recover...

CVE-2026-9625

RSLinx® Classic is affected by a denial-of-service vulnerability: a crafted CIP packet with an oversized embedded message request can cause the service to crash, requiring a manual restart to recover. The CNA-assigned CVSS 4.0 score is 8.7 (HIGH) with a network attack vector, low complexity, and ...

EUVD-2026-69141

A denial-of-service security issue exists within RSLinx® Classic. A crafted CIP packet with an oversized embedded message request can cause the RSLinx® Classic service to crash, requiring a restart of the service to recover...

CVE-2026-9625 RSLinx Classic® - Multiple Vulnerabilities

A denial-of-service security issue exists within RSLinx® Classic. A crafted CIP packet with an oversized embedded message request can cause the RSLinx® Classic service to crash, requiring a restart of the service to recover...

citrix_bleed_2

Escáner PoC de Citrix Bleed 2 CVE-2025-5777 Este script es un escáner de Prueba de Concepto PoC para la vulnerabilidad hipotética "Citrix Bleed 2" CVE-2025-5777. Está diseñado para detectar posibles fugas de memoria en dispositivos Citrix ADC mediante el envío de solicitudes de gran tamaño y el...

CVE-2026-34040-PoC

CVE-2026-34040 — Bypass do Plugin AuthZ do Docker/Moby Lab PoC KO: Projeto de reprodução prática de uma vulnerabilidade que contorna o plugin de autorização AuthZ do Docker Moby usando um corpo de requisição superior a 1MB. PT: Uma reprodução laboratorial de uma vulnerabilidade que contorna os...

CVE-2023-50965

💥 CVE-2023-50965 — Exploit di Stack Buffer Overflow Linux Proof of Concept dell'exploit per CVE-2023-50965 , che dimostra un buffer overflow basato su stack che porta a Remote Code Execution RCE su sistemi vulnerabili senza mitigazioni abilitate. Questo progetto è stato sviluppato per ricerca sul...

CVE-2026-82238

filebrowser version 2.24.0 contains a race condition in the TUS upload handler that allows authenticated users to bypass upload-length validation by sending multiple concurrent PATCH requests at the same offset. This results in files that exceed their declared Upload-Length and triggers completio...

CVE-2026-71486

A flaw was found in vLLM. An authenticated API client can exploit derender endpoints by providing oversized GenerateResponse objects. These endpoints process the objects without enforcing output bounds or response-size limits. This can lead to excessive consumption of CPU and memory resources,...

CVE-2025-4476-Exploit

CVE-2025-4476-Exploit Ein kleiner Python-Testclient zum Senden von HTTP-GET-Anfragen mit einem überdimensionierten Authorization: Basic-Header. Dieses Tool ist für Labortests und Forschung zu Header-Parsing-Problemen gedacht z. B. Null-Dereference-/Absturzfehler wie CVE-2025-4476 in libsoup. Es...