asus-bsitf-0-day-poc

POC - ASUS bsitf.sys कर्नेल मेमोरी मैपिंग टू यूज़रमोड CVE-2026-13585 सारांश ASUS bsitf.sys जिसे AsusBSItf.sys के रूप में भी वितरित किया जाता है कर्नेल ड्राइवर IOCTL 0x222808 को उजागर करता है जो हमलावर-नियंत्रित आकार की भौतिक रूप से सन्निकट कर्नेल मेमोरी आवंटित करता है, इसे पूर्ण पढ़ने/लिखने की...

DHCPig

DHCPig تحقق تحصين DHCP للقبعات البيضاء: استنزف تجمّع العناوين، واختطف عقود إيجار الجيران، وأخرج المضيفين من عناوينهم عبر ARP مُزيّف، وتبيّن ما إذا كانت الشبكة أوقفتك. يتطلب صلاحيات الجذر و Python 3.11+. تشغيل واجهة الويب Debian / Kali: حمّل أحدث .deb من Releases وثبّته — يضع dhcpig وdhcpig-web في...

slowloris

slowloris.py - أداة slowloris بسيطة بلغة بايثون ما هو Slowloris؟ Slowloris هو هجوم رفض خدمة HTTP يؤثر على الخوادم متعددة الخيوط. يعمل على النحو التالي: 1. نبدأ بإرسال العديد من طلبات HTTP. 2. نرسل العناوين بشكل دوري كل 15 ثانية للحفاظ على الاتصالات مفتوحة. 3. لا نغلق الاتصال أبدًا ما لم يغلقه...

CVE-2026-19645

IBM MQ Agent images (CD versions v1.0.0, v1.0.1, v2.0.0, v2.0.1) are affected by a vulnerability where an authenticated user with a valid session cookie can submit arbitrarily large or computationally expensive requests that hold LLM agent workers for extended periods—ranging from tens of seconds...

EUVD-2026-71259

IBM MQ Agent CD: v1.0.0, v1.0.1, v2.0.0, v2.0.1 An authenticated user with a valid session cookie can submit arbitrarily large or computationallyexpensive requests that cause the LLM agent workers to be held for extended periods — rangingfrom tens of seconds to over ten minutes per request. When...

CVE-2026-23842-Denial-of-Service-via-Database-Connection-Pool-Exhaustion-version-1.2.10

CVE-2026-23842 رفض الخدمة عبر استنزاف تجمع اتصالات قاعدة البيانات في الإصدارات ≤ 1.2.10 📌 نظرة عامة يوثق هذا المستودع اكتشافي والإفصاح المسؤول عن CVE-2026-23842 ، وهي ثغرة رفض خدمة عالية الخطورة في ChatterBot. استشارة GitHub: GHSA-v4w8-49pv-mf72 معرّف CVE: CVE-2026-23842 CWE: CWE-400 استهلاك موار...

CVE-2026-14697

netipv6sendns in subsys/net/ip/ipv6nbr.c allocates a transmit netpkt for a Neighbor Solicitation. When it is called with a data packet pending on an unresolved neighbor and that neighbor's pendingqueue is already non-empty an NS is already outstanding, the function appends the data packet and...

CVE-2026-14697 IPv6 Neighbor Solicitation packet leak causes TX pool exhaustion denial of service

netipv6sendns in subsys/net/ip/ipv6nbr.c allocates a transmit netpkt for a Neighbor Solicitation. When it is called with a data packet pending on an unresolved neighbor and that neighbor's pendingqueue is already non-empty an NS is already outstanding, the function appends the data packet and...

CVE-2026-14697

CVE-2026-14697 is a packet-leak denial-of-service in Zephyr RTOS . The function net_ipv6_send_ns() in subsys/net/ip/ipv6_nbr.c permanently leaks a transmit net_pkt when called with a data packet pending on an unresolved neighbor whose pending_queue is already non-empty: it appends the data packet...

CVE-2026-14697 IPv6 Neighbor Solicitation packet leak causes TX pool exhaustion denial of service

netipv6sendns in subsys/net/ip/ipv6nbr.c allocates a transmit netpkt for a Neighbor Solicitation. When it is called with a data packet pending on an unresolved neighbor and that neighbor's pendingqueue is already non-empty an NS is already outstanding, the function appends the data packet and...

CVE-2026-14696

When Ethernet bridging is enabled CONFIGNETETHERNETBRIDGE, ethbridgeinputprocess in subsys/net/l2/ethernet/bridge/bridgeinput.c decides how each frame received on a bridge member interface is handled. For frames that must also be delivered to the local stack, the code called ethbridgehandlelocall...

CVE-2026-14696 Ethernet bridge RX packet leak enables denial of service via RX buffer-pool exhaustion

When Ethernet bridging is enabled CONFIGNETETHERNETBRIDGE, ethbridgeinputprocess in subsys/net/l2/ethernet/bridge/bridgeinput.c decides how each frame received on a bridge member interface is handled. For frames that must also be delivered to the local stack, the code called ethbridgehandlelocall...

CVE-2026-14696

Zephyr RTOS Ethernet bridging contains an RX packet leak in eth_bridge_input_process() (subsys/net/l2/ethernet/bridge/bridge_input.c). When Ethernet bridging is enabled (CONFIG_NET_ETHERNET_BRIDGE), frames delivered to the local stack via eth_bridge_handle_locally() return NET_OK without actually...

CVE-2026-14696 Ethernet bridge RX packet leak enables denial of service via RX buffer-pool exhaustion

When Ethernet bridging is enabled CONFIGNETETHERNETBRIDGE, ethbridgeinputprocess in subsys/net/l2/ethernet/bridge/bridgeinput.c decides how each frame received on a bridge member interface is handled. For frames that must also be delivered to the local stack, the code called ethbridgehandlelocall...

CVE-2026-64607

A flaw was found in Apache HttpComponents Client, specifically in its classic input/output I/O model. When processing a response message with an invalid or unsupported Content-Encoding header, the client fails to properly release the underlying network connection. This connection leak can lead to...

PT-2026-83959

When Ethernet bridging is enabled CONFIG NET ETHERNET BRIDGE, eth bridge input process in subsys/net/l2/ethernet/bridge/bridge input.c decides how each frame received on a bridge member interface is handled. For frames that must also be delivered to the local stack, the code called eth bridge...

PT-2026-83972

net ipv6 send ns in subsys/net/ip/ipv6 nbr.c allocates a transmit net pkt for a Neighbor Solicitation. When it is called with a data packet pending on an unresolved neighbor and that neighbor's pending queue is already non-empty an NS is already outstanding, the function appends the data packet a...

Astra Linux – Vulnerability in netcdf

The ezxmlnew function in ezXML 0.8.6 and earlier is vulnerable to OOB write attacks when opening an XML file after exhausting the memory pool...

CVE-2026-78321

The HTTP media server on DJI drones does not enforce sufficient limits on incoming connections or request rates. An attacker with access to the drone's internal network can exhaust the server's connection pool by repeatedly requesting a stored media file, preventing the server from handling...

CVE-2026-78321

The HTTP media server on multiple DJI drone models (including Neo, Flip, Air 3, Avata 2, Mavic 3, Mini 2–5 Pro, and others) lacks sufficient limits on incoming connections and request rates. An attacker with access to the drone's internal network can exhaust the server's connection pool by repeat...