441 matches found
CVE-2022-21907-Vulnerability-PoC
CVE-2022-21907 説明 - CVE-2022-21907 の POC: HTTP プロトコルスタックのリモートコード実行の脆弱性。 - antx が 2022-01-17 に作成、Michele "[email protected]" による小さな修正のみ 詳細 - HTTP プロトコルスタックのリモートコード実行の脆弱性。 - https://github.com/antx-code/CVE-2021-31166CVE-2021-31166 に類似。 - この問題は、昨年...
MouseServer-1.7.8.5-RCE
WiFi Mouse Server 1.7.8.5 - RCE An optimized Python 3 Proof-of-Concept PoC exploit for WiFi Mouse Server v1.7.8.5. This script leverages an inherent protocol vulnerability to achieve Remote Code Execution RCE via automated keystroke injection. This version has been explicitly modified and tuned f...
CVE_2023_44487-Rapid_Reset
CVE-2023-44487 HTTP/2 Rapid Reset 테스트 도구 - 향상된 버전 CVE-2023-44487 , HTTP/2 Rapid Reset 취약점을 위한 포괄적인 Python 테스트 도구입니다. 이 향상된 버전은 테스트 매개변수에 대한 세밀한 제어, 여러 공격 패턴, 고급 모니터링 기능을 제공합니다. ⚠️ 중요 면책 조항 이 도구는 교육 및 승인된 테스트 목적으로만 사용하세요! 소유한 시스템 또는 명시적인 서면 허가를 받은 시스템에만 사용하세요 무단 사용은 불법일 수 있으며 서비스 중단을 초래할 수 있습니다 이...
CVE-2019-13361
CVE-2019-13361 방법 패킷 1: 공격자가 Wi-Fi 설정을 업데이트함 패킷 2: 장치가 자신의 ID와 성공/오류 코드로 응답함 패킷 3: 공격자가 ID를 사용하여 장치를 해제함...
CryptoLyzer v1.6.0
CryptoLyzer is a fast, flexible, and comprehensive server cryptographic protocol TLS, SSL, SSH, IKE, DNSSEC and related setting HTTP headers, DNS records analyzer and fingerprint JA3, HASSH generator with API and CLI interfaces. Use CryptoLyzer when you need to audit TLS/SSL cipher suites — unlik...
The vulnerability of the Secure Socket Tunneling Protocol (SSTP) implementation in Windows operating systems allows a hacker to execute arbitrary code.
The vulnerability of the Secure Socket Tunneling Protocol SSTP implementation in Windows operating systems is related to the reclamation of memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
CVE-2026-40203
When IMAP compression is enabled, the same compression state is reused across responses in a session, so response sizes depend on both attacker-supplied mail and other mail in the same mailbox. An attacker that can send mail to a user and can also observe the sizes of that user's IMAP traffic can...
18-Year-Old Linux SCTP Flaw Could Let Local Users Gain Root and Escape Containers
A use-after-free bug in Linux's SCTP networking code can be turned into full root on a host, and Tencent researchers say they used it to escape a container and reach the machine underneath. The flaw has existed since 2008. The fix already shipped: stable kernels 7.1.6, 6.18.42, 6.12.101 and...
Cisco IOS Software Extensible Messaging Client Protocol DoS (cisco-sa-ios-xmcp-thbAr34t)
According to its self-reported version, Cisco IOS is affected by a denial of service vulnerability. A flaw exists in the Extensible Messaging Client Protocol XMCP due to improper handling of malformed XMCP packets. An unauthenticated, remote attacker can exploit this issue, via a malformed XMCP...
CVE-2026-20301
CVE-2026-20301 affects Cisco IOS Software and Cisco IOS XE Software via the Extensible Messaging Client Protocol (XMCP / External Client protocol). The flaw is improper handling of malformed XMCP packets, enabling an unauthenticated, remote attacker to trigger a device reload and cause a DoS. The...
CVE-2026-68743
A flaw was found in SSSD. The extractauthtokv1 function in the PAM responder does not validate the authtokenlength field against the remaining buffer size before processing. A local attacker can exploit this via a crafted protocol v1 request to the PAM responder socket, causing an out-of-bounds...
PT-2026-67007
Name of the Vulnerable Software and Affected Versions OCPP 1.6 client affected versions not specified Description The OCPP 1.6 client contains an issue where inbound WAMP RPC frames are parsed using a manual helper function extract string field within parse rpc msg. This function uses strncpy to...
The vulnerability of the SPDY framework for developing network applications, servers, and client protocols using Netty allows attackers to induce service failures.
The vulnerability of the SPDY framework for developing network applications, servers, and client protocols related to Netty is related to the uncontrolled distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...
kernel: usbip: validate number_of_packets in usbip_pack_ret_submit()
A flaw was found in the Linux kernel's USB/IP subsystem. A malicious USB/IP server could exploit a vulnerability in the usbippackretsubmit function by sending a specially crafted RETSUBMIT response. This response, containing an oversized numberofpackets value, could cause a heap out-of-bounds...
EUVD-2026-44922
HCL DFXAnalytics is affected by a Deprecated Protocol vulnerability due to the use of TLS 1.0 and TLS 1.1. These legacy protocols contain numerous cryptographic design flaws that expose data to interception and decryption. To remediate this risk, the application must disable all support for TLS 1...
The vulnerability of the TCP/IP protocol implementation in Windows operating systems allows attackers to enhance their privileges.
The vulnerability of the TCP/IP protocol implementation in Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...
CVE-2026-50696
Heap-based buffer overflow in Windows Internet Key Exchange IKE Protocol allows an unauthorized attacker to deny service over a network...
PYSEC-2026-3395 python-utcp: Full Process Environment Exposed to CLI Subprocess - Secrets Leakage via Command Injection
Summary prepareenvironment in clicommunicationprotocol.py passes a full copy of os.environ to every CLI subprocess. When combined with the Command Injection vulnerability CWE-78 in substituteutcpargs tracked as GHSA-33p6-5jxp-p3x4, an attacker can exfiltrate all process-level secrets in a single...
EUVD-2026-42646
A stack-based buffer overflow vulnerability in the RTSP service of Tenda CP3 V3.0 firmware V31.1.9.91 allows an unauthenticated remote attacker to cause a denial of service via a crafted second SETUP request. After completing the OPTIONS, DESCRIBE, and a legitimate first SETUP request to obtain a...
