Lucene search
+L

1567 matches found

EUVD
EUVD
added 2026/09/13 10:46 p.m.5 views

EUVD-2026-77132

The MQTT-SN client keepalive handler processping in subsys/net/lib/mqttsn/mqttsn.c removes the gateway record after PINGREQ retries are exhausted. It invoked SYSSLISTPEEKHEADCONTAINER&client-gateways, gw, next but discarded the result. That macro is a pure expression that does not assign to gw, s...

7.5CVSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/09/13 10:46 p.m.12 views

CVE-2026-15891 NULL pointer dereference in Zephyr MQTT-SN client when removing a non-responsive gateway

The MQTT-SN client keepalive handler processping in subsys/net/lib/mqttsn/mqttsn.c removes the gateway record after PINGREQ retries are exhausted. It invoked SYSSLISTPEEKHEADCONTAINER&client-gateways, gw, next but discarded the result. That macro is a pure expression that does not assign to gw, s...

7.5CVSS
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/13 3:47 p.m.5 views

Apple-Remote-Crash-Tool-CVE-2018-4407

Apple-Remote-Crash-Tool-CVE-2018-4407 Crashes any macOS High Sierra or iOS 11 device that is on the same WiFi network Just a small Tool that uses a public 'heap buffer overflow vulnerability' CVE-2018-4407 and makes it easier to exploit whole networks. Requirements MacOS Python installed Scapy...

8.8CVSS7.9AI score0.22024EPSS
SaveExploits11
Kitploit
Kitploit
added 2026/09/13 2:06 p.m.5 views

CVE-2017-0541

poc and vulnerability analysis of CVE-2017-0541...

9.3CVSS7.3AI score0.04971EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/13 1:11 p.m.4 views

NFSundown

Overview Proof-of-Concept exploit for NFSundown CVE-2025-38089. It can remotely trigger a kernel crash in an NFS server. Details A remote attacker can trigger a kernel null pointer dereference and crash the kernel by sending a specially crafted RPC request. This occurs due to improper handling of...

9.8CVSS7AI score0.00497EPSS
SaveExploits2References2
Kitploit
Kitploit
added 2026/09/13 12:01 p.m.10 views

CVE-2026-32941

Una vulnerabilidad en todo el framework de Sliver C2 permite una Denegación de Servicio remota no autenticada al provocar Asignación de Memoria No Controlada CWE-789 / CWE-400, lo que lleva a un fallo de Agotamiento de Memoria OOM en todo el proceso. Referencias: Tenable Pasos de reproducción: 1...

7.1CVSS7AI score0.00298EPSS
SaveExploits1References1
Kitploit
Kitploit
added 2026/09/13 11:55 a.m.6 views

CVE-2020-16899

CVE-2020-16899: Microsoft Windows TCP/IP Denial of Service Vulnerability CVSS Score: 7.5 CVSS Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C Overview On October 13, Microsoft announced a critical vulnerability in the Windows IPv6 stack, which allows an attacker to send...

7.8CVSS7.4AI score0.13454EPSS
SaveExploits1References1
EUVD
EUVD
added 2026/09/13 11:42 a.m.5 views

EUVD-2026-77004

SIPp through 3.7.7 contains a buffer overflow vulnerability in the getheader function in src/sipparser.cpp when processing SIP messages with header content exceeding 20,490 bytes. Unauthenticated remote attackers can send crafted SIP messages with oversized headers to overflow the static buffer a...

8.7CVSS
SaveExploits0References5
Kitploit
Kitploit
added 2026/09/13 10:35 a.m.5 views

CVE-2024-54085

CVE-2024-54085:AMI MegaRAC BMC 中的关键身份验证绕过漏洞 受影响系统 该漏洞影响多家主要制造商的广泛服务器硬件: AMI MegaRAC SPx :12.x 至 12.7 版本和 13.x 至 13.5 版本 HPE Cray XD670 :1.09、1.13、1.17 版本 Asus RS720A-E11-RS24U :1.2.27 版本 ASRockRack :服务器 Supermicro :服务器 众多其他使用 AMI BMC 的领先制造商服务器 技术利用细节 漏洞位于以下文件中: root@kitploit:...

10CVSS7.2AI score0.60747EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/13 10:09 a.m.7 views

CVE-2017-11499

Node.js 特定安全缺陷 常量哈希表种子 CVE-2017-11499 Node.js 曾容易受到哈希洪水远程拒绝服务攻击,因为哈希表种子在 Node.js 的特定发布版本中是常量。这是由于默认启用 V8 快照构建,导致初始随机种子在启动时被覆盖。感谢 Google Project Zero 的 Jann Horn 报告此漏洞。 你可以在此处阅读关于哈希洪水漏洞的一般类别:链接。 在此次更新中,快照已默认禁用。严重依赖 vm.runInNewContext 的代码很可能会遇到性能回归,直到实现更好的解决方案。 这是一个高严重性漏洞,影响所有活跃发布线(4.x、6.x、8.x)以及 7...

7.5CVSS7.5AI score0.05434EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/13 10:06 a.m.6 views

CVE-2020-11881

CVE-2020-11881 MikroTik SMB Remote Denial of Service DoS This report describes CVE-2020-11881, an unauthenticated remote DoS for MikroTik's SMB service running on RouterOs. The vulnerability allows an attacker to crash the running SMB service and was responsible disclosed to securitymikrotik.com ...

7.5CVSS7.4AI score0.03775EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/13 9:21 a.m.11 views

exploit-CVE-2016-6515

OpenSSH remote DOS Before 7.3 OpenSSH does not limit password lengths for password authentication, which allows remote attackers to cause a denial of service crypt CPU consumption via a long string. This bug resides in auth-passwd.c in authpassword function. Attackers can exploit this issue to...

7.8CVSS7.2AI score0.58568EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/09/12 10:02 p.m.5 views

CVE-2022-0778-POC

Un POC sencillo de activación remota para CVE-2022-0778 Por qué Mientras intentábamos validar si las implementaciones de servidor de nuestro lado eran/son vulnerables a CVE-2022-0778, resultó extremadamente engorroso hacerlo de forma remota. Las instrucciones para crear certificados maliciosament...

7.5CVSS6.8AI score0.73188EPSS
SaveExploits2References2
Kitploit
Kitploit
added 2026/09/12 4:48 p.m.7 views

TKEY-remote-DoS-vulnerability-exploit

TKEY-remote-DoS-vulnerability-exploit Exploit code for CVE-2015-5477 POC...

7.8CVSS7.1AI score0.91284EPSS
SaveExploits13
Kitploit
Kitploit
added 2026/09/12 7:36 a.m.8 views

CVE-2022-36234

CVE-2022-36234 描述 SimpleNetwork TCP Server 的 commit 29bc615f0d9910eb2f59aa8dff1f54f0e3af4496 被发现包含一个双重释放漏洞,可通过精心构造的 TCP 数据包加以利用。触发该双重释放漏洞可使客户端远程崩溃任何 SimpleNetwork TCP 服务器。在其他情况下,双重释放漏洞可能导致未定义行为,并在适当条件下可能执行代码。 复现 为确保你拥有编译该库所需的标准构建工具,请安装以下软件包(在大多数系统上这些工具通常已安装): root@kitploit: sudo apt-get install...

7.5CVSS7.4AI score0.00941EPSS
SaveExploits2References1
Kitploit
Kitploit
added 2026/09/12 7:27 a.m.7 views

CVE-2022-30780-lighttpd-denial-of-service

CVE-2022-30780 - lighttpd 远程拒绝服务 CVE-2022-30780 - lighttpd 远程拒绝服务 概述 未经身份验证的攻击者可以发送一个 URL 超过最大 URL 长度的 HTTP 请求,从而导致拒绝服务。 受影响的版本 以下版本的 lighttpd 存在漏洞: 软件| 版本| 受影响 ---|---|--- Lighttpd| 1.4.58| 是 ✅ Lighttpd| 1.4.57| 是 ✅ Lighttpd| 1.4.56| 是 ✅ 用法 root@kitploit: $...

7.5CVSS7.4AI score0.5692EPSS
SaveExploits3References8
Tenable Nessus
Tenable Nessus
added 2026/09/12 12:00 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2026-89696

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nfsd: block non-SAVEFH ops after FOREIGN PUTFH to prevent NULL deref When CONFIGNFSDV42INTERSSC is enabled, nfsd4putfh can return success with fhdentry and...

7.5CVSS0.0067EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/09/11 10:42 p.m.8 views

CVE-2026-89564

A flaw was found in the Linux kernel's IP multicast forwarding. When a prefetched socket is destroyed, a subsequent operation to free a network packet skb can attempt to access the already freed socket memory. This use-after-free vulnerability can be triggered by a remote attacker sending special...

7.8CVSS0.00136EPSS
SaveExploits0References6
RedhatCVE
RedhatCVE
added 2026/09/11 10:12 p.m.9 views

CVE-2026-89712

A flaw was found in the Linux kernel's Network File System Daemon NFSD component. A race condition exists where, during the processing of unmounted source-server mounts, a thread may temporarily release a lock. During this window, another NFS Remote Procedure Call RPC thread can free memory that...

9.8CVSS0.00626EPSS
SaveExploits0References7
RedhatCVE
RedhatCVE
added 2026/09/11 9:46 p.m.7 views

CVE-2026-89485

A flaw was found in the lockd component of the Linux kernel. This use-after-free vulnerability occurs in the nlmtraversefiles function when a file's memory is prematurely released while an iterator still holds a pointer to it. A remote attacker could potentially exploit this to cause system...

9.8CVSS0.00626EPSS
SaveExploits0References7
Rows per page
Query Builder