AirDroidPwner

AirDroidPwner CVE-2019-9599 Questo exploit non è più funzionale Video PoC dell'exploit: https://www.youtube.com/watch?v=0QDM2246DM CVE: https://nvd.nist.gov/vuln/detail/CVE-2019-9599 Exploit-db: https://www.exploit-db.com/exploits/46337 Cos'è AirDroid? AirDroid è uno degli strumenti più noti e...

CVE-2022-30780-lighttpd-denial-of-service

CVE-2022-30780 - denial of service remoto su lighttpd CVE-2022-30780 - denial of service remoto su lighttpd Riepilogo Un attaccante non autenticato può inviare una richiesta HTTP con un URL che supera la lunghezza massima consentita, provocando un denial of service. Versioni vulnerabili Le seguen...

CVE-2026-63383

A flaw was found in Libevent, an event notification library. A remote attacker could exploit an out-of-bounds read vulnerability in the decodetaginternal function by sending specially crafted, attacker-controlled tagged RPC Remote Procedure Call data. This could lead to a denial of service, causi...

CVE-2026-32945

CVE-2026-32945 PJSIP DNS-Komprimierungszeiger Heap-OOB-Read Remote DoS Beschreibung getnamelen und getname in pjlib-util/src/pjlib-util/dns.c lesen einen 2-Byte-DNS-Komprimierungszeiger über pjmemcpy&offset, p, 2, ohne zu prüfen, dass beide Bytes innerhalb des Paketpuffers liegen. Wenn ein...

CVE-2026-23398

CVE-2026-23398 Linux-Kernel icmptagvalidation NULL-Pointer-Dereferenz Remote DoS Beschreibung icmptagvalidation in net/ipv4/icmp.c dereferenziert inetprotosproto ohne NULL-Prüfung. Ein entfernter Angreifer kann ein einzelnes manipuliertes ICMP- Fragmentation-Needed-Paket mit einer nicht...

CVE-2026-20404-MediaTek-modem-remote-DoS-rogue-base-station-scenario-

CVE-2026-20404-MediaTek-Modem-Remote-DoS-Rogue-Base-Station-Szenario- Eine Eingabevalidierungsproblematik im MediaTek-Modem kann einen Systemabsturz Remote-DoS verursachen, wenn sich ein UE mit einer von einem Angreifer kontrollierten, bösartigen Basisstation verbindet – ohne dass eine...

CVE-2024-54085

CVE-2024-54085: Vulnerabilidade crítica de bypass de autenticação no AMI MegaRAC BMC Sistemas afetados A vulnerabilidade afeta uma ampla gama de hardware de servidores de grandes fabricantes: AMI MegaRAC SPx : versões 12.x até 12.7 e 13.x até 13.5 HPE Cray XD670 : versões 1.09, 1.13, 1.17 Asus...

CVE-2026-47859 Unbounded memory allocation in RFC6587SyslogDeserializer (octet-counted framing) — remote DoS

RFC6587SyslogDeserializer, used by the Spring Integration syslog TCP inbound adapter to decode RFC 6587 / RFC 5424 frames, trusts the sender-supplied octet count of an octet-counted frame and allocates a byte array of exactly that size with no upper bound. Spring Integration 7.1.0 Spring...

CVE-2026-47859

CVE-2026-47859 affects Spring Integration 's RFC6587SyslogDeserializer , the component used by the syslog TCP inbound adapter to decode RFC 6587 / RFC 5424 frames. The root cause is that the deserializer trusts the sender-supplied octet count of an octet-counted frame and allocates a byte array o...

CVE-2026-19401

NSD (Name Server Daemon) is vulnerable to a remote UDP denial-of-service targeting its serve child process. An unauthenticated remote attacker can crash the serve child by sending a crafted UDP message containing a specially tuned number of DNS Cookie options (17 when the UDP payload size is 512)...

CVE_2020_0796_CNA

CVE-2020-0796-CNA Basato sul PoC fornito da danigargu, è stata modificata per implementare l'escalation dei privilegi su Windows 10 e, basandosi sul progetto di iniezione DLL riflessiva di stephenfewer e sulle interfacce documentate di CobaltStrike, è stato sviluppato un AggressorScript. Questo...

CVE-2026-80186 Bluez: stack overflow in name2utf8 causes dos and potential code execution

A stack-based buffer overflow vulnerability exists in BlueZ, the Linux Bluetooth protocol stack. A remote user within Bluetooth radio range can send a specially crafted Extended Inquiry Response EIR packet that causes a buffer overflow when the target device performs Bluetooth discovery. This...

CVE-2026-13217

The OCPP 1.6 client in subsys/net/lib/ocpp/ocpp.c reconstructs a session handle and PDU id from the uid field of a CALLRESULT message. In ocppprocessservermsg the code calls atoistrtokruid, "-", &tmp without checking the strtokr return value. When the server-supplied uid is empty or contains no -...

EUVD-2026-65598

The OCPP 1.6 client in subsys/net/lib/ocpp/ocpp.c reconstructs a session handle and PDU id from the uid field of a CALLRESULT message. In ocppprocessservermsg the code calls atoistrtokruid, "-", &tmp without checking the strtokr return value. When the server-supplied uid is empty or contains no -...

CVE-2026-13217 NULL-pointer dereference in Zephyr OCPP CALLRESULT parsing via unchecked strtok_r/atoi

The OCPP 1.6 client in subsys/net/lib/ocpp/ocpp.c reconstructs a session handle and PDU id from the uid field of a CALLRESULT message. In ocppprocessservermsg the code calls atoistrtokruid, "-", &tmp without checking the strtokr return value. When the server-supplied uid is empty or contains no -...

ALPINE-CVE-2026-54874

Issue summary: Receiving a DTLS record for a future epoch while a handshake is in progress causes OpenSSL to buffer far more memory than the record itself requires. Impact summary: A peer can use a small amount of network traffic to make an OpenSSL DTLS endpoint retain a disproportionately large...

cve-2015-7547-public

Server di attacco PoC per la vulnerabilità CVE-2015-7547 in glibc DNS stub resolver Per testare su macchina locale con una versione vulnerabile di glibc: root@kitploit: user@localhost:/$ echo 'nameserver 127.0.0.127' | sudo tee /etc/resolv.conf user@localhost:/$ echo 'nameserver 127.0.0.127' | su...

OpenSSL 1.1.1 < 1.1.1zi Multiple Vulnerabilities

The version of OpenSSL installed on the remote host is prior to 1.1.1zi. It is, therefore, affected by multiple vulnerabilities as referenced in the 1.1.1zi advisory. - Issue summary: Receiving a DTLS record for a future epoch while a handshake is in progress causes OpenSSL to buffer far more...

The vulnerability of the `parse_redboot_partitions()` function in the `drivers/mtd/parsers/redboot.c` file of the MTD memory driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the parseredbootpartitions function in the drivers/mtd/parsers/redboot.c file of the MTD memory driver in the Linux operating system is related to the copying of buffers without checking their size a classic buffer overflow attack. Exploiting this vulnerability could allow a...

CVE-2026-74704

A flaw was found in the Linux kernel. The schcake ACK filter, responsible for processing network packets, contains a vulnerability. A remote attacker could send specially crafted malformed IP packets. This could lead to the system logging excessive warnings or, under specific configurations, caus...