CVE-2020-27223

CVE-2020-27223 使用方法 root@kitploit: $ mvn spring-boot:run 9.4.36.v20210114 root@kitploit: $ ./poc/cve-2020-27223-poc1.sh "timens":"58,557","acceptlanguage":"aab" real 0m0.093s 🐇 user 0m0.006s sys 0m0.007s "timens":"18,461,763,438","acceptlanguage":"ahn" real 0m35.339s 🐢 user 0m0.006s sys 0m0.006s...

CVE-2024-21733

CVE-2024-21733-POC 注意： 1. tomcat は英語環境であること 2. 特別に構成されたバックエンドコードを使用すること（ROOT/vulnerable.jsp 内の例を参照） 3. 必要に応じてスクリプト内のサーバーアドレスとポート を変更すること。デフォルトは 127.0.0.1:8080 4. タイムアウトによるトリガー。デフォルトは 20 秒だが、通常はこれより短い時間で発生する 手順： 1. 特定バージョンの tomcat をダウンロードする https://archive.apache.org/dist/tomcat/ または Docker...

CVE-2026-97409

In the Linux kernel, the following vulnerability has been resolved: nvme-fc: Do not cancel requests in io target before it is initialized A new nvme-fc controller in CONNECTING state sees admin request timeout schedules ctrl-ioerrwork to abort inflight requests. This ends up calling...

AZL-103997 CVE-2026-97409 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: nvme-fc: Do not cancel requests in io target before it is initialized A new nvme-fc controller in CONNECTING state sees admin request timeout schedules ctrl-ioerrwork to abort inflight requests. This ends up calling...

CVE-2026-97409 nvme-fc: Do not cancel requests in io target before it is initialized

In the Linux kernel, the following vulnerability has been resolved: nvme-fc: Do not cancel requests in io target before it is initialized A new nvme-fc controller in CONNECTING state sees admin request timeout schedules ctrl-ioerrwork to abort inflight requests. This ends up calling...

CVE-2026-97409

The Linux kernel contains a vulnerability in the nvme-fc driver where a new controller in the CONNECTING state can trigger an admin request timeout. This schedules ctrl->ioerr_work to abort inflight requests by calling __nvme_fc_abort_outstanding_ios(). If the io tagset has not been initialize...

EUVD-2026-86222

In the Linux kernel, the following vulnerability has been resolved: nvme-fc: Do not cancel requests in io target before it is initialized A new nvme-fc controller in CONNECTING state sees admin request timeout schedules ctrl-ioerrwork to abort inflight requests. This ends up calling...

CVE-2026-97409 nvme-fc: Do not cancel requests in io target before it is initialized

In the Linux kernel, the following vulnerability has been resolved: nvme-fc: Do not cancel requests in io target before it is initialized A new nvme-fc controller in CONNECTING state sees admin request timeout schedules ctrl-ioerrwork to abort inflight requests. This ends up calling...

Linux Distros Unpatched Vulnerability : CVE-2026-97409

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nvme-fc: Do not cancel requests in io target before it is initialized A new nvme-fc controller in CONNECTING state sees admin request timeout schedules...

CVE-2026-71380

Missing Release of Resource after Effective Lifetime vulnerability in Erlang/OTP inets httpd allows an unauthenticated remote attacker to cause denial of service by sending valid request headers with a large Content-Length and then stalling before the body is complete...

ClipBucket-EDB-44250

ClipBucket-EDB-44250 Unauthenticated Remote Code Execution in...

EUVD-2002-1772

Malware in sbrugna...

EUVD-2025-14104

Malicious code in bioql PyPI...

EUVD-2022-55147

Malicious code in bioql PyPI...

EUVD-2025-20822

Malicious code in bioql PyPI...

CVE-2023-53531

CVE-2023-53531 affects the Linux kernel’s null_blk poll timeout handling. The provided details describe a race between null_timeout_rq() and null_poll() that can cause a NULL pointer dereference (address 0x8) and kernel panic during io_uring benchmarks on /dev/nullb0. The root cause is a race in ...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a race condition in the polling request timeout handling in the nullblk driver, which could lead to a null...

CVE-2025-37886

CVE-2025-37886 : In the Linux kernel, the pds_core path updated to make the wait_context a full part of the q_info struct instead of a stack variable. The bug occurred when a slow development firmware caused an adminq request to time out, and after the wait loop, a completion context on the stack...

Web Push Denial of Service via malicious Web Push endpoint

Prior to version 0.10.3, the built-in clients of the web-push crate eagerly allocated memory based on the Content-Length header returned by the Web Push endpoint. Malicious Web Push endpoints could return a large Content-Length without ever having to send as much data, leading to denial of servic...

CVE-2024-8061 Denial of Service in aimhubio/aim

In version 3.23.0 of aimhubio/aim, certain methods that request data from external servers do not have set timeouts, causing the server to wait indefinitely for a response. This can lead to a denial of service, as the tracking server does not respond to other requests while waiting. The issue...