5068704 matches found
CVE-2026-93578
A flaw was found in Netty's Online Certificate Status Protocol OCSP Client. The client fails to verify the 'id-kp-OCSPSigning' Extended Key Usage EKU in OCSP responder certificates. A remote attacker, holding any valid certificate issued by the same Certificate Authority CA, can exploit this by...
CVE-2026-93572 Io.netty/netty-codec-redis: netty: redisarrayaggregator nested resp headers multiply patched preallocation limits
A flaw was found in Netty's RedisArrayAggregator component. A remote attacker can exploit this vulnerability by sending specially crafted nested Redis RESP array headers. This can cause the RedisArrayAggregator to eagerly preallocate a large amount of heap memory, leading to heap memory exhaustio...
CVE-2026-93572 Io.netty/netty-codec-redis: netty: redisarrayaggregator nested resp headers multiply patched preallocation limits
A flaw was found in Netty's RedisArrayAggregator component. A remote attacker can exploit this vulnerability by sending specially crafted nested Redis RESP array headers. This can cause the RedisArrayAggregator to eagerly preallocate a large amount of heap memory, leading to heap memory exhaustio...
CVE-2026-93572
A flaw was found in Netty's RedisArrayAggregator component. A remote attacker can exploit this vulnerability by sending specially crafted nested Redis RESP array headers. This can cause the RedisArrayAggregator to eagerly preallocate a large amount of heap memory, leading to heap memory exhaustio...
CVE-2018-10933
https://github.com/ensimag-security/CVE-2018-10933 报告：rapport/rapport.pdf 参考 https://github.com/hackerhouse-opensource/cve-2018-10933 https://medium.com/@AshishGodivale/exploiting-libssh-authentication-bypass-vulnerability-cve-2018-10933-2366d0bf7939...
CVE-2026-93575
A flaw was found in Netty's MqttDecoder. An unauthenticated remote attacker can exploit this vulnerability by sending a specially crafted MQTT CONNECT packet. The decoder fails to properly validate the 'Properties Length' against the 'Remaining Length', allowing an attacker to bypass size limits...
CVE-2026-93575
CVE-2026-93575 is an incomplete fix for CVE-2026-44248 in Netty's MQTT codec (io.netty.handler.codec.mqtt.MqttDecoder). The decoder validates the packet's Remaining Length against maxBytesInMessage but fails to validate the Properties Length against it. An unauthenticated remote attacker can send...
CVE-2026-93575 Io.netty/netty-codec-mqtt: netty: resource exhaustion in mqttdecoder
A flaw was found in Netty's MqttDecoder. An unauthenticated remote attacker can exploit this vulnerability by sending a specially crafted MQTT CONNECT packet. The decoder fails to properly validate the 'Properties Length' against the 'Remaining Length', allowing an attacker to bypass size limits...
EUVD-2026-82869
A flaw was found in Netty's MqttDecoder. An unauthenticated remote attacker can exploit this vulnerability by sending a specially crafted MQTT CONNECT packet. The decoder fails to properly validate the 'Properties Length' against the 'Remaining Length', allowing an attacker to bypass size limits...
CVE-2026-93572
A flaw was found in Netty's RedisArrayAggregator component. A remote attacker can exploit this vulnerability by sending specially crafted nested Redis RESP array headers. This can cause the RedisArrayAggregator to eagerly preallocate a large amount of heap memory, leading to heap memory exhaustio...
CVE-2026-93575
A flaw was found in Netty's MqttDecoder. An unauthenticated remote attacker can exploit this vulnerability by sending a specially crafted MQTT CONNECT packet. The decoder fails to properly validate the 'Properties Length' against the 'Remaining Length', allowing an attacker to bypass size limits...
SpringBootVulExploit
Spring Boot Vulnerability Exploit Check List Spring Boot 相关漏洞学习资料，利用方法和技巧合集，黑盒安全评估 check list 声明 ⚠️ 本项目所有内容仅作为安全研究和授权测试使用, 相关人员对因误用和滥用该项目造成的一切损害概不负责 目录 Spring Boot Vulnerability Exploit Check List 零：路由和版本 0x01：路由知识 0x02：版本知识 组件版本的相互依赖关系： Spring Cloud 与 Spring Boot 版本之间的依赖关系： Spring Cloud...
CVE-2024-32019-Netdata-ndsudo-PATH-Vulnerability-Privilege-Escalation
🚨 CVE-2024-32019 - Netdata ndsudo PATH 漏洞利用 LPE 提权至 Root 一个基于 Python 的漏洞利用工具，针对 CVE-2024-32019 （Netdata Agent 中的一个高危本地权限提升漏洞），利用了一个配置错误的 SUID 二进制文件（ndsudo），该文件未能安全处理 PATH 环境变量。 !Caution 此代码仅用于教育和授权测试目的 。未经授权在您不拥有或未经明确许可的系统上使用此工具是非法的 。 🔍 概述 CVE ID : CVE-2024-32019 CVSS 评分 : 8.8 高危 披露日期 : 2024年4月12...
CVE-2022-26134
CVE-2022-26134 - OGNL 注入漏洞： 概念验证脚本，利用影响 Atlassian Confluence 7.18 及更低版本的远程代码执行漏洞。该 OGNL 注入漏洞允许未经身份验证的用户在 Confluence Server 或 Data Center 实例上执行任意代码。 受影响版本： 所有受支持的 Confluence Server 和 Data Center 版本均受影响。 Confluence Server 和 Data Center 版本 1.3.0 至 7.18.1（不含）受影响。 该漏洞的 CVSS 评分为 10 分（满分 10 分），严重性极高。 依赖...
CGA-VJ67-8M2Q-VQQW
Bulletin has no description...
CGA-JHQR-78QG-VQW5
Bulletin has no description...
cve-2019-2618
cve-2019-2618 Weblogic Upload Vulnerability Requires username password - CVE-2019-2618 Python Usage root@kitploit: python CVE-2019-2618.py url username password Decrypt Weblogic Password root@kitploit: root@f0cb7e674d7e:/Oracle cat...
CGA-8WGH-94JJ-9XH9
Bulletin has no description...