mssqlproxy

mssqlproxy mssqlproxy is a toolkit aimed to perform lateral movement in restricted environments through a compromised Microsoft SQL Server via socket reuse. The client requires impacket and sysadmin privileges on the SQL server. Please read this article carefully before continuing. It consists of...

CVE-2026-92081

A flaw was found in fastify. When a route registers a response trailer and is served over HTTP/2, fastify incorrectly sets the 'Transfer-Encoding: chunked' header. This leads to an unhandled exception in Node.js, causing the server process to crash and resulting in a Denial of Service DoS. A...

CVE-2022-46485

CVE-2022-46485 ngDoS - ngSurvey 注意：“滑块”问题也可能存在漏洞，使用大整数代替字符串即可。在我的本地环境中无法确认这一点。 利用步骤 打开调查页面，找到文本或评论字段。 正常填写调查问卷。在文本或评论字段中，输入 dospayload（任何其他内容都可以，但我将使用此字符串进行演示）。 点击“提交”，但使用 Burp Suite 拦截请求。 右键单击请求 Extensions Copy As Python-Requests Copy as requests。（您需要 Copy As Python-Requests 扩展，可从 BApp Store 安装）...

CVE-2024-23722-poc

CVE-2024-23722-poc Uso root@kitploit: python3 exploit.py http://127.0.0.1:8888 port is currently not open port is currently not open port is currently not open port is currently not open Server might have crashed port is currently not open port is currently not open port is currently not open...

CVE-2026-66749-Unchecked-Room-Lookup-Leads-to-Server-Crash-Let-s-Chat-

安全公告：未校验的房间查找导致服务器崩溃（Let's Chat） 分配的 CVE 编号： CVE-2026-66749 摘要 来自任意已登录账户的一个 HTTP 请求即可关闭 Let's Chat 服务器进程。 GET /messages 接受一个 room 参数，按 id 查找该房间，然后对结果调用一个方法，但未检查查找是否返回了任何内容。发送一个合法的 24 字符十六进制字符串但不属于任何房间的 id，所产生的 TypeError 会在 Mongoose 回调中被抛出。Express 只会捕获处理程序内同步抛出的异常，因此该异常会以未捕获异常的形式到达 Node，进程随即退出。...

CVE-2025-21574-Exploit

CVE-2025-21574-Exploit 此黑盒漏洞利用脚本的主要功能： 1. 凭据暴力破解： 测试 12 种以上常见的默认用户名/密码组合 检查 5 个常见的系统数据库 自动检测有效凭据 2. 匿名访问尝试： 尝试不使用任何凭据进行连接 如果启用了匿名访问，则测试所有数据库 3. 漏洞利用阶段： 使用 150,000+ 层嵌套以达到最大影响 自动检测服务器崩溃症状 测试所有有效的凭据/数据库组合 4. 错误处理： 区分连接错误与成功崩溃 优雅地处理各种 MySQL 错误情况 使用说明： 1. 将 TARGETIP 替换为目标服务器的 IP 地址 2. 安装先决条件：pip...

cve-2015-5477

BOND9 TKEY assert DoS CVE-2015-5477 的 PoC 此漏洞利用程序通过发送该漏洞利用代码来测试 BIND9 服务器是否存在漏洞，以观察其是否崩溃。 它是 C 代码，你可以像往常一样在 Unix/Window 上编译，例如： root@kitploit: gcc tkill.c -o tkill 它能在 IPv4 和 IPv6 上运行。 以下是对 localhost 运行时的效果。由于解析该名称会得到两个 IP 地址，因此它会尝试这两个地址。它首先查询“version”字符串，然后发送漏洞利用代码。当探测第二个地址时，version...

EUVD-2026-77370

Mattermost versions 11.9.x = 11.9.0, 11.8.x = 11.8.4, 11.7.x = 11.7.7, 10.11.x = 10.11.22 fail to limit size of unpacked SDP messages compressed with zlib, which allows attacker to deny service or crash server via sending many SDP messages that unpack to large size.. Mattermost Advisory ID:...

CVE-2025-63408

CVE-2025-63408 path-traversal.py: 对 https://github.com/eric-m-holub/double-agent/blob/main/doubleagent.py 的重新实现 使用 UUID 作为所请求文件名的一部分，以避免远程服务器在首次路径遍历利用后崩溃。 run.py / shell.py: 基于 podman 的包装器，用于运行本地容器...

DEBIAN-CVE-2026-89684

In the Linux kernel, the following vulnerability has been resolved: nfsd: fix cpntf publish race in nfs4initcpstate nfs4allocinitcpntfstate published the new cpntf entry into the s2scpstateids IDR with cstype set in one s2scplock section, then took the lock again to listadd it onto pstid-sccplist...

AZL-100653 CVE-2026-89684 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: nfsd: fix cpntf publish race in nfs4initcpstate nfs4allocinitcpntfstate published the new cpntf entry into the s2scpstateids IDR with cstype set in one s2scplock section, then took the lock again to listadd it onto pstid-sccplist...

CVE-2026-66729-Out-of-Bounds-Read-in-facil.io-MIME-Parser-leads-to-Server-Crash

Security Disclosure: Out-of-Bounds Read in facil.io MIME Parser leads to Server crash Assigned CVE ID CVE-2026-66729 Product: facil.io Affected versions: facil.io = 0.6.0 all 0.6.x, all 0.7.x, master; introduced when the MIME parser was added in 0.6.0 Component:...

CVE-2026-23918

CVE-2026-23918 Apache modhttp2 双重释放检测器 https://github.com/user-attachments/assets/d6c30e58-548c-4b6d-9ba3-baa667238a58 root@kitploit: python3 h2ghost.py -h usage: h2ghost.py -h --host HOST --port PORT --tls --no-tls --iterations ITERATIONS --burst-n BURSTN --timeout TIMEOUT --crash-threshold...

CVE-2026-31402

🛡️ CVE-2026-31402 – NFSv4 LOCK 重放缓存堆溢出 CVE-2026-31402：Linux NFS 中隐藏了 23 年的 Bug 📌 概述 CVE-2026-31402 是 Linux 内核 NFSv4.0 LOCK 重放缓存 中的一个 堆溢出漏洞 ，源于对大于固定缓冲区大小的响应处理不当，可能导致 内存损坏 。 🛠 受影响组件 组件： NFSv4 LOCK 重放缓存 受影响系统： 支持 NFS 服务器的 Linux 内核 漏洞类型： 堆溢出 / 内存损坏 ⚠️ 描述 该漏洞的产生原因是 NFSv4 重放缓存将响应存储在固定大小的 112 字节缓冲区中。某些...

Fedora 43 : valkey (2026-cda5ad190f)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-cda5ad190f advisory. Valkey 8.1.10 - Released Mon 31 August 2026 Upgrade urgency SECURITY: This release includes security fixes we recommend you apply as soon as possible. Securi...

CVE-2026-86199

PocketMine-MP versions before 5.43.1 fail to properly validate the Certificate field during offline login authentication. Unauthenticated players can trigger an uninitialized property access error that crashes the server...

CVE-2024-58380

PocketMine-MP versions before 5.11.2 contain a denial of service vulnerability in BookEditPacket handling that crashes the server when an invalid inventory slot value is provided. Attackers can send a crafted BookEditPacket with an inventory slot greater than 35 to trigger an unhandled exception...

CVE-2026-86199 PocketMine-MP before 5.43.1 Denial of Service via unauthenticated login

PocketMine-MP versions before 5.43.1 fail to properly validate the Certificate field during offline login authentication. Unauthenticated players can trigger an uninitialized property access error that crashes the server...

CVE-2026-86199

PocketMine-MP versions before 5.43.1 fail to properly validate the Certificate field during offline login authentication. An unauthenticated player can trigger an uninitialized property access error that crashes the server , resulting in a denial of service. The issue is resolved in version 5.43....

CVE-2026-86199 PocketMine-MP before 5.43.1 Denial of Service via unauthenticated login

PocketMine-MP versions before 5.43.1 fail to properly validate the Certificate field during offline login authentication. Unauthenticated players can trigger an uninitialized property access error that crashes the server...