CVE-2017-0781

CVE-2017-0781 PoC Panoramica Questa è un'implementazione della vulnerabilità di heap overflow su Android CVE-2017-0781 descritta nel whitepaper Blueborne pubblicato da Armis. Approfondimenti: https://www.armis.com/blueborne/ Nello stato attuale, questo codice dimostra solo l'overflow e la capacit...

CVE-2025-31650

Apache Tomcat 10.1.39 - Denial of Service DoS Dieses Tool führt eine hochvolumige, asynchrone HTTP/2-Anfrageflut durch, die fehlerhafte priority-Header verwendet, um die Stabilität von Apache Tomcat-Servern der Versionen 10.1.10 bis 10.1.39 zu testen. ⚠️ Dies ist ausschließlich für Bildungs- und...

EUVD-2026-67086

A flaw was found in Undertow. A remote attacker could exploit this vulnerability by sending specially crafted WebSocket messages with permessage-deflate negotiated. This could lead to excessive memory consumption due to the PerMessageDeflateFunction.largerBuffer method using exponential doubling,...

CVE-2026-5680

Undertow (specifically the Undertow-core component) is vulnerable to a Denial of Service (DoS) attack exploitable over the network without authentication. A remote attacker can send specially crafted WebSocket messages with the permessage-deflate extension negotiated, triggering excessive memory ...

CVE-2026-5680

A flaw was found in Undertow. A remote attacker could exploit this vulnerability by sending specially crafted WebSocket messages with permessage-deflate negotiated. This could lead to excessive memory consumption due to the PerMessageDeflateFunction.largerBuffer method using exponential doubling,...

CVE-2020-10558

CVE-2020-10558: Tesla Model S/3/X Denial of Service DoS Sicherheitsforscher: Jacob Archuleta @nullze 📝 Schwachstellenübersicht Eine kritische Denial-of-Service-Schwachstelle DoS wurde im Tesla Model 3, Model S und Model X alle Versionen vor 2020.4.10 entdeckt. Diese Schwachstelle erlaubte einem...

CVE-2024-11467

CVE-2024-11467 macOS ऑपरेटिंग सिस्टम विभिन्न प्रक्रियाओं के बीच मूल अंतर-प्रक्रिया संचार के लिए XPC सेवाओं का उपयोग करता है, जैसे कि XPC सेवा डेमन और तृतीय-पक्ष एप्लिकेशन के विशेषाधिकार प्राप्त सहायक उपकरणों के बीच। VMware Horizon Client, स्थापना के दौरान, /Library/PrivilegedHelperTools/ निर्देशि...

CVE-2022-21894-Payload-New

Questo è un semplice payload di esempio per CVE-2022-21894 che dimostra come un attaccante potrebbe mappare un payload di secondo stadio per poter chiamare i servizi EFI. Un'analisi di questa vulnerabilità può essere consultata qui: https://github.com/Wack0/CVE-2022-21894. Il codice in questo...

CVE-2020-9047

Menu de Uso/Ajuda root@kitploit: usage: CVE-2020-9047.py -h -p RPORT -s LPORT --command -d WEBDIR -U USERNAME -P PASSWORD WINDOWS,LINUX,CHECK RHOST LHOST PAYLOAD Exploit for exacqVision Web Service as outlined in CVE-2020-9047. This program targets Windows and Linux x86 installations of exacqVisi...

CVE-2026-78002

A heap buffer overflow in the RainerScript replace() function of rsyslog allows an unauthenticated remote attacker to cause a denial of service by sending specially crafted syslog messages. The root cause is an incorrect buffer size calculation during string replacement, leading to memory corrupt...

CVE-2026-78002 Rsyslog: rsyslog: denial of service via heap buffer overflow in rainerscript replace() function

A flaw was found in rsyslog. An unauthenticated remote attacker can trigger a heap buffer overflow in the RainerScript replace function by sending specially crafted syslog messages. This vulnerability arises from an incorrect buffer size calculation during string replacement, causing memory...

EUVD-2026-67085

A flaw was found in rsyslog. An unauthenticated remote attacker can trigger a heap buffer overflow in the RainerScript replace function by sending specially crafted syslog messages. This vulnerability arises from an incorrect buffer size calculation during string replacement, causing memory...

CVE-2026-69249

A flaw was found in python-cryptography. When processing invalid certificate chains that include duplicate self-signed certificates, the system recursively invokes the same certificate, leading to an exponential increase in processing time. A remote attacker could exploit this by providing a...

poc_CVE-2021-36934

pocCVE-2021-36934 POC-Experimente mit Volume Shadow copy Service VSS...

CVE-2003-0264

SLMail 5.5 POP3 PASS Parameter Buffer Overflow Versione del programma: SLMail 5.5 Vulnerabilità: overflow del buffer nel parametro PASS del servizio POP3 porta 110 di Seattle Lab Mail SLMail 5.5 Testato su: Windows 7 x86 Sfruttamento: overflow del buffer remoto Video PoC:...

CVE-2024-42849

CVE-2024-42849 Ein Problem in Silverpeas v.6.4.2 und niedriger erlaubt es einem entfernten Angreifer, einen Denial-of-Service über die Passwortänderungsfunktion zu verursachen. Beschreibung Wenn die Passwortänderungsanforderung abgefangen und ein ausreichend langer 1 MB String als neues Passwort...

CVE-2026-75159 MongoDB BI Connector Improper Memory Handling During Failed Kerberos Authentication May Cause Process Termination

An unauthenticated client that can reach a MongoDB Connector for BI deployment configured with Kerberos authentication may cause mongosqld to terminate when a crafted authentication exchange encounters a specific GSSAPI error-handling condition. This can interrupt BI Connector availability until...

CVE-2026-75159

CVE-2026-75159 affects MongoDB Connector for BI (mongosqld) deployments configured with Kerberos authentication . An unauthenticated, network-reachable client can trigger a specific GSSAPI error-handling condition during a crafted authentication exchange, causing mongosqld to terminate. This inte...

CVE-2026-67353

A flaw was found in guzzlehttp/guzzle. A remote attacker can exploit this vulnerability by sending an excessive number of large 'Set-Cookie' header fields from a malicious server. This causes the application's CookieJar to store an unbounded amount of data in memory, leading to resource exhaustio...

CVE-2026-78002

A flaw was found in rsyslog. An unauthenticated remote attacker can trigger a heap buffer overflow in the RainerScript replace function by sending specially crafted syslog messages. This vulnerability arises from an incorrect buffer size calculation during string replacement, causing memory...