CVE-2024-4323-Exploit-POC

CVE-2024-4323-Exploit-POC Questo script proof-of-concept dimostra come sfruttare CVE-2024-4323, una vulnerabilità di corruzione della memoria in Fluent Bit, che consente l'esecuzione remota di codice. CVE-2024-4323 è una vulnerabilità di corruzione della memoria nelle versioni di Fluent Bit dalla...

CVE-2026-54084 Wazuh agent enrollment NULL pointer dereference via malformed manager response

Wazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints and cloud workloads. In versions 4.0.0 through 4.14.6, a malicious or man-in-the-middle enrollment manager can crash a Wazuh agent during enrollment by returning a malformed key response with fewer...

CVE-2026-54084

Wazuh versions 4.0.0 through 4.14.6 are susceptible to a NULL pointer dereference in the w_enrollment_process_agent_key() routine during agent enrollment. When a rogue or man-in-the-middle manager returns a malformed key with fewer than four space-separated fields, OS_StrBreak() leaves the missin...

CVE-2026-54084 Wazuh agent enrollment NULL pointer dereference via malformed manager response

Wazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints and cloud workloads. In versions 4.0.0 through 4.14.6, a malicious or man-in-the-middle enrollment manager can crash a Wazuh agent during enrollment by returning a malformed key response with fewer...

CVE-2023-44487-

CVE-2023-44487- 1- Installa Go. 2- Esegui il server su una macchina separata file server.go 3- Esegui il file main.go su una macchina separata. Nota: main.go contiene il codice dell'attacco. 4. Specifica l'indirizzo IP del target. 5- Definisci il numero di richieste: esegui main.go -requests 5000...

CVE-2021-28312

CVE-2021-28312 POC e descrizione per CVE-2021-28312 Vulnerabilità di negazione del servizio NTFS di Windows Link: https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-28312 Riproduzione Dal cmd: digitare il seguente comando cd c::$i30:$bitmap Possibilità di sfruttamento remoto: pu...

CVE-2026-81851

Fireware OS (WatchGuard) is affected by a heap-based buffer overflow in the iked (IKE daemon) process. An authenticated administrator can crash iked by saving a specially crafted configuration , leading to a denial of service . The CVSS 4.0 score is 6.9 (Medium) , reflecting high availability imp...

CVE-2026-81851 Fireware OS Heap-Based Buffer Overflow in iked Allows Denial of Service

A heap-based buffer overflow vulnerability in Fireware OS's iked process allows an authenticated administrator to crash the IKE daemon iked, resulting in a denial of service, by saving a specially crafted configuration...

alibaba__nacos_CVE-2021-44667_2-0-3

Nacos: il S ervice dinamico di Na ming e Co nfiguration...

cve-2006-6184

CVE-2006-6184 Dies ist ein eigenständiger Exploit auf Python-Basis für CVE-2006-6184. Dieser Exploit löst einen stack-basierten Pufferüberlauf im Allied Telesyn TFTP Server AT-TFTP 1.9 und möglicherweise früheren Versionen aus, der es entfernten Angreifern ermöglicht, einen Denial-of-Service zu...

cloudfoundry_uaa

CloudFoundry Benutzerkonto- und Authentifizierungsserver UAA Der UAA ist ein Multi-Tenant-Identity-Management-Dienst, der in Cloud Foundry verwendet wird, aber auch als eigenständiger OAuth2-Server verfügbar ist. Seine Hauptaufgabe ist als OAuth2-Anbieter, der Token für Client-Anwendungen...

CVE-2026-17610 RAIL 802.15.4 Mux missing ACK can lead to DoS

In SiSDK v2026.6.0 and earlier, high network traffic loads can cause a dropped ACK leading to a denial of service. This is only present for EFR32MG24 and EFR32MG26 devices running concurrent multiprotocol Zigbee and Thread...

CVE-2026-17610

CVE-2026-17610 affects SiSDK v2026.6.0 and earlier on EFR32MG24 and EFR32MG26 devices running concurrent Zigbee and Thread multiprotocol operation. The vulnerability resides in the RAIL 802.15.4 Mux , where high network traffic loads can cause a dropped ACK, leading to a denial of service (high a...

BrotherVulnerabilities

Più dispositivi Brother: Vulnerabilità Multiple Panoramica Rapid7 ha condotto un progetto di ricerca zero-day su stampanti multifunzione MFP di Brother Industries, Ltd. Questa ricerca ha portato alla scoperta di otto nuove vulnerabilità. Alcune o tutte queste vulnerabilità sono state identificate...

cve-2019-14220

Riepilogo Un metodo non protetto in un servizio bstutils in BlueStacks 4.120 e precedenti su Mac e 4.110 e precedenti su Windows permette a un attaccante locale di leggere il contenuto di file arbitrari con privilegi di sistema. Descrizione BlueStacks è un emulatore Android disponibile per sistem...

php-exploit_cve-2022-31630

CVE-2022-31630 – Exploit Proof of Concept Avvertenza: Questo codice è stato creato solo a scopo educativo e per test in un ambiente di laboratorio isolato. L'utilizzo su altri sistemi senza autorizzazione è illegale e irresponsabile. 📌 Descrizione CVE-2022-31630 è una vulnerabilità di lettura...

CVE-2022-31630---Proof-of-Concept-Exploit-untuk-PHP-7.4.33

CVE-2022-31630 - Proof of Concept Exploit per PHP 7.4.33 Avviso: questo codice è stato creato solo per scopi educativi e di test in un ambiente di laboratorio isolato. L'utilizzo su altri sistemi senza autorizzazione è illegale e irresponsabile. 📋 Descrizione CVE-2022-31630 è una vulnerabilità di...

CVE-2026-76943 Xiiaozet LK100W Authentication Bypass Using an Alternate Path or Channel

Xiiaozet LK100Wt contains an authentication weakness within an administrative service that may allow an attacker to bypass intended access controls and obtain command execution capabilities. Successful exploitation could allow unauthorized interaction with privileged functionality and may lead to...

CVE-2026-76943

CVE-2026-76943 affects the Xiiaozet LK100W (LK100Wt) device, which contains an authentication weakness in an administrative service that allows an attacker to bypass access controls and obtain command execution capabilities. Successful exploitation could lead to unauthorized interaction with priv...

jsonorg-fp2

json.org CVE-2022-45688 Fehlalarm Das Projekt enthält eine json.org-Abhängigkeit mit CVE-2022-45688. Sie ruft zwar die verwundbare Klasse auf, aber die Eingabedaten sind fest verdrahtet und nicht geeignet, einen DoS-Angriff auszulösen. Die Schwachstelle kann daher nicht für einen DoS-Angriff...