CVE-2024-50251-PoC

CVE-2024-50251-PoC Solo un bug DoS locale nel kernel Linux...

CVE-2019-0708

CVE-2019-0708 CVE-2019-0708 Strumento di scansione di massa per la vulnerabilità BlueKeep e POC, per ora solo blue screen. 0x01 Scansione - windows uso： rdpscan.exe ip1-ip2 root@kitploit: .\rdpscan.exe 192.168.1.1-192.168.1.2 192.168.1.1 - VULNERABLE - CVE-2019-0708 192.168.1.2 - SAFE - CredSSP/N...

CVE-2024-4323-Exploit-POC

CVE-2024-4323-Exploit-POC Questo script proof-of-concept dimostra come sfruttare CVE-2024-4323, una vulnerabilità di corruzione della memoria in Fluent Bit, che consente l'esecuzione remota di codice. CVE-2024-4323 è una vulnerabilità di corruzione della memoria nelle versioni di Fluent Bit dalla...

CVE-2026-54084 Wazuh agent enrollment NULL pointer dereference via malformed manager response

Wazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints and cloud workloads. In versions 4.0.0 through 4.14.6, a malicious or man-in-the-middle enrollment manager can crash a Wazuh agent during enrollment by returning a malformed key response with fewer...

CVE-2026-54084

Wazuh versions 4.0.0 through 4.14.6 are susceptible to a NULL pointer dereference in the w_enrollment_process_agent_key() routine during agent enrollment. When a rogue or man-in-the-middle manager returns a malformed key with fewer than four space-separated fields, OS_StrBreak() leaves the missin...

CVE-2026-54084 Wazuh agent enrollment NULL pointer dereference via malformed manager response

Wazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints and cloud workloads. In versions 4.0.0 through 4.14.6, a malicious or man-in-the-middle enrollment manager can crash a Wazuh agent during enrollment by returning a malformed key response with fewer...

CVE-2023-44487-

CVE-2023-44487- 1- Installa Go. 2- Esegui il server su una macchina separata file server.go 3- Esegui il file main.go su una macchina separata. Nota: main.go contiene il codice dell'attacco. 4. Specifica l'indirizzo IP del target. 5- Definisci il numero di richieste: esegui main.go -requests 5000...

CVE-2021-28312

CVE-2021-28312 POC e descrizione per CVE-2021-28312 Vulnerabilità di negazione del servizio NTFS di Windows Link: https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-28312 Riproduzione Dal cmd: digitare il seguente comando cd c::$i30:$bitmap Possibilità di sfruttamento remoto: pu...

CVE-2026-81851

Fireware OS (WatchGuard) is affected by a heap-based buffer overflow in the iked (IKE daemon) process. An authenticated administrator can crash iked by saving a specially crafted configuration , leading to a denial of service . The CVSS 4.0 score is 6.9 (Medium) , reflecting high availability imp...

CVE-2026-81851 Fireware OS Heap-Based Buffer Overflow in iked Allows Denial of Service

A heap-based buffer overflow vulnerability in Fireware OS's iked process allows an authenticated administrator to crash the IKE daemon iked, resulting in a denial of service, by saving a specially crafted configuration...

cve-2006-6184

CVE-2006-6184 Dies ist ein eigenständiger Exploit auf Python-Basis für CVE-2006-6184. Dieser Exploit löst einen stack-basierten Pufferüberlauf im Allied Telesyn TFTP Server AT-TFTP 1.9 und möglicherweise früheren Versionen aus, der es entfernten Angreifern ermöglicht, einen Denial-of-Service zu...

CVE-2026-17610 RAIL 802.15.4 Mux missing ACK can lead to DoS

In SiSDK v2026.6.0 and earlier, high network traffic loads can cause a dropped ACK leading to a denial of service. This is only present for EFR32MG24 and EFR32MG26 devices running concurrent multiprotocol Zigbee and Thread...

CVE-2026-17610

CVE-2026-17610 affects SiSDK v2026.6.0 and earlier on EFR32MG24 and EFR32MG26 devices running concurrent Zigbee and Thread multiprotocol operation. The vulnerability resides in the RAIL 802.15.4 Mux , where high network traffic loads can cause a dropped ACK, leading to a denial of service (high a...

cve-2019-14220

Riepilogo Un metodo non protetto in un servizio bstutils in BlueStacks 4.120 e precedenti su Mac e 4.110 e precedenti su Windows permette a un attaccante locale di leggere il contenuto di file arbitrari con privilegi di sistema. Descrizione BlueStacks è un emulatore Android disponibile per sistem...

CVE-2026-76943 Xiiaozet LK100W Authentication Bypass Using an Alternate Path or Channel

Xiiaozet LK100Wt contains an authentication weakness within an administrative service that may allow an attacker to bypass intended access controls and obtain command execution capabilities. Successful exploitation could allow unauthorized interaction with privileged functionality and may lead to...

CVE-2026-76943

CVE-2026-76943 affects the Xiiaozet LK100W (LK100Wt) device, which contains an authentication weakness in an administrative service that allows an attacker to bypass access controls and obtain command execution capabilities. Successful exploitation could lead to unauthorized interaction with priv...

jsonorg-fp2

json.org CVE-2022-45688 Fehlalarm Das Projekt enthält eine json.org-Abhängigkeit mit CVE-2022-45688. Sie ruft zwar die verwundbare Klasse auf, aber die Eingabedaten sind fest verdrahtet und nicht geeignet, einen DoS-Angriff auszulösen. Die Schwachstelle kann daher nicht für einen DoS-Angriff...

CVE-2019-0708-EXPloit-3389

CVE-2019-0708-EXPloit-3389 RemotedesktopRDP-Dienst RemotecodeausführungsschwachstelleCVE-2019-0708...

CVE-2022-48474_CVE-2022-48475

CVE-2022-48474 & CVE-2022-48475 PoC & Exploits für CVE-2022-48474 & CVE-2022-48475 „Control de Ciber“ ist eine Verwaltungssoftware für Internetcafés. Mehrere Denial-of-Service DoS Schwachstellen in Versionen vor 1.650. Ein nicht authentifizierter entfernter Angreifer kann eine sorgfältig...

CVE-2026-54876

A flaw was found in OpenSSL. A malicious TLS Transport Layer Security server can exploit this vulnerability by sending a specially crafted OCSP Online Certificate Status Protocol response during the X.509 certificate chain verification process. This can lead to a memory leak in client application...