641186 matches found
CVE-2024-47176
CVE-2024-47176 !CAUTION Para uso educativo/de defensa únicamente, úsalo solo donde estés autorizado, ¡bajo tu propio riesgo! Cómo usar python3 scanner.py CIDR SCANNER IP Ejemplo python3 scanner.py 192.168.0.0/16 192.168.5.100 Módulos Requeridos tqdm Instalación vía pip3/apt: $ pip3 install tqdm $...
CVE-2026-80701
A flaw was found in the Linux kernel's drm/vmwgfx component. A local attacker with DRM master privileges could exploit this by providing oversized cursor dimensions through the DRMIOCTLMODECURSOR2 interface. This improper input validation can lead to a kernel crash, resulting in a Denial of Servi...
CVE-2026-80660
A flaw was found in the Linux kernel's hwmon occ component. This vulnerability occurs when occactivefalse or occshutdown attempt to unregister sysfs devices while holding the occ-lock. During this process, sysfs callbacks can re-enter the OCC update path and try to acquire the occ-lock again,...
CVE-2026-80627
A flaw was found in the Linux kernel, specifically within the MIPS architecture's memory management component. The maarreswalk function performs an out-of-bounds write when processing memory ranges. This occurs because the function fails to check if its internal array is full before writing new...
CVE-2026-80623
A flaw was found in the Coresight Embedded Trace Extension ETE component of the Linux kernel. This vulnerability arises because the system register states for Embedded Trace Macrocells ETMs and ETE are not consistently preserved when the CPU powers down. A local attacker could potentially trigger...
CVE-2026-34344
CVE-2026-34344 Information This vulnerability was originally discovered by @angelboy. I reproduced the vulnerability independently for educational and case-study purposes. Microsoft update detail: CVE-2026-34344 PoC has demonstrate crash by Type Confusion vulnerability. However, I don't have any...
Important: Red Hat Security Advisory: iperf3 security update
An update for iperf3 is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...
iperf3: iperf3 server accepts unbounded peer-controlled JSON parameters enabling remote denial of service via resource exhaustion
A flaw was found in iperf3. A remote attacker can exploit this vulnerability by sending crafted control-channel JSON with oversized numeric parameters, such as parallel and len, which are not properly validated by the server. This improper input validation can lead to excessive stream and thread...
browser-crash-tool
Browser Crash Tool - Kali Overview This tool exploits a vulnerability in iOS WebKit CVE-2020-27950 using Metasploit’s webkitbackdropfilterblur auxiliary module. But seems it work on all browsers after some testing ,It crashes the target browser by loading a crafted web page. The tool also uses...
CVE-2025-34226
CVE-2025-34226: DoS persistente en OpenPLC Runtime Resumen de la vulnerabilidad...
CVE-2026-83492
Extend Themes Kubio AI Website Builder (a WordPress plugin) is affected by an improper input validation vulnerability in versions prior to 2.9.1 . The flaw allows a high-privilege attacker to trigger a denial of service condition over the network with low complexity and no user interaction, resul...
CVE-2023-24998
When multipartResolver is not defined or StandardServletMultipartResolver is registered Uses FileUpload from Tomcat's internal package In this case, the Tomcat version must be greater than 9.0.71 spring boot 2.7.8 Tomcat's maxParameterCount Default: 10000 setting is injected into...
CVE-2021-26258
Este repositorio contiene herramientas y archivos complementarios para la PoC de CVE-2021-26258. Consulte la entrada del blog para obtener detalles sobre la vulnerabilidad. Lista de archivos : rn.stg.original: archivo .stg original que viene con Intel Killer rn.xml.original: archivo .xml extraído...
glibc: Non-progress DoS in EUC_JISX0213 -> UCS-4 conversion state
A flaw was found in glibc. A remote attacker could exploit this vulnerability by providing specially crafted input during SHIFTJISX0213 to UCS-4 text conversion. This crafted input can cause the application to repeatedly process a buffered character without consuming further input, leading to a...
glibc: Non-progress DoS in SHIFT_JISX0213 ->
A flaw was found in glibc. A remote attacker could exploit this vulnerability by providing specially crafted input during SHIFTJISX0213 to UCS-4 text conversion. This crafted input can cause the application to repeatedly emit a buffered code point without consuming further input, leading to...
Vehicle-Service-Management-System-Category-List-Stored-Cross-Site-Scripting-XSS
CVE-2021-46071 Título del Exploit: Vehicle Service Management System - 'Category List' Cross Site Scripting XSS Almacenado Autor del Exploit: SANU P.L CVE: CVE-2021-46071 CVSS: 4.8 MEDIO Referencias:...
CVE-2025-32375
Configuración para la versión vulnerable. Inicia el contenedor vulnerable: root@kitploit: docker compose up Crea un listener por ejemplo, ncat: root@kitploit: ncat -klnv 1337 Ejecuta el exploit: root@kitploit: python3 exploit.py Deberías recibir una petición HTTP en la ventana de ncat con el...
CVE-2026-40345
deepmerge-ts 8.0.0: recursive object graph DoS I reproduced a stack exhaustion bug in deepmerge-ts versions before 8.0.0. The interesting part is that the crash does not need a huge nested object. It comes from object identity. If both values being merged point back to themselves through the same...
libtiff: libtiff: Heap-based buffer overflow via crafted PixarLog-compressed TIFF image
A flaw was found in libtiff. A remote attacker could exploit this vulnerability by providing a specially crafted PixarLog-compressed TIFF image. This issue occurs when decoding Pixarlog codec images with the PIXARLOGDATAFMT8BITABGR output format and a specific stride value, leading to a heap-base...
CVE-2023-21971_Analysis
CVE-2023-21971 Connector/J RCE Análisis Referencias Remote Code Execution RCE in com.mysql:mysql-connector-j | CVE-2023-21971 | Snyk New Vulnerability in MySQL JDBC Driver: RCE and Unauthorized DB Access MYSQL JDBC反序列化解析 - 跳跳糖 tttang.com Resumen de la vulnerabilidad Vulnerabilidad en los producto...