641518 matches found
Important: Red Hat Security Advisory: iperf3 security update
An update for iperf3 is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...
iperf3: iperf3 server accepts unbounded peer-controlled JSON parameters enabling remote denial of service via resource exhaustion
A flaw was found in iperf3. A remote attacker can exploit this vulnerability by sending crafted control-channel JSON with oversized numeric parameters, such as parallel and len, which are not properly validated by the server. This improper input validation can lead to excessive stream and thread...
browser-crash-tool
Browser Crash Tool - Kali Overview This tool exploits a vulnerability in iOS WebKit CVE-2020-27950 using Metasploit’s webkitbackdropfilterblur auxiliary module. But seems it work on all browsers after some testing ,It crashes the target browser by loading a crafted web page. The tool also uses...
CVE-2026-83492
Extend Themes Kubio AI Website Builder (a WordPress plugin) is affected by an improper input validation vulnerability in versions prior to 2.9.1 . The flaw allows a high-privilege attacker to trigger a denial of service condition over the network with low complexity and no user interaction, resul...
CVE-2023-24998
Cuando multipartResolver no está definido o se registra StandardServletMultipartResolver Se utiliza FileUpload del paquete interno de Tomcat En este caso, la versión de Tomcat debe ser superior a 9.0.71 spring boot 2.7.8 La configuración maxParameterCount de Tomcat Default: 10000 se inyecta en...
CVE-2021-26258
本仓库包含用于 CVE-2021-26258 PoC 的工具和补充文件。有关该漏洞的详细信息，请参阅博客文章。 文件列表 ： rn.stg.original: 随 Intel Killer 附带的原始 .stg 文件 rn.xml.original: 使用 rnstg-tool 从 rn.stg.original 中提取的 .xml 文件 rncustom.xml: 自定义的 .xml 文件，用于禁止 Discord.exe 的网络访问并启动 RemoteRegistry 服务 rncustom.stg: 使用 rnstg-tool 从 rncustom.xml 生成的自定义 .stg ...
CVE-2020-0609
CVE-2020-609-POC 对开启了UDP端口3391的RDG服务器运行PoC，将导致RDG实例崩溃。 感谢@Ollypwn在开发过程中的切磋。...
glibc: Non-progress DoS in EUC_JISX0213 -> UCS-4 conversion state
A flaw was found in glibc. A remote attacker could exploit this vulnerability by providing specially crafted input during SHIFTJISX0213 to UCS-4 text conversion. This crafted input can cause the application to repeatedly process a buffered character without consuming further input, leading to a...
glibc: Non-progress DoS in SHIFT_JISX0213 ->
A flaw was found in glibc. A remote attacker could exploit this vulnerability by providing specially crafted input during SHIFTJISX0213 to UCS-4 text conversion. This crafted input can cause the application to repeatedly emit a buffered code point without consuming further input, leading to...
Vehicle-Service-Management-System-Category-List-Stored-Cross-Site-Scripting-XSS
CVE-2021-46071 漏洞标题: Vehicle Service Management System - '分类列表' 存储型跨站脚本（XSS） 漏洞作者: SANU P.L CVE: CVE-2021-46071 CVSS: 4.8 中危 参考链接: https://www.plsanu.com/vehicle-service-management-system-category-list-stored-cross-site-scripting-xss https://nvd.nist.gov/vuln/detail/CVE-2021-46071...
CVE-2025-32375
Configuración para la versión vulnerable. Inicia el contenedor vulnerable: root@kitploit: docker compose up Crea un listener por ejemplo, ncat: root@kitploit: ncat -klnv 1337 Ejecuta el exploit: root@kitploit: python3 exploit.py Deberías recibir una petición HTTP en la ventana de ncat con el...
CVE-2026-40345
deepmerge-ts mergeleft.self, right.self - mergeleft.self, right.self - mergeleft.self, right.self - RangeError: Maximum call stack size exceeded 当 deepmergeInto、deepmergeCustom 和 deepmergeIntoCustom 收到同类图时，也会出现相同的行为。 本地复现 在 package.json 中，该包被固定到受影响的 7.1.6 版本。 root@kitploit: npm install npm run po...
libtiff: libtiff: Heap-based buffer overflow via crafted PixarLog-compressed TIFF image
A flaw was found in libtiff. A remote attacker could exploit this vulnerability by providing a specially crafted PixarLog-compressed TIFF image. This issue occurs when decoding Pixarlog codec images with the PIXARLOGDATAFMT8BITABGR output format and a specific stride value, leading to a heap-base...
CVE-2023-21971_Analysis
CVE-2023-21971 Connector/J RCE Analysis分析 参考 Remote Code Execution RCE in com.mysql:mysql-connector-j | CVE-2023-21971 | Snyk New Vulnerability in MySQL JDBC Driver: RCE and Unauthorized DB Access MYSQL JDBC反序列化解析 - 跳跳糖 tttang.com 漏洞概述 Oracle MySQL 的 MySQL Connectors...
CVE-2026-26449
A flaw was found in Stomper. A remote attacker can send a specially crafted message, specifically a SEND frame missing the destination header field, to the server. This action triggers a null pointer dereference, which is an attempt to access memory that does not exist, causing the server process...
CVE-2026-26448
A flaw was found in Stomper. A remote attacker can trigger a use-after-free vulnerability by sending multiple CONNECT frames on the same TCP connection, followed by SEND frames to a previously subscribed destination. This can cause the broker to dereference a freed memory region, leading to a hea...
CVE-2026-26447
A flaw was found in Stomper. An unauthenticated client can exploit a use-after-free vulnerability by repeatedly issuing SUBSCRIBE commands for the same destination over a single connection and then closing that connection. This leads to incorrect cleanup of internal subscription structures,...
CVE-2026-26445
A flaw was found in stomper. A remote attacker can exploit this by sending partial STOMP Streaming Text Oriented Messaging Protocol frames. This action can cause the broker's sockets to enter a permanent half-read state. Consequently, the broker stops processing new messages, leading to a Denial ...
CVE-2026-51684
Incorrect access control in the setStorageCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to alter the storage-related service state via sending a crafted POST request to /cgi-bin/cstecgi.cgi...
CVE-2026-80609
A flaw was found in the qede driver of the Linux kernel. An out-of-bounds read vulnerability exists due to an incorrect index check for cqe-lenlist before element access. This flaw could potentially allow an attacker to cause a denial of service or disclose sensitive information...