CVE-2025-6998-CalibreWeb-0.6.24-ReDoS

CVE-2025-6998-CalibreWeb-0.6.24-ReDoS Exploit for the redos for CalibreWeb v0.6.24...

CVE-2025-67445

Overview A vulnerability in the TOTOLINK X5000R V9.1.0cu.2415 web management interface allows an unauthenticated remote attacker on the LAN to crash the web service via a segmentation fault. By sending an oversized HTTP POST request to the CGI endpoint, an attacker can trigger memory exhaustion,...

CVE-2025-11187

CVE-2025-11187 Stack buffer overflow in PKCS12 PBMAC1 PBKDF2 keylength OpenSSL 3.X Found this stack buffer overflow like a year ago, turned out to be a duplicate CVE-2025-11187 issue occurs in libcrypto's PKCS PBMAC1 handling when PBKDF2's keylength is attacker-controlled, It causes a write past ...

Chrome-Skia-CVE-2024-7966

Fixed in Chrome M128: https://chromereleases.googleblog.com/2024/08/stable-channel-update-for-desktop21.html Steps to reproduce: root@kitploit: Apply the chromium.diff patch to chromium. Run genskpic.py to generate drawablepicture.skp.hh, then move the generated file to...

CVE-2025-49223-BillboardJS-PoC

💥 CVE-2025-49223 - Prototype Pollution in Billboard.js billboard.js before 3.15.1 was discovered to contain a prototype pollution via the function generate, which could allow attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties. This repository...

CVE-2026-73633

CVE-2026-73633 Apache Struts S2-072 — PoC + 环境 原理： 来自服务端启用 JSON body插件的JSON 填充（"JSON填充"是Struts 2中JSON插件提供的一项核心功能，可以简单地理解为一种自动的数据转换机制。） JSON 填充功能的解析器在处理JSON数组时，一次性把所有的请求体的json内容读取到内存（逐项装载） 造成内存消耗（和cpu消耗） 测试 我使用wsl2和tomcat部署Struts应用，做了一个登录页面，用户名admin 密码123456...

CVE-2025-5548

Exploitation and Vulnerability Analysis Document purpose: Reflect on the knowledge acquired during the lab deployment, detail the exploitation process for CVE-2025-5548, and outline the next steps toward unknown vulnerability 0-day research. 1. My Vision on Vulnerability Research Throughout this...

gogs

👉 Deploy on DigitalOcean and get $200 in free credits! 🔮 Vision The Gogs /gɑgz/ project aims to build a simple, stable and extensible self-hosted Git service that can be set up in the most painless way. With Go, this can be done with an independent binary distribution across all platforms that Go...

libxml2: libxml2: Denial of Service via out-of-bounds read in xmlFAParsePosCharGroup

A flaw was found in libxml2. This out-of-bounds read vulnerability, specifically within the xmlFAParsePosCharGroup function, could allow an attacker to cause a denial of service. By processing specially crafted XML input, the affected component may attempt to read data beyond its allocated memory...

libxml2: libxml2: Information disclosure, SSRF, or denial of service due to improper parseFlags propagation.

A flaw in libxml2's XInclude processing xmlXIncludeProcess and xmlXIncludeProcessTree fails to propagate parser flags like XMLPARSENONET. This allows custom resource loaders to fetch external network resources, potentially enabling Server-Side Request Forgery SSRF, XML External Entity XXE...

libxml2: libxml2: Denial of Service due to NULL pointer dereference in xmlRegNewParserCtxt

A NULL pointer dereference in libxml2's xmlRegNewParserCtxt function allows a local attacker to cause a denial of service DoS. The flaw occurs when strlen is called on an unverified pointer following a failed xmlStrdup memory allocation, resulting in a process crash...

libxml2: double-free/UAF in libxml2 Python bindings

A flaw was found in libxml2 with Python bindings enabled. A remote attacker could exploit this vulnerability by providing a specially crafted XML document containing a Document Type Definition DTD with enumerated attribute values. This triggers a double-free error in the SAX attributeDecl callbac...

CVE-2025-50360

Pepper Language におけるヒープバッファオーバーフロー Pepper Language は、シンプルさと冗長性を重視した高速なインタプリタ型プログラミング言語です。動的型付けであり、ガベージコレクションをサポートしています。 影響を受けるバージョン: バージョン 0.1.1 以前、コミット 961a5d9988c5986d563310275adad3fd181b2bb7 以前。 ステータス: 未修正。2024年2月15日以降、更新はありません。 再現方法 PoC カラムに65個以上の数値を含むファイルを作成します。例: root@kitploit: 1 2 3 4 5 6 ...

CVE-2022-31902

CVE-2022-31902 Denial Of Service DoS in Notepad++x86 in 8.4.3 and before. Description Vulnerability triggering, via opening a specially crafted text file e.g. first.txt and then using options Find All in All Opened Document or Find All in Current Opened Document under Find options. As an...

PNCVE-Win10-20H2-Exploit

PrintNightmare-CVE-Win10-20H2-Exploit To run this exploit on Windows: Run this oneliner: curl https://raw.githubusercontent.com/peckre/PNCVE-Win10-20H2-Exploit/main/Win10Exploit.zip -o Win10Exploit.zip & tar -xf Win10Exploit.zip & run.bat NOTE: This will only work once per restart. If you run thi...

SubSeven

SubSeven Legacy "SubSeven Legacy is a complete remake of the infamous SubSeven Backdoor also known as Sub7, a popular remote access trojan from the late 90s. More information about the original Sub7 Backdoor can be found on the official Wikipedia page. Like the original Sub7 program, SubSeven...

cryptpad-cve-2025-51846-advisory

CVE-2025-51846 – 无限制的WebSocket帧洪流导致远程拒绝服务 严重性: 高 CVSS 7.5 CWE: 400 – 不受控制的资源消耗 资源耗尽, CWE: CWE-770 – 无限制或无节流的资源分配 状态: 已修复 确认受影响: CryptPad 2025.3.1 CSAF草案中的受影响范围: =2025.3.1, =2025.3.1, 2026.2.1 修复引用: CryptPad PR 2239，提交 1e0c06ad8a0c5dab7...

CVE-2025-46206

There is a denial of service vulnerability in MuPDF 1.25.6 and earlier versions. When an attacker runs the "mutool clean poc /dev/null" command, the program will fall into an infinite recursion between the stripoutlines and stripoutline functions in pdf-clean-file.c until the stack is exhausted...

CVE-2024-51665

CVE-2024-51665 Magical Addons For Elementor = 1.2.1 - 認証済み（購読者以上）サーバーサイドリクエストフォージェリ 説明: WordPress用プラグイン「Magical Addons For...

CVE-2022-41220

Description of CVE-2022-41220 md2roff 1.9 suffers from a stack-based buffer overflow via a Markdown file containing a large number of consecutive characters to be processed. Replication To replicate the vulnerability, download a vulnerable version of md2roff version 1.9: root@kitploit: git clone...