645611 matches found
watchTowr-vs-Citrix-Netscaler-PreAuth-RCE-CVE-2026-8452
watchTowr-vs-Citrix-Netscaler-PreAuth-RCE 用于 Citrix NetScaler CVE-2026-8452 的检测产物生成器 技术细节请参阅我们的博客文章。 检测演示 root@kitploit: python3 watchTowr-vs-Citrix-Netscaler-PreAuth-RCE.py --target https://172.16.5.12:9443/ / | | |\ \ \ / / \ \ / | | | | / \ / / \ \ \ / / | | \ | Y | | \ / | | / // ||...
OESA-2026-3672 expat security update
expat is a stream-oriented XML parser library written in C. expat excels with files too large to fit RAM, and where performance and flexibility are crucial. Security Fixes: Expat through 2.8.3 contains a denial of service vulnerability caused by quadratic algorithmic complexity in the storeAtts...
OESA-2026-3670 expat security update
expat is a stream-oriented XML parser library written in C. expat excels with files too large to fit RAM, and where performance and flexibility are crucial. Security Fixes: Expat through 2.8.3 contains a denial of service vulnerability caused by quadratic algorithmic complexity in the storeAtts...
OESA-2026-3671 expat security update
expat is a stream-oriented XML parser library written in C. expat excels with files too large to fit RAM, and where performance and flexibility are crucial. Security Fixes: Expat through 2.8.3 contains a denial of service vulnerability caused by quadratic algorithmic complexity in the storeAtts...
OESA-2026-3669 expat security update
expat is a stream-oriented XML parser library written in C. expat excels with files too large to fit RAM, and where performance and flexibility are crucial. Security Fixes: Expat through 2.8.3 contains a denial of service vulnerability caused by quadratic algorithmic complexity in the storeAtts...
OESA-2026-3666 ruby security update
Ruby is a fast and easy interpreted scripting language for object-oriented programming. It has many functions for processing text Files and perform system management tasks such as Perl. Security Fixes: An issue was discovered in the resolv gem before 0.7.2 for Ruby. Resolv::DNS::Resource.getclass...
OESA-2026-3665 ruby security update
Ruby is a fast and easy interpreted scripting language for object-oriented programming. It has many functions for processing text Files and perform system management tasks such as Perl. Security Fixes: Net::IMAP implements Internet Message Access Protocol IMAP client functionality in Ruby. Prior ...
OESA-2026-3650 gstreamer1-plugins-good security update
GStreamer is a streaming media framework, based on graphs of filters which operate on media data. Applications using this library can do anything from real-time sound processing to playing videos, and just about anything else media-related. Its plugin-based architecture means that new data types ...
OESA-2026-3649 gstreamer1-plugins-good security update
GStreamer is a streaming media framework, based on graphs of filters which operate on media data. Applications using this library can do anything from real-time sound processing to playing videos, and just about anything else media-related. Its plugin-based architecture means that new data types ...
OESA-2026-3635 libvirt security update
Libvirt is a C toolkit to interact with the virtualization capabilities of recent versions of Linux and other OSes. The main package includes the libvirtd server exporting the virtualization support. Security Fixes: A flaw was found in libvirt. An unprivileged local user could exploit an integer...
OESA-2026-3616 glibc security update
The GNU C Library project provides the core libraries for the GNU system and GNU/Linux systems, as well as many other systems that use Linux as the kernel. These libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD, OS-specific APIs and more. These APIs include such foundational...
OESA-2026-3615 glibc security update
The GNU C Library project provides the core libraries for the GNU system and GNU/Linux systems, as well as many other systems that use Linux as the kernel. These libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD, OS-specific APIs and more. These APIs include such foundational...
OESA-2026-3608 python-ujson security update
UltraJSON Security Fixes: UltraJSON aka ujson through 5.1.0 has a stack-based buffer overflow in BufferAppendIndentUnchecked called from encode. Exploitation can, for example, use a large amount of indentation.CVE-2021-45958 UltraJSON is a fast JSON encoder and decoder written in pure C with...
OESA-2026-3607 python-ujson security update
UltraJSON Security Fixes: UltraJSON aka ujson through 5.1.0 has a stack-based buffer overflow in BufferAppendIndentUnchecked called from encode. Exploitation can, for example, use a large amount of indentation.CVE-2021-45958 UltraJSON is a fast JSON encoder and decoder written in pure C with...
CVE-2022-31901
CVE-2022-31901 Notepad++x86 の 8.4.3 および 以前のバージョン におけるサービス拒否 DOS。 説明 脆弱性のトリガーは、2つの特別に細工されたテキストファイル（e.g. first.txt & second.txt）を notepad++ への入力として開くことによって発生します。 以下に例を示すように、11/07/2022 時点では、最新バージョンの Notepad++x86 である 8.4.3 を使用しています。 概念実証 - 2つのサンプル入力ファイル first.txt & second.txt を Notepad++ で任意の順序で開きます。...
CVE-2024-22526
CVE-2024-22526 Vulnerability Overview CVE-2024-22526 Apr 12, 2024 BandiView Image Viewer Vulnerability Vulnerability Description advisories Buffer Overflow vulnerability in bandisoft bandiview v7.0, allows local attackers to cause a denial of service DoS via exr image file. credit v7.0 update not...
CVE-2022-24713-POC
POC of CVE-2022-24713 on Ubuntu 在 Ubuntu 上安装当前的 rust-regex 包。 然后，克隆此仓库。 然后，运行 cargo build。 regex 依赖项被设定为 /usr/share/cargo/registry 文件夹，因此不会出现依赖问题。 如果编译花费了极其荒谬的长时间，则属于拒绝服务，即 CVE-2022-24713。 如果没有，则已修补（https://github.com/rust-lang/regex/commit/ae70b41d4f46641dbc45c7a4f87954aea356283e）...
gerhart01
gerhart01 CVE-2020-0890 | Código de prueba de concepto de la vulnerabilidad de denegación de servicio de Windows Hyper-V...
UnrealIRCd-3.2.8.1-Backdoor-Command-Execution
UnrealIRCd-3.2.8.1-Backdoor-Command-Execution Script que explota la vulnerabilidad que permite establecer una puerta trasera en el servicio UnrealIRCd con CVE-2010-2075 Uso usage: IRCBackDoorCommandExecution.py -h targethost targetport attackerhost attackerport...