CVE-2026-31911

libpcap BPF interpreter calls abort if it encounters a BPF instruction that has an invalid opcode. In particular uncommon use cases a crafted filter program can terminate the OS process...

CVE-2026-18313

rpcapd can allocate up to 65536 bytes per each RPCAPMSGUPDATEFILTERREQ or RPCAPMSGSTARTCAPREQ message received from the client, but it never frees the memory, so it leaks memory even under normal use. A malicious client can cause the server to leak memory substantially faster...

ms08-067

📖 Overview This repository contains a Metasploit module implementation for the MS08-067 Windows Server Service vulnerability CVE-2008-4250. This is a classic remote code execution vulnerability affecting older Windows systems. 🛠️ Installation & Usage Prerequisites Kali Linux Metasploit Framework...

CVE-2026-18313 rpcapd memory leak in libpcap before 1.10.7

rpcapd can allocate up to 65536 bytes per each RPCAPMSGUPDATEFILTERREQ or RPCAPMSGSTARTCAPREQ message received from the client, but it never frees the memory, so it leaks memory even under normal use. A malicious client can cause the server to leak memory substantially faster...

CVE-2026-18313

CVE-2026-18313 is a memory leak in the rpcapd (remote capture daemon) component of libpcap versions before 1.10.7 . Each RPCAP_MSG_UPDATEFILTER_REQ or RPCAP_MSG_STARTCAP_REQ message from a client causes an allocation of up to 65536 bytes that is never freed, leaking memory even under normal use. ...

EUVD-2026-72019

libpcap BPF interpreter treats the offset in the 'ja L' BPF instruction as a signed integer to implement looping via backward jumps, but it does not limit the number of loop iterations. In particular uncommon use cases a crafted filter program can cause the interpreter to loop infinitely...

CVE-2026-6554 infinte loop in libpcap before 1.10.7

libpcap BPF interpreter treats the offset in the 'ja L' BPF instruction as a signed integer to implement looping via backward jumps, but it does not limit the number of loop iterations. In particular uncommon use cases a crafted filter program can cause the interpreter to loop infinitely...

CVE-2026-31911

libpcap BPF interpreter calls abort if it encounters a BPF instruction that has an invalid opcode. In particular uncommon use cases a crafted filter program can terminate the OS process...

CVE-2026-31911

libpcap (the packet capture library used by tcpdump) contains a vulnerability in its BPF interpreter that calls abort() upon encountering a BPF instruction with an invalid opcode. In uncommon use cases, a crafted filter program can cause the host OS process to terminate, resulting in a local deni...

CVE-2026-31911 abort() in libpcap before 1.10.7 on an invalid BPF opcode

libpcap BPF interpreter calls abort if it encounters a BPF instruction that has an invalid opcode. In particular uncommon use cases a crafted filter program can terminate the OS process...

CVE-2026-31911 abort() in libpcap before 1.10.7 on an invalid BPF opcode

libpcap BPF interpreter calls abort if it encounters a BPF instruction that has an invalid opcode. In particular uncommon use cases a crafted filter program can terminate the OS process...

CVE-2026-31911

libpcap BPF interpreter calls abort if it encounters a BPF instruction that has an invalid opcode. In particular uncommon use cases a crafted filter program can terminate the OS process...

EUVD-2026-72017

libpcap BPF interpreter calls abort if it encounters a BPF instruction that has an invalid opcode. In particular uncommon use cases a crafted filter program can terminate the OS process...

CVE-2025-66838

CVE-2025-66838 Lack of Rate Limiting - File Upload Description An attacker can rapidly upload a large volume of files to cause denial of service CVSS Score: 6.5 Medium Attack Type Remote Authenticated Affected Versions Versions before 10.0.23.0.3587512 Discovered By: Yazan Abu-Nadi...

CVE-2023-37073

CVE-2023-37073 Telnet 默认凭据可能导致信息泄露和拒绝服务 DoS 攻击。 复现步骤 此漏洞影响 AP AR-5310 root@kitploit: Telnet 192.168.1.1 username:user password:user 然后 Boom ... 你已登录 通过 Telnet 默认凭据泄露信息 root@kitploit: 当你通过 Telnet 服务登录后， 输入命令 'help' 或 '?' 可查看 可用选项： reboot, ping, lanhosts, passwd restoredefault, nslookup, traceroute...

CVE-2024-36539

Here’s a README.md for a Proof of Concept PoC demonstrating the insecure permissions vulnerability in Contour v1.28.3: Proof of Concept PoC for Insecure Permissions Vulnerability in Contour v1.28.3 This repository contains a Proof of Concept PoC script demonstrating an insecure permissions...

cve-2017-11176

cve-2017-11176 Public Information The mqnotify function in the Linux kernel through 4.11.9 does not set the sock pointer to NULL upon entry into the retry logic. During a user-space close of a Netlink socket, it allows attackers to cause a denial of service use-after-free or possibly have...

jsonorg-tp1

json.org CVE-2022-45688 真阳性 该项目演示了 json.org 中的 CVE-2022-45688——有一个简单的应用程序 XML2JSONConverter 从输入读取 XML，将其转换为 JSON 并 美观打印到控制台。 使用恶意输入，应用程序会因栈溢出而崩溃。 测试用例 CVE202245688Test 演示了此行为，可以通过运行 mvn test 来执行。 运行软件组合分析 有多个 sh 脚本用于运行不同的分析，结果报告可在 scan-results 中找到。 生成 SBOM pom.xml 包含一个插件，用于生成 CycloneDX 格式的 SBOM。...

CVE-2024-42861

CVE-2024-42861 The DOS attack against IEEE 802.1AS standardgPTP protocol CVE ID CVE-2024-42861 PRODUCT IEEE 802.1AS standard VERSION IEEE 802.1AS-2020, IEEE 802.1AS-2010 PROBLEM DOS attack DESCRIPTION When a port of a device with IEEE 802.1AS enabled receives two PdelayReq messages with different...

CVE-2026-19745

简介 大家好，今年五月我在自己的路由器上发现了一些不错的漏洞，今天终于可以展示给大家了！ 本仓库中的两个漏洞都是经过身份验证的拒绝服务（Denial of Service）漏洞！ 我并不清楚这些漏洞具体是如何以及为何产生的技术细节，我们从未收到 Calix（此处的厂商）的回复，所以……耶！真有趣！ 这也是我人生中第一个和第二个 CVE，买一送一，不客气。 CVE-2026-19745 CVE-2026-19745 是一个影响我路由器的资源关闭或释放不当（Improper Resource Shutdown or Release）导致的拒绝服务漏洞 :...