CVE-2026-76000

Adobe ColdFusion is affected by an Uncontrolled Resource Consumption vulnerability (CWE-400) that can lead to an application denial-of-service . An attacker on an adjacent network can exploit this without user interaction or prior authentication, exhausting system resources to bring down the appl...

EUVD-2026-74071

ColdFusion is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition. Exploitation of this issue does not...

CVE-2022-30780-lighttpd-denial-of-service

CVE-2022-30780 - lighttpd remote denial of service CVE-2022-30780 - lighttpd remote denial of service Summary An unauthenticated attacker can send an HTTP request with an URL overflowing the maximum URL length, resulting in a denial of service. Vulnerable versions The following versions of lightt...

internet-of-vulnerable-things

Internet of Vulnerable Things The results of my small term paper on the topic of the Internet of Vulnerable Things. Abstract This paper provides a practical demonstration of how insecure the Internet of Things is by hacking a typical IoT device. Several vulnerabilities were identified in the...

CVE-2026-55256

In parsePartHeaders of multiple files, there is a possible persistent denial of service due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28633

In initForUserNoTracing of VoiceInteractionManagerService.java, there is a possible persistent denial of service due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28596

In parseInterventionFromXml of GameManagerService.java, there is a possible permanent denial of service due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2017-0781

CVE-2017-0781 PoC Overview This is an implementation of the CVE-2017-0781 Android heap overflow vulnerability described in the Blueborne whitepaper released by Armis. Further reading: https://www.armis.com/blueborne/ In the current state, this code only demonstrates the overflow and the ability o...

Microsoft and Adobe Patch Tuesday, September 2026 Security Update Review

Microsoft kicks off September with its monthly Patch Tuesday release, delivering fixes for security vulnerabilities affecting its products. The security updates are packed with security fixes, providing organizations with important updates to help protect their environments from emerging threats...

CVE-2025-31650

Apache Tomcat 10.1.39 - Denial of Service DoS This tool performs a high-volume, asynchronous HTTP/2 request flood using malformed priority headers to test the stability of Apache Tomcat servers running version 10.1.10 to 10.1.39. ⚠️ This is strictly for educational and research purposes only. ❌ Th...

CVE-2020-1938

Declaración：所有网络安全工具的使用必须遵守国家法律法规、行业规范及目标系统的相关规定，不得用于任何非法或侵犯他人合法权益的用途。‌ 使用者应认识到，任何工具均无法保证绝对安全，不当使用可能导致法律风险、技术反制或数据污染。使用者需自行承担因违反本声明及相关规定而产生的全部责任。 Requisito：python3 Ejecución： python CVE-2020-1938.py your-ip -p 8009 -f WEB-INF/web.xml...

Goahead-CVE-2017-17562

Goahead-CVE-2017-17562...

CVE-2025-14018

CVE-2025-14018: NetBT e-Fatura Privilege Escalation Vulnerability 📋 Información General Parámetro| Valor ---|--- CVE ID| CVE-2025-14018 Tipo de Vulnerabilidad| Escalada de Privilegios Local Unquoted Service Path CWE| CWE-428 Producto Afectado| NetBT e-Fatura Versiones Vulnerables| 1.2.15 Autor de...

Vulnerabilities in Microsoft Exchange servers

Microsoft has identified 9 vulnerabilities in Exchange Server. A malicious individual can exploit these vulnerabilities to carry out Denial-of-Service attacks, impersonate other users, gain elevated privileges, execute arbitrary code, and/or access sensitive data. The most severe vulnerability,...

EUVD-2026-73941

Integer underflow wrap or wraparound in Skype for Business allows an unauthorized attacker to deny service over a network...

CVE-2026-66307

An integer underflow (wrap/wraparound) vulnerability in Skype for Business Server allows an unauthorized, network-based attacker to cause a denial of service (CVSS 3.1: 7.5 HIGH , high availability impact). The affected products are Skype for Business Server Subscription Edition , Server 2019 , a...

CVE-2026-66303

CVE-2026-66303 is a null pointer dereference in Skype for Business that allows an authorized attacker (low privileges required) to cause a denial of service over the network. The affected products are Skype for Business Server Subscription Edition , Skype for Business Server 2019 , and Skype for ...

EUVD-2026-73940

Null pointer dereference in Skype for Business allows an authorized attacker to deny service over a network...

CVE-2022-21894-Payload-New

This is a simple example payload for CVE-2022-21894 that demonstrates how an attacker could map a second stage payload in order to be able to call EFI services. A writeup of this vulnerability can be viewed here: https://github.com/Wack0/CVE-2022-21894. The code in this repository extends the PoC...

CVE-2020-9047

Usage/Help Menu root@kitploit: usage: CVE-2020-9047.py -h -p RPORT -s LPORT --command -d WEBDIR -U USERNAME -P PASSWORD WINDOWS,LINUX,CHECK RHOST LHOST PAYLOAD Exploit for exacqVision Web Service as outlined in CVE-2020-9047. This program targets Windows and Linux x86 installations of exacqVision...