CVE-2023-44487-

CVE-2023-44487- 1- Install Go. 2- Run the server on one seperate machine server.go file 3- Execute the main.go file on a separate machine. Note: main.go contains the attack code. 4. Specify the IP address of the target. 5- Define the number of requests: run main.go -requests 5000...

CVE-2026-18090

A flaw was found in gdk-pixbuf. This vulnerability allows a remote attacker to cause a heap out-of-bounds read by providing a specially crafted Apple Icon Image .icns file. The uncompress function, which handles RLE-encoded ICNS icon data, fails to validate the source buffer's boundaries during...

DEBIAN-CVE-2026-18090

A flaw was found in gdk-pixbuf. This vulnerability allows a remote attacker to cause a heap out-of-bounds read by providing a specially crafted Apple Icon Image .icns file. The uncompress function, which handles RLE-encoded ICNS icon data, fails to validate the source buffer's boundaries during...

CVE-2021-28312

CVE-2021-28312 POC and description for CVE-2021-28312 Windows NTFS Denial of Service Vulnerability Link: https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-28312 Reproduction From cmd: type following command cd c::$i30:$bitmap Remote exploitation possibility: Can be done by...

CVE-2026-86420

A flaw was found in ImageMagick. This vulnerability occurs when the software fails to correctly manage its memory budget during certain image processing operations. Repeatedly triggering these failures can lead to the exhaustion of the process's memory, causing the application to become...

CVE-2026-86425

A flaw was found in ImageMagick and PerlMagick. An attacker can exploit a heap-use-after-free vulnerability in the Layer method by providing a specially crafted list of images. This can lead to memory corruption and cause a denial of service DoS by crashing the application. Mitigation Mitigation...

CVE-2026-86423

A flaw was found in ImageMagick, specifically within the PerlMagick component's GetList method. A local attacker could exploit a heap-use-after-free vulnerability by crafting a malicious call to this method. This could lead to a system crash, resulting in a denial of service. Mitigation Mitigatio...

CVE-2026-86421

A flaw was found in ImageMagick. A remote attacker could exploit this vulnerability by providing a specially crafted MSL Magick Scripting Language image. This triggers memory allocation without proper deallocation, leading to memory exhaustion. Successful exploitation can result in a denial of...

CVE-2026-86141

A NULL pointer dereference in libxml2's xmlRegNewParserCtxt function allows a local attacker to cause a denial of service DoS. The flaw occurs when strlen is called on an unverified pointer following a failed xmlStrdup memory allocation, resulting in a process crash...

CVE-2026-86137

A flaw was found in libxml2. This out-of-bounds read vulnerability, specifically within the xmlFAParsePosCharGroup function, could allow an attacker to cause a denial of service. By processing specially crafted XML input, the affected component may attempt to read data beyond its allocated memory...

CVE-2026-81738

A flaw was found in OpenVPN when using the tap-windows6 driver. A remote attacker could exploit this vulnerability by sending specially crafted DOMAIN-SEARCH entries. This could lead to an out-of-bounds write, potentially causing information disclosure or a denial of service...

CVE-2026-18090

A heap out-of-bounds read vulnerability was identified in gdk-pixbuf , specifically in the uncompress() function that handles RLE-encoded Apple Icon Image (.icns) data. The function fails to validate the source buffer's boundaries during decompression, allowing a local attacker who supplies a cra...

CVE-2025-15614

A flaw was found in ugrep. This vulnerability, a heap buffer over-read, occurs in the LZW decompressor when processing specially crafted .Z archive files. An attacker can provide a malicious .Z file, causing the decompressor to read beyond its allocated memory. This can lead to the application...

cve-2006-6184

CVE-2006-6184 This is a python-based standalone exploit for CVE-2006-6184. This exploit triggers a stack-based buffer overflow in Allied Telesyn TFTP Server AT-TFTP 1.9, and possibly earlier, allowing remote attackers to cause a denial of service or execute arbitrary code. Instructions Updated fo...

CVE-2025-64458-Demo

CVE-2025-64458 — Django Redirect DoS on Windows Description A denial-of-service DoS issue in Django’s redirect responses allows an attacker to trigger excessive CPU work during URL normalization when constructing redirect responses. On Windows, Python’s Unicode NFKC normalization is particularly...

CVE-2026-63376

A flaw was found in toml-node, a software library used for parsing TOML Tom's Obvious, Minimal Language files in Node.js and web applications. A remote attacker could exploit a vulnerability known as prototype pollution by providing specially crafted TOML input. This could allow the attacker to...

CVE-2026-77465

A flaw was found in toml-node. A remote, unauthenticated attacker can exploit an uncontrolled recursion vulnerability in the TOML parser by crafting a malicious TOML document with deeply nested arrays or inline tables. This can lead to the exhaustion of the Node.js call stack, causing a RangeErro...

CVE-2026-85458

A flaw was found in Xpdf. This vulnerability, a divide-by-zero error, occurs when the application processes a Type 3 font glyph that has a zero height. A local attacker could exploit this condition to trigger a crash, leading to a denial of service and making the application unavailable. Mitigati...

cve-2019-14220

Summary An unprotected method in a bstutils service in BlueStacks 4.120 and below on Mac and 4.110 and below on Winodws allows a local attacker to read the contents of arbitrary files with system privileges. Description BlueStacks is an Android emulator available for Windows and Mac systems. It...

ros2_CVE-2024-28231

This repo includes a vulnerable Docker image of ros2 iron based on ubuntu 22 and a matching exploit. We exploit the vulnerability in fastrtps version 2.10.3, enabling denial of service of a remote subscriber via heap buffer overflow. Vulnerable base image Fast RTPS version 2.10.3 and dependencies...