CVE-2022-23884

CVE-2022-23884 Hay vulnerabilidades en la capa de red en el servidor oficial de Minecraft: Bedrock Edition también conocido como Bedrock Server, que permiten a un atacante lanzar un ataque DoS. CVE-2022-23884 El servidor dedicado de Bedrock de Mojang 1.16.0-1.18.12 se ve afectado por un bucle...

CVE-2019-1064

CVE-2019-1064 - AppXSVC 本地权限提升 https://www.rythmstick.net/posts/cve-2019-1064/...

CVE-2026-0897

CVE-2026-0897 — Google Keras: Denegación de Servicio mediante Bomba de Forma HDF5 en la Carga de Pesos -orange?style=for-the-badge -brightgreen?style=for-the-badge Resumen...

cve-2023-44487-demo

⚡ Demo de CVE-2023-44487 – Ataque de Restablecimiento Rápido HTTP/2 Este proyecto demuestra la vulnerabilidad HTTP/2 "Restablecimiento Rápido" CVE-2023-44487 que permite a los atacantes abrumar servidores utilizando tramas RSTSTREAM, causando denegación de servicio DoS. Incluye: ✅ Prueba de explo...

CVE-2018-3245

CVE-2018-3245 第一步 java -jar ysoserial-cve-2018-3245.jar root@kitploit: 用法: java -jar ysoserial-cve-2018-3245.jar payload 'command' 可用的payload类型: Payload 作者 依赖项 ------- ------- ------------ CVE201828931 @mbechler CVE201828932 @mbechler CVE201828933 @mbechler CVE20183245 @mbechler JRMPClient...

iOS-Kernel-Crash

CVE-2018-4407 Corrupción de memoria La vulnerabilidad es un desbordamiento de búfer en el montículo en el código de red del kernel del sistema operativo XNU. XNU es utilizado tanto por iOS como por macOS, por lo que los iPhones, iPads y Macbooks están todos afectados. Mi PoC del exploit simplemen...

bigdecimal-segfault-fix

h1. BigDecimal 段错误修复 Ruby 的 big decimal 库中存在一个段错误缺陷，当用户提供已知的恶意值时可能被触发。如果您想测试应用程序是否安全，请运行 +example.rb+。该脚本应正常退出，不会发生段错误。 该变通方法存在负面副作用。具体来说，它会阻止您使用 BigDecimal 处理大数（超过 255 位数字）或使用科学计数法提供数字（例如，"5E6" 表示 5000000）。如果您需要这些功能，则必须升级到打过补丁的 Ruby。 强烈建议您按照 "Ruby...

CVE-2020-16898

CVE-2020-16898 PoC Bad Neighbor BSOD DoS exploit ¡Úselo bajo su propio riesgo! Uso: CVE-2020-16898.exe "IP de destino aquí"...

CVE-2020-27223

CVE-2020-27223 使用方法 root@kitploit: $ mvn spring-boot:run 9.4.36.v20210114 root@kitploit: $ ./poc/cve-2020-27223-poc1.sh "timens":"58,557","acceptlanguage":"aab" real 0m0.093s 🐇 user 0m0.006s sys 0m0.007s "timens":"18,461,763,438","acceptlanguage":"ahn" real 0m35.339s 🐢 user 0m0.006s sys 0m0.006s...

PoC-Exploit-CVE-2024-20467

Cisco IOS XE CVE-2024-20467 漏洞利用 概述 该漏洞利用针对 Cisco IOS XE Software 中 IPv4 分片重组代码中的漏洞。该漏洞允许未认证的远程攻击者在受影响设备上引发拒绝服务 DoS 状态。 受影响设备 路由器：Cisco ASR 1000 系列 型号：Cisco cBR-8 软件版本：Cisco IOS XE Software 版本 17.12.1 和 17.12.1a 漏洞详情 类型：拒绝服务 DoS 原因：分片重组过程中资源管理不当。 攻击向量...

CVE-2022-40363

CVE-2022-40363 Un desbordamiento de búfer en el componente nfcdeviceloadmifareuldata de Flipper Devices Inc., Flipper Zero anterior a v0.65.2 permite a los atacantes causar una Denegación de Servicio DoS mediante un archivo NFC manipulado. autenticación| complejidad| vector ---|---|--- no...

EUVD-2026-76747

An application programming interface endpoint accepts a user-supplied value and interpolates it directly into the path of a backend request to the underlying search and analytics data store, without restricting its contents. This allows an authenticated attacker to substitute an arbitrary backend...

CVE-2026-89664

A flaw was found in the Linux kernel's Network File System Daemon nfsd. When processing malformed NFSv4 OPEN compound operations that include valid Portable Operating System Interface POSIX Access Control List ACL attributes, the kernel fails to release allocated memory resources. This oversight...

CVE-2026-89749

A flaw was found in the Linux kernel. Specifically, within the tracing subsystem, the eventteststuff function can pass an invalid error pointer to kthreadstop if kthreadrun fails to create a kernel thread. This improper handling of error pointers, particularly under memory pressure, leads to...

CVE-2026-89646

A flaw was found in the Ceph filesystem component of the Linux kernel. When a writeback operation is aborted during an unmount process, a reference to an inode a data structure describing a filesystem object is not properly released. This prevents the inode from being evicted, potentially leading...

CVE-2026-89500

A flaw was found in the Linux kernel's ring-buffer component. When a cached reader page is discarded after a concurrent ring buffer resize, the system may use an incorrect buffer size for memory deallocation. This mismatch can lead to a kernel crash, resulting in a Denial of Service DoS, or it...

CVE-2026-89496

A flaw was found in ocfs2, the Oracle Cluster File System, within the Linux kernel. A local user could exploit this vulnerability by performing a copyfilerange operation within the same filesystem. This can lead to a memory leak, potentially causing resource exhaustion and a Denial of Service DoS...

CVE-2026-80954

A flaw was found in the Linux kernel's i3c driver. The i3cdevicegetsupportedxfermode function attempts to access a device descriptor without holding the necessary lock. This unlocked dereference can lead to memory corruption, potentially causing system instability or a denial of service...

CVE-2026-89668

A flaw was found in the nfsd component of the Linux kernel. The nfsddebugfsinit function is called before nfsd4initslabs. If the slab allocation fails, the nfsddebugfsexit cleanup function is bypassed, leaving orphaned debugfs files with stale function pointers. This can lead to a use-after-free...

CVE-2018-16706

CVE-2018-16706 O cómo apago mi TV $ nmap 192.168.1.55 -p 9080 PORT STATE SERVICE 9080/tcp open glrpc Nmap done: 1 IP address 1 host up scanned in 0.05 seconds Detalles del CVE https://www.cvedetails.com/cve/CVE-2018-16706/...