cve-2023-44487-POC

cve-2023-44487 - ataque de reinicio rápido http/2 por 7pirqte qué es esto poc para el ataque de reinicio rápido http/2. básicamente abres un stream con un frame HEADERS y luego envías inmediatamente RSTSTREAM para cancelarlo. el servidor hace todo el trabajo de configurar y desmontar streams...

expat_CVE-2024-28757

Expat, Versión 2.2.6 Esto es Expat, una biblioteca en C para analizar XML, iniciada por James Clark en 1997. Expat es un analizador XML orientado a flujo. Esto significa que registras manejadores con el analizador antes de comenzar el análisis. Estos manejadores son llamados cuando el analizador...

DEBIAN-CVE-2026-96280

The OCI delta stream parser read sizes as guint64 but passed them to GLib I/O and allocation functions expecting gsize 32 bits on 32-bit systems, causing undersized allocations while subsequent operations use the original 64-bit size, leading to heap buffer overflows. An attacker controlling an O...

CVE-2026-96280

The OCI delta stream parser read sizes as guint64 but passed them to GLib I/O and allocation functions expecting gsize 32 bits on 32-bit systems, causing undersized allocations while subsequent operations use the original 64-bit size, leading to heap buffer overflows. An attacker controlling an O...

CVE-2026-96280

The OCI delta stream parser read sizes as guint64 but passed them to GLib I/O and allocation functions expecting gsize 32 bits on 32-bit systems, causing undersized allocations while subsequent operations use the original 64-bit size, leading to heap buffer overflows. An attacker controlling an O...

CVE-2026-96280 Flatpak: flatpak: buffer overflow in oci delta stream path names on 32-bit systems

The OCI delta stream parser read sizes as guint64 but passed them to GLib I/O and allocation functions expecting gsize 32 bits on 32-bit systems, causing undersized allocations while subsequent operations use the original 64-bit size, leading to heap buffer overflows. An attacker controlling an O...

CVE-2026-96280

The Flatpak OCI delta stream parser contains a vulnerability where it reads sizes as guint64 but passes them to GLib I/O and allocation functions expecting gsize (32 bits on 32-bit systems). This discrepancy results in undersized allocations while subsequent operations use the original 64-bit siz...

EUVD-2026-88015

The OCI delta stream parser read sizes as guint64 but passed them to GLib I/O and allocation functions expecting gsize 32 bits on 32-bit systems, causing undersized allocations while subsequent operations use the original 64-bit size, leading to heap buffer overflows. An attacker controlling an O...

apache__flink_CVE-2020-17519_1-11-2

Apache Flink Apache Flink es un marco de procesamiento de flujos stream processing de código abierto con potentes capacidades de procesamiento por flujos y por lotes. Aprende más sobre Flink en https://flink.apache.org/ Características Un runtime centrado en el streaming que admite tanto programa...

CVE-2026-100662

A flaw was found in Netty's HTTP/3 codec. A remote, unauthenticated attacker can cause a Denial of Service DoS by establishing an HTTP/3 connection and sending stream instructions that declare excessively large field lengths without delivering the complete data. Because the server does not enforc...

external_expact_AOSP10_r33_CVE-2022-25314

Expat, Versión 2.2.6 Esto es Expat, una biblioteca C para analizar XML, iniciada por James Clark en 1997. Expat es un analizador XML orientado a flujos. Esto significa que registra manejadores con el analizador antes de iniciar el análisis. Estos manejadores se invocan cuando el analizador descub...

CVE-2021-21402

CVE-2021-21402 CVE-2021-21402 Script de Wker para la lectura arbitraria de archivos en Jellyfin, admite ejecución por lotes. La lógica es muy sencilla: mediante una petición GET comprueba si existe win.ini: define payload = /Audio/1/hls/..%5C..%5C..%5C..%5C..%5C..%5CWindows%5Cwin.ini/stream.mp3/...

CVE-2026-96280: Numeric Truncation Error

The OCI delta stream parser read sizes as guint64 but passed them to GLib I/O and allocation functions expecting gsize 32 bits on 32-bit systems, causing undersized allocations while subsequent operations use the original 64-bit size, leading to heap buffer overflows. An attacker controlling an O...

PoC-CVE-2025-8671-MadeYouReset-HTTP-2

PoC-CVE-2025-8671-MadeYouReset-HTTP-2 PoC para validar vulnerabilidad MadeYouReset Este repositorio contiene una PoC controlada desarrollada para validar si una infraestructura es potencialmente vulnerable a la CVE-2025-8671 MadeYouReset. El código no es un exploit completo y no realiza DoS real ...

CVE-2026-25643-Frigate-RCE

CVE-2026-25643: Frigate NVR = 0.16.3 Authenticated RCE Exploit Title: Frigate NVR = 0.16.3 - Authenticated Remote Code Execution Date: 2026-02-05 Exploit Author: jduardo2704 Vendor Homepage: https://frigate.video/ Software Link: https://github.com/blakeblackshear/frigate Version: = 0.16.3 CVE:...

CVE-2026-100662 Netty HTTP/3 QPACK encoder-stream unbounded memory exhaustion DoS

Netty's HTTP/3 codec io.netty:netty-codec-http3 versions 4.2.0.Final through 4.2.17.Final contain an uncontrolled resource consumption vulnerability in the QPACK encoder-stream instruction decoder QpackEncoderHandler, installed on the peer-initiated unidirectional QPACK encoder stream, type 0x02...

CVE-2026-100662 Netty HTTP/3 QPACK encoder-stream unbounded memory exhaustion DoS

Netty's HTTP/3 codec io.netty:netty-codec-http3 versions 4.2.0.Final through 4.2.17.Final contain an uncontrolled resource consumption vulnerability in the QPACK encoder-stream instruction decoder QpackEncoderHandler, installed on the peer-initiated unidirectional QPACK encoder stream, type 0x02...

CVE-2020-26258

Descripción XStream es una biblioteca Java para serializar objetos a XML y viceversa. En XStream anterior a la versión 1.4.15, una vulnerabilidad de Server-Side Forgery Request puede activarse al deserializar. La vulnerabilidad puede permitir a un atacante remoto solicitar datos de recursos...

zeroturnaround__zt-zip_CVE-2018-1002201_1-12

ZIP - métodos de conveniencia Integración continua Descripción general rápida El proyecto fue iniciado y codificado por Rein Raudjärv cuando necesitaba procesar un gran conjunto de archivos ZIP grandes para los componentes internos de LiveRebel. Poco después empezamos a utilizar la utilidad en...

CVE-2026-92842

A flaw was found in PHP. When processing certain conversion stream filters with line-break settings containing a null byte, the filter duplicates the string but retains the original length rather than the truncated size. An attacker who can influence filter options could exploit this out-of-bound...