CVE-2020-26258

Descrizione XStream è una libreria Java per serializzare oggetti in XML e viceversa. In XStream precedente alla versione 1.4.15, è presente una vulnerabilità di Server-Side Forgery Request che può essere attivata durante l'unmarshalling. La vulnerabilità potrebbe consentire a un attaccante remoto...

CVE-2023-44487

CVE-2023-44487 — Laboratorio di test HTTP/2 Rapid Reset Ambiente didattico per il compito 4 di LTAT.04.022. Quattro container ti permettono di scansionare e confrontare configurazioni vulnerabili e patchate. Mappa delle porte Container| Porta| Software| Stato ---|---|---|--- nginx-vuln| 8441| ngi...

cve-2023-44487-POC

cve-2023-44487 - attacco di reset rapido HTTP/2 di 7pirqte che cos'è POC per l'attacco di reset rapido HTTP/2. In pratica apri uno stream con frame HEADERS e poi invii subito RSTSTREAM per annullarlo. Il server fa tutto il lavoro di configurazione e smantellamento degli stream mentre tu ti limiti...

Linux Distros Unpatched Vulnerability : CVE-2026-33606

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Mail content stored by a user can be crafted so that it is interpreted as dsync protocol commands when an administrator later runs dsync with the stream protoco...

CVE-2026-77063 multer vulnerable to file size limit bypass via async fileFilter race condition

multer is a middleware for handling multipart/form-data in Node.js. When an application uses an asynchronous fileFilter together with the fileSize limit, a race condition in multer's file stream handling can allow a file that exceeds the configured size limit to bypass the size-limit rejection. A...

Zapscape-Fix

Zapscape-Fix — CVE-2026-64561 KVM 内核热补丁 English | 简体中文 给 CentOS Stream 8 / RHEL 8 （4.18.0 全系列内核）的 KVM 宿主机修复 CVE-2026-64561（Zapscape） 漏洞的内核热补丁 ： 不打补丁的风险 ：租户虚拟机（guest）可以仅凭自身操作逃逸到宿主机，以宿主 内核 root 权限执行代码——击穿整台物理机及其上所有虚拟机。 本项目的补丁 ：基于 Linux 上游官方修复（2abd5287f083）backport 而来， 通过内核 livepatch 机制在线生效 ： ✅ 不重启宿...

CVE-2025-10952-ml-logger-AFR

CVE-2025-10952 — Beliebiger Dateizugriff über streamhandler in ml-logger Dieses Repository stellt ein eigenständiges Python-Skript bereit — CVE-2025-10952.py — das eine nicht authentifizierte Schwachstelle für beliebigen Dateizugriff in ml-logger's streamhandler ausnutzt, verkettet mit dem...

CVE-2017-7921

Exploit CVE-2017-7921 Este script permite interagir com uma câmera vulnerável ao CVE-2017-7921 para realizar as seguintes operações: 1. Baixar e descriptografar um arquivo de configuração, contendo a senha do administrador da câmera. 2. Baixar imagens continuamente a cada segundo. 3. Converter um...

CVE-2026-11118-HTTP-2-Rapid-Reset-DDoS

CVE-2026-11118 – HTTP/2 Rapid Reset DDoS Codice del programma client + server Python/http2 root@kitploit: http2serversim.py - Simple HTTP/2 server that processes reset streams import socket, ssl, h2.connection, h2.events def handle: sock = socket.socket sock.setsockoptsocket.SOLSOCKET,...

CVE-2014-2383-LFI-to-RCE-Escalation

CVE-2014-2383 تصعيد LFI/RFI إلى RCE بيئة الاختبار: dompdf 0.6.0 - php 7.3.33 - apache 2.4.25 أثناء تقييم أمني تم اكتشاف وجود CVE-2014-2383. هذه الوثيقة هي إثبات مفهوم Proof of Concept ولا تتضمن تفاصيل الاكتشاف الأولي حفاظًا على خصوصية العميل. ومع ذلك، يحاكي المحتوى الموجود في هذه الوثيقة البيئة...

ALPINE-CVE-2026-33606

Mail content stored by a user can be crafted so that it is interpreted as dsync protocol commands when an administrator later runs dsync with the stream protocol, for example during a migration. Injected commands can modify mailbox state on the destination during migration or replication, includi...

CVE-2026-33606

Mail content stored by a user can be crafted so that it is interpreted as dsync protocol commands when an administrator later runs dsync with the stream protocol, for example during a migration. Injected commands can modify mailbox state on the destination during migration or replication, includi...

CVE_2023_44487-Rapid_Reset

CVE-2023-44487 Strumento di Test HTTP/2 Rapid Reset - Edizione Potenziata Uno strumento di test Python completo per CVE-2023-44487 , la vulnerabilità HTTP/2 Rapid Reset. Questo repository contiene sia strumenti di test dell'attacco che strumenti incentrati sulla verifica. ⚠️ DISCLAIMER IMPORTANTE...

EUVD-2026-67661

Mail content stored by a user can be crafted so that it is interpreted as dsync protocol commands when an administrator later runs dsync with the stream protocol, for example during a migration. Injected commands can modify mailbox state on the destination during migration or replication, includi...

CVE-2026-33606

Mail content stored by a user can be crafted so that it is interpreted as dsync protocol commands when an administrator later runs dsync with the stream protocol, for example during a migration. Injected commands can modify mailbox state on the destination during migration or replication, includi...

CVE-2026-33606

Mail content stored by a user can be crafted so that it is interpreted as dsync protocol commands when an administrator later runs dsync with the stream protocol, for example during a migration. Injected commands can modify mailbox state on the destination during migration or replication, includi...

CVE-2026-33606

Open-Xchange Dovecot is affected by a vulnerability in the dsync protocol's stream mode. Mail content stored by a user can be crafted so that it is interpreted as dsync protocol commands when an administrator later runs dsync with the stream protocol, for example during a migration or replication...

CVE-2026-75142

A flaw was found in FFmpeg. A stack buffer overflow exists in the MPEG-PS muxer. A local attacker or a user processing a specially crafted file with an excessive number of streams could trigger this flaw, leading to a buffer overflow. This could potentially result in denial of service or arbitrar...

CVE-2026-64833

A flaw was found in FFmpeg, specifically within the S/PDIF muxer. A remote attacker can exploit an out-of-bounds read vulnerability by providing a specially crafted DTS-HD audio stream during S/PDIF re-muxing. This allows the attacker to read memory beyond the intended buffer boundaries,...

CVE-2026-80716

In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: wake linked drain waiters on unlink sndpcmdrain on a linked stream parks an on-stack wait entry on the drained peer's runtime-sleep, and after scheduletimeout removes it only if that peer is still found in the caller's...