CVE-2023-44487

HTTP2 Rapid Reset Attack: CVE-2023-44487 Quick exploit to test out rapid reset attack CVE-2023-44487. Note: For education purpose only 利用程序 快速利用程序，用于测试快速重置攻击（CVE-2023-44487）。注意：仅供教育目的。 目录 安装 使用 安装 使用Git将仓库克隆到本地计算机，安装Poetry，然后运行程序： root@kitploit: git clone...

CVE-2025-8088-Exploit

CVE-2025-8088 WinRAR Exploit 🔓 A proof-of-concept exploit for WinRAR vulnerability CVE-2025-8088 affecting versions 7.12 and lower. This tool creates a malicious RAR archive that embeds payloads in Alternate Data Streams ADS with path traversal, potentially leading to arbitrary code execution. Th...

CVE-2026-93488

CVE-2026-93488 affects Netty's SpdySessionHandler in the io.netty/netty-codec-http component. The handler's localConcurrentStreams field defaults to Integer.MAX_VALUE with no public API to modify it, allowing a remote peer to open a SPDY connection and send a large number of SYN_STREAM frames wit...

CVE-2026-93488 Io.netty/netty-codec-http: netty: denial of service via unbounded concurrent spdy streams

A flaw was found in Netty. SpdySessionHandler accepts an unlimited number of concurrent remote-initiated streams because localConcurrentStreams defaults to Integer.MAXVALUE and the handler provides no API to change it. A remote peer can open a SPDY connection and send a large number of SYNSTREAM...

CVE-2026-92027

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the DOM: Streams component...

winrar-exploit

描述 这是我对 CVE-2025-8088 Winrar 漏洞的实现。它利用备用数据流（ADS）以及压缩包内的路径修补技术。当受害者解压被感染的压缩包时，被修补的 ADS 载荷（例如，可执行文件、PowerShell 脚本或某个有趣的 png）会被重定向到目标路径（通常是启动文件夹）。在下次系统启动时，由于载荷位于启动文件夹中，它会被自动执行。 缺点 你需要知道受害者的 Windows 用户名，才能访问其启动文件夹。这通常很容易获取，所以不算大问题。 Winrar 已在最新版本中修补了此漏洞，因此该漏洞仅在接下来的 5-6 个月内有效。（大多数人已经多年未更新） 仓库 需要 zlib 支...

CVE-2025-8088-WinRAR-builder

CVE-2025-8088-WinRAR-builder 针对 WinRAR 漏洞（CVE-2025-8088）的 POC 利用工具，影响版本为 7.12 及更低版本 🚀 工作原理 1. 创建一个嵌入其他载荷的 Rar 文件 2. 使用多个 ADS 流 🔄 - 以不同的路径遍历深度附加载荷流 3. 操纵 RAR 头 ⚙️ - 修改归档结构以利用路径遍历漏洞 4. 将载荷投放至启动目录 📂 - 解压时尝试将载荷写入 Windows 启动文件夹 🛠️ 使用方法 1. 克隆仓库 root@kitploit: git clone...

CVE-2026-92027

Use-after-free in the DOM: Streams component. This vulnerability was f...

UBUNTU-CVE-2026-92027

Use-after-free in the DOM: Streams component. This vulnerability was f...

CVE-2026-69203

Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, An Ember server with HTTP/2 enabled through withHttp2 does not enforce SETTINGSMAXCONCURRENTSTREAMS for peer-created streams. One unauthenticated connection can open an unbounded number of streams, each retaining...

EUVD-2026-79194

Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, An Ember server with HTTP/2 enabled through withHttp2 does not enforce SETTINGSMAXCONCURRENTSTREAMS for peer-created streams. One unauthenticated connection can open an unbounded number of streams, each retaining...

CVE-2026-69203 Http4s Ember HTTP/2: does not enforce SETTINGS_MAX_CONCURRENT_STREAMS

Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, An Ember server with HTTP/2 enabled through withHttp2 does not enforce SETTINGSMAXCONCURRENTSTREAMS for peer-created streams. One unauthenticated connection can open an unbounded number of streams, each retaining...

CVE-2026-69203

Http4s is a Scala HTTP service library. Prior to versions 0.23.35 and 1.0.0-M47 , its Ember server with HTTP/2 enabled via withHttp2 does not enforce SETTINGS_MAX_CONCURRENT_STREAMS for peer-created streams. A single unauthenticated connection can open an unbounded number of streams, each retaini...

CVE-2026-69203 Http4s Ember HTTP/2: does not enforce SETTINGS_MAX_CONCURRENT_STREAMS

Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, An Ember server with HTTP/2 enabled through withHttp2 does not enforce SETTINGSMAXCONCURRENTSTREAMS for peer-created streams. One unauthenticated connection can open an unbounded number of streams, each retaining...

DEBIAN-CVE-2026-92027

Use-after-free in the DOM: Streams component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3...

CVE-2026-92027

Use-after-free in the DOM: Streams component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3...

CVE-2026-92027 Use-after-free in the DOM: Streams component

Use-after-free in the DOM: Streams component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3...

CVE-2026-92027

CVE-2026-92027 is a use-after-free vulnerability in the DOM: Streams component of Mozilla Firefox and Thunderbird. It was fixed in Firefox 156 , Firefox ESR 115.41 , Firefox ESR 140.16 , Firefox ESR 153.3 , Thunderbird 156 , Thunderbird 140.16 , and Thunderbird 153.3 . CISA's SSVC assessment rate...

CVE-2026-92027 Use-after-free in the DOM: Streams component

Use-after-free in the DOM: Streams component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3...

EUVD-2026-78490

Use-after-free in the DOM: Streams component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 140.16...