490 matches found
CVE-2022-29885
CVE-2022-29885 The tool is only used for security research. It is prohibited to use the tool to launch illegal attacks, and the user is responsible for the consequences 工具仅用于安全研究以及内部自查，禁止使用工具发起非法攻击，造成的后果使用者负责 Introduce Apache Tomcat DoS CVE-2022-29885 Exploit Denial of Service in EncryptIntercept...
CVE-2022-29885
CVE-2022-29885 by 1vere$k Apache Tomcat DoS CVE-2022-29885 Exploit. Denial of Service in EncryptInterceptor Tomcat Cluster. The target machine needs to start the Cluster Nio Receiver. Sending a special TCP packet will cause a Denial of Service to the target. Whether EncryptInterceptor is used or...
AppleDOS
AppleDOS CVE-2018-4407 Basado en CVE-2018-4407 https://lgtm.com/blog/applexnuicmperrorCVE-2018-4407, este tweet y este video. El error es una vulnerabilidad de desbordamiento de montón en el manejo de paquetes maliciosos cuando el sistema operativo intenta enviar un mensaje ICMP que contiene...
CVE-2018-4407
CVE-2018-4407 CVE-2018-4407 es una vulnerabilidad de desbordamiento de búfer en el código de error ICMP del kernel XNU. Provoca que los dispositivos IOS se bloqueen tanto laptops como móviles al recibir un ¡sí, 1! solo paquete malo. El bug fue divulgado originalmente por Kevin Backhouse en su...
toxy
toxy Not actively maintained, may not work with latest node.js runtimes. If you are interested in maintaining toxy, please open an issue...
CVE-2020-1350-Fix
KB4569509: Guidance for DNS Server Vulnerability CVE-2020-1350 Introduction On July 14, 2020, Microsoft released a security update for the issue that is described in CVE-2020-1350 | Windows DNS Server Remote Code Execution Vulnerability. This advisory describes a Critical Remote Code Execution RC...
CVE-2020-1350
CVE-2020-1350 SigRED Mitigación para reducir el impacto de la vulnerabilidad reduciendo el límite máximo de tamaño de paquetes TCP de recepción en el servidor DNS y reiniciando el servicio DNS...
CVE-2026-60094
Vinchin Backup & Recovery through 9.0.0.86562 contains a heap buffer overflow vulnerability that allows unauthenticated remote attackers to cause process crash or memory corruption by sending a malformed TCP packet with an unchecked bodylen field to the agentlinkserver service. Attackers can craf...
CVE-2026-40434
Anviz CrossChex Standard lacks source verification in the client/server channel, enabling TCP packet injection by an attacker on the same network to alter or disrupt application traffic...
CVE-2026-40434
Anviz CrossChex Standard lacks source verification in the client/server channel, enabling TCP packet injection by an attacker on the same network to alter or disrupt application traffic...
CVE-2026-40434 Anviz CrossChex Standard Improper Verification of Source of a Communication Channel
Anviz CrossChex Standard lacks source verification in the client/server channel, enabling TCP packet injection by an attacker on the same network to alter or disrupt application traffic...
Linux Distros Unpatched Vulnerability : CVE-2026-39863
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Kamailio is an open source implementation of a SIP Signaling Server. Prior to 6.1.1, 6.0.6, and 5.8.8, an out-of-bounds access in the core of Kamailio formerly...
CVE-2001-1549
Tiny Personal Firewall 1.0 and 2.0 allows local users to bypass filtering via non-standard TCP packets created with non-Windows protocol adapters...
CVE-2020-7800
The Synergy Systems & Solutions SSS HUSKY RTU 6049-E70, with firmware Versions 5.0 and prior, has an Improper Check for Unusual or Exceptional Conditions CWE-754 vulnerability. The affected product is vulnerable to specially crafted TCP packets, which can cause the device to shut down or reboot a...
CVE-2024-41196
An issue in Ocuco Innovation - REPORTSERVER.EXE v2.10.24.13 allows attackers to bypass authentication and escalate privileges to Administrator via a crafted TCP packet...
CVE-2024-41197
An issue in Ocuco Innovation - INVCLIENT.EXE v2.10.24.5 allows attackers to bypass authentication and escalate privileges to Administrator via a crafted TCP packet...
CVE-2024-41195
An issue in Ocuco Innovation - INNOVASERVICEINTF.EXE v2.10.24.17 allows attackers to bypass authentication and escalate privileges to Administrator via a crafted TCP packet...
EUVD-2020-24845
Malware in sbrugna...