CVE-2021-42392-exploit-lab

⚠️ H2 Database RCE エクスプロイト PoC CVE-2021-42392 このリポジトリは、CREATE ALIAS 機能を使用して H2 Database のリモートコード実行脆弱性 CVE-2021-42392 をテストするための、最小限かつ制御された環境を提供します。多くのデモとは異なり、このエクスプロイトは H2 Web コンソールに依存せず、H2 TCP サービス（通常ポート 9092）を直接ターゲットにします。 🛑 教育およびテスト目的のみに使用してください。自分が所有していない、または明示的な許可を得ていないシステムで使用しないでください。 説明...

CVE-2018-19629

CVE-2018-19629 测试环境 用于 CVE-2018-19629（Hyland Perceptive Content Server 拒绝服务）的 Docker 测试环境。 漏洞详情 字段| 值 ---|--- CVE ID| CVE-2018-19629 严重性| 高（DoS） 受影响版本| Hyland Perceptive Content Server 7.1.5 已修复版本| 7.1.5 描述 Hyland Perceptive Content Server 7.1.5 之前版本存在拒绝服务漏洞，可通过 TCP 连接使 ImageNow Server...

pingtunnel master-d7cd0d6ab5f18e7d8d050385e8d240b3b2f41e6c

Pingtunnel Pingtunnel is a tool that sends TCP/UDP traffic over ICMP. Note: This tool is only to be used for study and research, do not use it for illegal purposes Usage & Detailed Documentation 📖 For detailed documentation, seeUSAGE.md: includes complete command-line parameters, configuration fi...

CVE-2022-36234

CVE-2022-36234 描述 SimpleNetwork TCP Server 的 commit 29bc615f0d9910eb2f59aa8dff1f54f0e3af4496 被发现包含一个双重释放漏洞，可通过精心构造的 TCP 数据包加以利用。触发该双重释放漏洞可使客户端远程崩溃任何 SimpleNetwork TCP 服务器。在其他情况下，双重释放漏洞可能导致未定义行为，并在适当条件下可能执行代码。 复现 为确保你拥有编译该库所需的标准构建工具，请安装以下软件包（在大多数系统上这些工具通常已安装）： root@kitploit: sudo apt-get install...

ReverseSock5Proxy

反向 TCP Sock5 代理 一个微型反向 Sock5 代理 服务端 服务端 GUI 使用 ImGui 构建 :V 你可以从 Releases 下载预构建版本。 构建 你需要 gcc 12+ 版本 Windows 推荐版本 Conan 包管理器 然后根据你的需求，运行 scripts 文件夹中的任意脚本 :V 客户端/代理端 构建 root@kitploit: gcc main.c -lws232 -O2 -s -o Sock5Agent 待办事项 重构代码以支持多操作系统 完成服务端代码 我不知道 资源 https://www.rfc-editor.org/rfc/rfc1928...

CVE-2024-38063_PoC

Warning: This vulnerability's remote code execution exploit is potentially volatile! 🚀 Windows TCP/IP Remote Code Execution Vulnerability CVE-2024-38063 Packet Sender 🎭 Are you ready to unleash chaos in a controlled environment? Look no further! This program is your ticket to sending custom-craft...

CyberSecurity-Pentest-Lab

Distcc 3.2.1 — 远程代码执行 CVE-2004-2687 渗透测试实验室：针对隔离实验室环境中的 Metasploitable 2（Kali Linux 作为攻击方），对 Distcc 3.2.1 中一个未认证 RCE 漏洞进行识别、利用与修复。 学术/教育练习。所有 IP 均为实验室私有地址（RFC1918）。 摘要 | ---|--- 目标| Metasploitable 2 Linux 实验室 IP| 192.168.91.129 服务| Distcc 3.2.1 端口| 3632/TCP CVE| CVE-2004-2687 结果| 确认未认证 RCE，获得 roo...

Linux Distros Unpatched Vulnerability : CVE-2026-89482

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nvme-tcp: do not accept C2HData based on blkrqpayloadbytes alone Commit 25e5cb780e62 nvme-tcp: fix possible crash in writezeroes processing established that...

Linux Distros Unpatched Vulnerability : CVE-2026-89481

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nvme-tcp: fix host memory disclosure on R2T for a read command nvmetcphandler2t does not check the direction of the request the R2T refers to. A malicious...

Linux Distros Unpatched Vulnerability : CVE-2026-89480

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nvme-tcp: reject a read that transferred too few bytes nvmetcprecvdata completes a request once the current C2HData PDU has been consumed. Nothing compares the...

modbus-scanner

Modbus 检测扫描器 一个使用 libmodbus 的多线程 C 语言扫描器，用于检测 Modbus/TCP 服务。 该扫描器不仅仅依赖 TCP 端口 502 是否开放。相反，它会建立 Modbus/TCP 连接并发送应用层 Modbus 请求。有效的 Modbus 响应被用作判断 Modbus 服务存在的主要指标。 Modbus/TCP Modbus 是一种工业通信协议，通常被 PLC、RTU、HMI、SCADA 系统、传感器、仪表以及其他工业设备所使用。 Modbus/TCP 通过 TCP 传输 Modbus 应用协议。 标准的 Modbus/TCP 端口是：...

CVE-2026-89481

A flaw was found in the Linux kernel's NVMe Non-Volatile Memory Express over TCP nvme-tcp component. A malicious NVMe controller can exploit this vulnerability by sending a Ready to Transfer R2T command for a read request. The host system, failing to properly validate the request direction, will...

CVE-2026-89482

A flaw was found in the nvme-tcp module of the Linux kernel. This vulnerability arises from improper handling of C2HData for REQOPWRITEZEROES commands, where the system fails to adequately validate the data length. A remote attacker could exploit this by sending specially crafted C2HData, leading...

CVE-2026-89480

A flaw was found in the NVMe-TCP implementation of the Linux kernel. This vulnerability occurs when the system completes a data read request even if the connected controller transfers fewer bytes than expected. As a result, the user application receives a mix of legitimate and stale data,...

CVE-2026-80788

A flaw was found in the Linux kernel's nvmet-tcp component. A remote attacker can send a specially crafted command with an oversized Scatter-Gather List SGL allocation. This can lead to an excessive memory allocation, triggering a kernel warning. On systems configured to panic on warnings, this...

AZL-100577 CVE-2026-89480 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: nvme-tcp: reject a read that transferred too few bytes nvmetcprecvdata completes a request once the current C2HData PDU has been consumed. Nothing compares the total bytes received against the length the command asked for: struct...

CVE-2026-89482

In the Linux kernel, the following vulnerability has been resolved: nvme-tcp: do not accept C2HData based on blkrqpayloadbytes alone Commit 25e5cb780e62 "nvme-tcp: fix possible crash in writezeroes processing" established that blkrqpayloadbytes must not be read without first checking...

CVE-2026-89480

In the Linux kernel, the following vulnerability has been resolved: nvme-tcp: reject a read that transferred too few bytes nvmetcprecvdata completes a request once the current C2HData PDU has been consumed. Nothing compares the total bytes received against the length the command asked for: struct...

DEBIAN-CVE-2026-89482

In the Linux kernel, the following vulnerability has been resolved: nvme-tcp: do not accept C2HData based on blkrqpayloadbytes alone Commit 25e5cb780e62 "nvme-tcp: fix possible crash in writezeroes processing" established that blkrqpayloadbytes must not be read without first checking...

AZL-100148 CVE-2026-89482 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: nvme-tcp: do not accept C2HData based on blkrqpayloadbytes alone Commit 25e5cb780e62 "nvme-tcp: fix possible crash in writezeroes processing" established that blkrqpayloadbytes must not be read without first checking...