CVE-2026-25075-check

Инструмент оценки уязвимости CVE-2026-25075 Безопасно определите, уязвим ли VPN-сервер strongSwan к CVE-2026-25075, не вызывая никаких сбоев. Полное описание см. в подробном отчёте в блоге Bishop Fox. Описание CVE-2026-25075 — это уязвимость целочисленного переполнения вниз integer underflow в...

CVE-2026-67184-Unauthenticated-NULL-Pointer-Dereference-Crashes-the-Server-TinyWeb-

보안 권고: 인증되지 않은 NULL 포인터 역참조로 서버 크래시 TinyWeb 할당된 CVE ID: CVE-2026-67184 요약 TinyWeb이 요청 라인을 파싱하지 못하면 오류를 반환하지만 요청의 URL 포인터를 NULL로 남겨둡니다. 호출자는 오류를 무시하고 요청을 응답 빌더에 전달하며, 응답 빌더는 해당 NULL 포인터를 역참조하여 워커를 크래시시킵니다. 잘못된 형식의 요청 몇 개만으로도 전체 서버가 다운되며, 복구되지 않습니다. 영향을 받는 소프트웨어 프로젝트: TinyWeb...

CVE-2026-38361

CVE-2026-38361: Множественные уязвимости типа «Отказ в обслуживании» DoS без аутентификации в dash-uploader...

CVE-2026-26235-JUNG-Smart-Visu-Server-Unauthenticated-Reboot-Shutdown

👤 Автор Mohammed Idrees Banyamer 📍 Страна: Иордания 📸 Instagram: @banyamersecurity Proof-of-Concept эксплойт для CVE-2026-26235 — Неаутентифицированный отказ в обслуживании из-за отсутствия аутентификации в JUNG Smart Visu Server ≤ 1.1.1050. 🚨 Описание уязвимости CVE-2026-26235 — это...

dlink-dir-819-dos

CVE-2022-40946 エクスプロイト: DLink コンシューマー向け DIR 819 A1 ルーターにおける未認証のサービス拒否 DoS エクスプロイト ソースコードの取得 root@kitploit: $ git clone https://github.com/whokilleddb/dlink-dir-819-dos $ cd dlink-dir-819-dos $ pip install -r requirements.txt エクスプロイトの実行 root@kitploit: $ ./exploit.py -i 192.168.0.1 + DLink DIR-819...

CVE-2026-23869-Exploit

⚡ CVE-2026-23869 — React2DoS Неаутентифицированный удалённый отказ в обслуживании через React Flight Protocol Квадратичное истощение CPU при десериализации Map в Server Components Обзор • Как это работает • Инструменты • Установка • Использование • Nuclei • Исправление • Отказ от ответственности...

EUVD-2026-63659

Mailpit: Thumbnail generation decodes unbounded image dimensions before scaling...

cve-2026-34473-unauthenticated-dos-zte-routers

CVE-2026-34473 : Déni de service non authentifié dans les routeurs ZTE affectant plus de 140 000 appareils dans le monde 17+ modèles Analyse technique de CVE-2026-34473, publiée à partir de l'ensemble de divulgation original et des artefacts d'analyse du firmware. Site en direct :...

CVE-2026-50787

CVE-2026-50787 — Неконтролируемое потребление ресурсов в e-SIC Livre Краткое описание Уязвимость, связанная с потреблением ресурсов, существует в компоненте генерации CAPTCHA в e-SIC Livre esiclivre. Уязвимая конечная точка принимает управляемые пользователем параметры, которые определяют размеры...

CVE-2026-73773

An unauthenticated Denial-of-Service DoS vulnerability exists in the API endpoint of AOS-CX. Successful exploitation of this vulnerability results in the ability to interrupt the normal operation of the affected service...

CVE-2026-73773 Unauthenticated Denial-of-Service (DoS) Vulnerability in AOS-CX

An unauthenticated Denial-of-Service DoS vulnerability exists in the API endpoint of AOS-CX. Successful exploitation of this vulnerability results in the ability to interrupt the normal operation of the affected service...

EUVD-2026-69636

An unauthenticated Denial-of-Service DoS vulnerability exists in the API endpoint of AOS-CX. Successful exploitation of this vulnerability results in the ability to interrupt the normal operation of the affected service...

CVE-2026-84364 Hono: Unbounded dot-notation nesting in `parseBody()` can cause memory exhaustion

Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.13.5, when parseBody expands dot-separated form field names into nested objects with dot-notation parsing enabled, it does not limit the nesting depth or the total number of intermediate objects...

CVE-2026-73715 Unauthenticated Denial-of-Service (DoS) Vulnerability in the API of HPE Networking Fabric Composer

A vulnerability in the API of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to conduct a denial of service attack. Successful exploitation could allow an attacker to disrupt the availability of the affected interface...

EUVD-2026-69420

gRPC-Go is the Go language implementation of gRPC. Prior to 1.83.1, internal/transport/transport.go stores each fragmented HTTP/2 DATA frame as a separate recvMsg in recvBuffer, so millions of one-byte frames can consume disproportionate heap memory even when payload bytes remain within connectio...

Unauthenticated-CVE-2020-0796-PoC

비인증 CVE-2020-0796 개념 증명 지금까지 본 모든 개념 증명Proof-of-Concept 스크립트는 사용자 이름과 비밀번호를 모두 요구했습니다. 그래서 제가 직접 PoC를 게시하기로 결정했습니다. 대단한 것은 아니지만 잘 작동합니다. 추가 모듈이 필요 없으며 Python 3에서 작동합니다. 사용법: python3 crash.py 192.168.0.2...

CVE-2026-83619

xmldom is a pure JavaScript W3C standard-based XML DOM Level 2 Core DOMParser and XMLSerializer module. From 0.7.0 until 0.8.15, the release-0.8.x parser in lib/sax.js trims captured end-tag names with the unanchored global expression / \t\n\r+$/g. For an end tag containing a long whitespace run...

CVE-2026-83619 xmldom: End-tag Whitespace-Trim Regex ReDoS — quadratic backtracking in the 0.8.x end-tag parser

xmldom is a pure JavaScript W3C standard-based XML DOM Level 2 Core DOMParser and XMLSerializer module. From 0.7.0 until 0.8.15, the release-0.8.x parser in lib/sax.js trims captured end-tag names with the unanchored global expression / \t\n\r+$/g. For an end tag containing a long whitespace run...

CVE-2026-83619 xmldom: End-tag Whitespace-Trim Regex ReDoS — quadratic backtracking in the 0.8.x end-tag parser

xmldom is a pure JavaScript W3C standard-based XML DOM Level 2 Core DOMParser and XMLSerializer module. From 0.7.0 until 0.8.15, the release-0.8.x parser in lib/sax.js trims captured end-tag names with the unanchored global expression / \t\n\r+$/g. For an end tag containing a long whitespace run...

CVE-2026-83606 xmldom PI grammar regex ReDoS: quadratic backtracking on unterminated processing instructions

xmldom is a pure JavaScript W3C standard-based XML DOM Level 2 Core DOMParser and XMLSerializer module. From 0.9.0-beta.9 until 0.9.11, the processing-instruction production in lib/grammar.js lets the greedy S+ separator and lazy Char? data group repeatedly repartition a long whitespace tail when...