141 matches found
CVE-2026-3304
CVE-2026-3304 实验环境 仅供教育和研究目的。未经授权攻击系统是违法的。 本实验环境基于对 Multer 2.1.0 补丁及其官方测试代码的分析而构建。 易受攻击的服务器复现了补丁测试中描述的精确条件， 而已修补的服务器运行 Multer 2.1.0 以确认修复有效。 漏洞概述 字段| 详情 ---|--- CVE| CVE-2026-3304 目标| Multer ，开始写入数据 3. 收到第 2 部分头部（缺少 name 属性） → Multer 检测到 'name 缺失' → errorOccured = true ← 设置错误标志 → 调用...
Use After Free
Overview Affected versions of this package are vulnerable to Use After Free via the model quantization engine. An attacker can access and extract sensitive data from the server's heap memory by sending unauthenticated remote requests. Remediation There is no fixed version for...
programming-for-penetration-testing-buffer-overflow-exploit
Buffer Overflow Exploit in Ruby Overview This project was...
mcp-stdio-exploit
MCP STDIO Exploit: A Local Reimplementation Vulnerability...
GuvenliWebYazilimiGelistirme-CipherNone-
🛡️ CipherNone: JWT "alg: none" Vulnerability & Hardening Lab...
CVE-2025-59028
When sending invalid base64 SASL data, login process is disconnected from the auth server, causing all active authentication sessions to fail. Invalid BASE64 data can be used to DoS a vulnerable server to break concurrent logins. Install fixed version or disable concurrency in login processes hea...
Exploit for Path Traversal in Apache Http_Server
CVE Reproduction Lab Overview This project is a cybersecu...
CVE-2026-24044
Element Server Suite Community Edition ESS Community deploys a Matrix stack using the provided Helm charts and Kubernetes distribution. The ESS Community Helm Chart secrets initialization hook using matrix-tools container before 0.5.7 is using an insecure Matrix server key generation method,...
Exploit for Deserialization of Untrusted Data in Fortra Goanywhere_Managed_File_Transfer
Structure du projet cve-2023-0669-simulation/ ├── docker-comp...
HTTP-Smuggling
HTTP-Smuggling simpel Practical lab for learning HTTP Request...
Exploit for CVE-2025-55182
CVE-2025-55182 Scanner & Exploit Lab This repository contains...
EUVD-2012-2415
Malware in sbrugna...
EUVD-2016-9746
Malware in sbrugna...
EUVD-2016-9757
Malware in sbrugna...
CVE-2025-36071 IBM Db2 denial of service
IBM Db2 for Linux, UNIX and Windows includes DB2 Connect Server 11.5.0 through 11.5.9 and 12.1.0 through 12.1.2 is vulnerable to a denial of service as the server may crash under certain conditions with a specially crafted query due to improper release of memory resources...
Exploit for CVE-2025-7783
form-data boundary randomness vulnerability CVE-2025-7783 L...
CVE-2023-6388 Suite CRM v7.14.2 - SSRF
Suite CRM version 7.14.2 allows making arbitrary HTTP requests through the vulnerable server. This is possible because the application is vulnerable to SSRF...
SuiteCRM 代码问题漏洞
SuiteCRM is a customer relationship management system from the SuiteCRM team. A security vulnerability exists in SuiteCRM version 7.14.2 that stems from the product's failure to properly validate user input and can be exploited by an attacker to send arbitrary HTTP requests through a vulnerable...