141 matches found
CVE-2026-3304
CVE-2026-3304 ラボ環境 教育および研究目的のみに使用してください。許可なくシステムを攻撃することは違法です。 このラボ環境は、Multer 2.1.0 のパッチとその公式テストコードを分析して構築されました。 脆弱なサーバーはパッチテストに記載された正確な条件を再現しており、 パッチ適用済みサーバーは Multer 2.1.0 を実行して修正が機能することを確認します。 脆弱性の概要 フィールド| 詳細 ---|--- CVE| CVE-2026-3304 対象| Multer がオープンされ、データの書き込みが開始される 3. パート2のヘッダーを受信（name 属性が欠...
Use After Free
Overview Affected versions of this package are vulnerable to Use After Free via the model quantization engine. An attacker can access and extract sensitive data from the server's heap memory by sending unauthenticated remote requests. Remediation There is no fixed version for...
programming-for-penetration-testing-buffer-overflow-exploit
Buffer Overflow Exploit in Ruby Overview This project was...
mcp-stdio-exploit
MCP STDIO Exploit: A Local Reimplementation Vulnerability...
GuvenliWebYazilimiGelistirme-CipherNone-
🛡️ CipherNone: JWT "alg: none" Vulnerability & Hardening Lab...
CVE-2025-59028
When sending invalid base64 SASL data, login process is disconnected from the auth server, causing all active authentication sessions to fail. Invalid BASE64 data can be used to DoS a vulnerable server to break concurrent logins. Install fixed version or disable concurrency in login processes hea...
Exploit for Path Traversal in Apache Http_Server
CVE Reproduction Lab Overview This project is a cybersecu...
CVE-2026-24044
Element Server Suite Community Edition ESS Community deploys a Matrix stack using the provided Helm charts and Kubernetes distribution. The ESS Community Helm Chart secrets initialization hook using matrix-tools container before 0.5.7 is using an insecure Matrix server key generation method,...
Exploit for Deserialization of Untrusted Data in Fortra Goanywhere_Managed_File_Transfer
Structure du projet cve-2023-0669-simulation/ ├── docker-comp...
HTTP-Smuggling
HTTP-Smuggling simpel Practical lab for learning HTTP Request...
Exploit for CVE-2025-55182
CVE-2025-55182 Scanner & Exploit Lab This repository contains...
EUVD-2012-2415
Malware in sbrugna...
EUVD-2016-9746
Malware in sbrugna...
EUVD-2016-9757
Malware in sbrugna...
CVE-2025-36071 IBM Db2 denial of service
IBM Db2 for Linux, UNIX and Windows includes DB2 Connect Server 11.5.0 through 11.5.9 and 12.1.0 through 12.1.2 is vulnerable to a denial of service as the server may crash under certain conditions with a specially crafted query due to improper release of memory resources...
Exploit for CVE-2025-7783
form-data boundary randomness vulnerability CVE-2025-7783 L...
CVE-2023-6388 Suite CRM v7.14.2 - SSRF
Suite CRM version 7.14.2 allows making arbitrary HTTP requests through the vulnerable server. This is possible because the application is vulnerable to SSRF...
SuiteCRM 代码问题漏洞
SuiteCRM is a customer relationship management system from the SuiteCRM team. A security vulnerability exists in SuiteCRM version 7.14.2 that stems from the product's failure to properly validate user input and can be exploited by an attacker to send arbitrary HTTP requests through a vulnerable...