aad-sso-enum-brute-spray

aad-sso-enum-brute-spray POC of SecureWorks' recent Azure Active Directory password brute-forcing vuln Description This code is a proof-of-concept of the recently revealed Azure Active Directory password brute-forcing vulnerability announced by Secureworks here is the Ars Technica article that...

CVE-2026-93106

A flaw was found in the Linux kernel's crashdump functionality, specifically in how it handles dm-crypt keys. When multiple dm-crypt keys are restored, a reference to the user keyring is incorrectly dropped multiple times. This can lead to a reference count underflow or a use-after-free condition...

CVE-2026-93105

A flaw was found in the Linux kernel. Specifically, a component responsible for handling network packet fragments espssgunref incorrectly manages memory page references. This error can cause the system to release a memory page that is still actively in use. Such an issue can lead to memory...

IDiagnosticProfileUAC

IDiagnosticProfileUAC Just another UAC bypass using auto-elevated COM object Virtual Factory for DiagCpl 12C21EA7-2EB8-4B55-9249-AC243DA8C666. This COM object can be used to create instance of DiagnosticProfile D0B7E02C-E1A3-11DC-81FF-001185AE5E76 COM object which exposes SaveDirectoryAsCab metho...

CVE-2026-93100

A flaw was found in the Linux kernel's resctrl filesystem. A race condition exists in the rdtgroupknput function during the handling of rdtgroup structure reference counts. This allows a local attacker to trigger a use-after-free vulnerability, where memory is accessed after it has been...

CVE-2026-93104

A flaw was found in the Linux kernel RDMA/rvt component. The rvtallocdevice function incorrectly returns a pointer to memory that has already been deallocated after a port allocation failure. This allows callers to dereference the freed memory, leading to a use-after-free vulnerability. This issu...

halite

Halite Halite is a high-level cryptography interface that relies on libsodium for all of its underlying cryptography operations. Halite was created by Paragon Initiative Enterprises as a result of our continued efforts to improve the ecosystem and make cryptography in PHP safer and easier to...

cheatsheets

Category| Description ---|--- Api| Collection of curl commands Exploit| Sorted by CVE Linux| Command line for Linux Other| Everything that does not belong elsewhere Snippet| Code snippets for different languages Theorie| Background knowledge on specific topics Url| Resources on the Internet...

CVE-2026-93099

A flaw was found in the Linux kernel's fs/resctrl component. This use-after-free UAF vulnerability occurs when worker threads attempt to access memory that has already been released during CPU hotplug operations. A local attacker could potentially exploit this flaw to cause a system crash, leadin...

CVE-2026-93098

A flaw was found in the Linux kernel. A deadlock can occur in the rpmsg: glink component during driver detachment. This issue arises when a redundant device unregistration attempts to acquire a mutex that is already held, causing the system to hang indefinitely. This can lead to a Denial of Servi...

CVE-2024-5324

CVE-2024-5324 Login/Signup Popup Inline Form + Woocommerce 2.7.1 - 2.7.2 - Missing Authorization to Arbitrary Options Update Description: The Login/Signup Popup Inline Form + Woocommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on t...

CVE-2026-93096

A flaw was found in the Linux kernel's CXL features. A concurrency vulnerability exists where multi-part Get/Set Feature transfers are not properly serialized. This allows two concurrent transfers to the same mailbox to interleave their parts, which can corrupt the device's transfer context. A...

CVE-2026-93095

A flaw was found in the HFS Plus HFS+ filesystem in the Linux kernel. A local attacker could provide a specially crafted, corrupted HFS+ image that, when processed during a delete key rebuild operation, would cause the system to write past an allocated memory buffer. This out-of-bounds write coul...

CVE-2022-0165

Badges License MIT Installation 1. Install Python3 and pip Instructions Here If you can't figure this out, you shouldn't really be using this Install via pip pip install CVE-2022-0165 Run bellow command to check CVE-2022-0165 -h Configurations 2. We integrated with the Telegram API to receive...

CVE-2026-93094

A flaw was found in the ath12k Wi-Fi driver of the Linux kernel. This vulnerability occurs during the rollback of an Access Point AP virtual device vdev creation. If a peer creation step fails, the system can improperly free memory while still holding references to it, leading to a use-after-free...

CVE-2026-93091

A flaw was found in the armscmi firmware component of the Linux kernel. A race condition exists during the teardown of notifications or on the probe error path. This can allow an attacker to trigger a use-after-free vulnerability, where the system attempts to access memory that has already been...

CVE-2026-93092

A flaw was found in the armscmi firmware component of the Linux kernel. A race condition can occur during the unregistration of device notifiers and the teardown of the activeprotocols IDR ID allocator. This timing issue could potentially lead to system instability or a denial of service DoS due ...

CVE-2026-93085

A flaw was found in the ARM System Control and Management Interface SCMI firmware within the Linux kernel. This vulnerability occurs because the system fails to properly reject out-of-range Device Tree DT protocol identifiers. A local attacker could exploit this by providing a malformed 32-bit DT...

CVE-2026-93084

A flaw was found in the Linux kernel's armscmi firmware. When the SCMI bus notifier acquires a handle, but the device link cannot be properly established or a protocol driver probe fails, the SCMI instance's reference count may not be correctly released. This can lead to a resource leak...

CVE-2026-93080

A flaw was found in the Linux kernel's ARM System Control and Management Interface SCMI firmware. This vulnerability occurs because the scmidevicedestroy function, responsible for tearing down SCMI transport devices, uses an incorrect lookup mechanism. Malformed firmware with duplicate protocol...