CVE-2023-26083

CVE-2023-26083 – Fuga de direcciones del kernel de Mali GPU a través de Timeline Stream Este repositorio contiene una prueba de concepto PoC del exploit para CVE-2023-26083 , una vulnerabilidad en el controlador de GPU Mali Arm Mali GPU Kernel Driver que permite a un usuario sin privilegios filtr...

Microsoft-2024-December-Update-Control

Script de Verificación de Parches de Seguridad de Windows Diciembre 2024 Este script de PowerShell verifica si las actualizaciones KB necesarias para vulnerabilidades específicas anunciadas en los boletines de seguridad de Microsoft de diciembre de 2024 CVE-2024-49124, CVE-2024-49117,...

CVE-2026-80727

A flaw was found in the Linux kernel's x86 Machine Check Exception MCE handling. During the discovery of Corrected Machine Check Interrupts CMCI, a timer used for storm detection is modified before it is properly initialized. This improper timer setup can lead to kernel warnings and system...

CVE-2024-24919-POC

CVE-2024-24919-POC Una herramienta simple para automatizar CVE-2024-24919 Exposición de Información Sensible Características Fácil de usar. Comentarios útiles; puede probar múltiples dominios Uso git clone https://github.com/SubhankarX01/CVE-2024-24919-POC/ cd CVE-2024-24919-POC; chmod +x...

CVE-2026-26287

External Secrets Operator reads information from a third-party service and automatically injects the values as Kubernetes Secrets. Starting in version 0.10.0 and prior to version 1.3.2, a bug in the webhook generator initialization order incorrectly cleared the label-enforcement flag EnforceLabel...

USN-8888-1 linux-azure, linux-azure-fde vulnerabilities

It was discovered that some AMD processors did not properly perform Reverse Map Table RMP checks when the IOMMU accessed certain host buffers. A local attacker with hypervisor access could possibly use this to trigger an out-of-bounds condition and compromise the integrity of SEV-SNP guest memory...

cve-2025-21479_iqooneo8

CVE-2025-21479 — Qualcomm Adreno GPU 提权漏洞利用（SM8475 / iQOO Neo8） 针对 CVE-2025-21479 的本地提权实验代码，目标是 vivo V2301A（iQOO Neo8 / PD2301，Snapdragon 8+ Gen 1 / SM8475，Adreno A730，Android 14，GKI 内核 5.10）上的 Qualcomm Adreno GPU（KGSL）。 原理上，漏洞利用通过 KGSL 的 CPSMMUTABLEUPDATE 命令驱动 GPU 的 SMMU， 获得任意物理内存读写 能力，进而关闭...

CVE-2026-8069

De un Named Pipe de Acer a NT AUTHORITY\SYSTEM: CVE-2026-8069 Acer NitroSense y PredatorSense 3.x instalaron un servicio de Windows llamado PSSvc que exponía un protocolo personalizado de named pipe a usuarios locales. Un comando del protocolo aceptaba una ruta de ejecutable controlada por el...

sequoia-openpgp: sequoia-openpgp: Cryptographic integrity compromise via key flag confusion

A flaw was found in sequoia-openpgp. The library incorrectly infers key flags for older certificates when a key flags subpacket is missing, leading to a discrepancy in how key capabilities are viewed. This key flag confusion allows an attacker to bypass the back-signature check. Consequently, an...

Check-Point-Trusted-Access-Review

Check Point Trusted Access Review POR FAVOR, APLIQUE SIEMPRE LOS PARCHES DEL VENDEDOR LO ANTES POSIBLE Aplicación web local para realizar un Check Point Trusted Access Review con comandos confiables de la API de Management de Check Point. La mayoría de las comprobaciones son solo de revisión...

sequoia-openpgp: sequoia-openpgp: Cryptographic integrity compromise via key flag confusion

A flaw was found in sequoia-openpgp. The library incorrectly infers key flags for older certificates when a key flags subpacket is missing, leading to a discrepancy in how key capabilities are viewed. This key flag confusion allows an attacker to bypass the back-signature check. Consequently, an...

CVE-2019-15107_detection

CVE-2019-15107detection Este script determina si un servidor está ejecutando una versión vulnerable de Webmin. Webmin =1.920 inyección de comandos - CVE-2019-15107...

CVE-2024-3094

Utilidad de Verificación y Actualización de Vulnerabilidades de xz-utils Este script está diseñado para verificar vulnerabilidades en la versión instalada de xz-utils en su sistema. Si se detecta una versión vulnerable, el script ofrece descargar e instalar automáticamente una versión estable par...

BIT-VIRTUALENV-2026-102930 virtualenv: Downloaded seed wheels (pip/setuptools) are not integrity-checked before use

virtualenv is a tool for creating isolated virtual python environments. Prior to 21.7.12, downloadwheel accepts pip and setuptools seed wheels fetched for periodic updates or the --download option without checking their bytes against an authoritative digest equivalent to the embedded wheels'...

Detect-CVE-2024-0762

Script de Detección de CVE-2024-0762 y Análisis de Malware Resumen Este script está diseñado para detectar versiones de firmware UEFI y evaluarlas en busca de vulnerabilidades relacionadas con CVE-2024-0762. Además, se integra con la API de VirusTotal para analizar archivos en busca de malware,...

CVE-2026-61628

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · CVE-2026-61628 CVE-2026-61628 nginx-ignition 2.41.0 - lucasdillmann I am @abraxasnull. Loopback lab. The client is CVE-2026-61628-Abraxas-Labs.py. Onboarding is anonymous. First-boot POST /api/users/onboarding/finish...

CVE-2025-20352

CVE-2025-20352 Verificación de exposición SNMP onesixtyone + parser Comprobación de exposición black-box rápida y segura para dispositivos Cisco IOS/IOS XE relacionada con CVE-2025-20352 subsistema SNMP: 1. Escanea tus subredes en busca de SNMP con onesixtyone y las comunidades por defecto. 2...

CVE-2026-98291

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btintelpcie: fix off-by-one bounds check in RX submit btintelpciesubmitrx used frbdindex rxq-count to guard the FRBD array access, allowing frbdindex == rxq-count to pass through and index one element past the end of t...

AZL-105987 CVE-2026-98221 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: KEYS: trusted: Fix tpm2loadcmd boundary check tpm2loadcmd does boundary checks against the ASN.1 size i.e., payload-bloblen. Address this by passing the decoded blob size to tpm2loadcmd, and use it for the boundary checks...

DEBIAN-CVE-2026-98221

In the Linux kernel, the following vulnerability has been resolved: KEYS: trusted: Fix tpm2loadcmd boundary check tpm2loadcmd does boundary checks against the ASN.1 size i.e., payload-bloblen. Address this by passing the decoded blob size to tpm2loadcmd, and use it for the boundary checks...