Raccine

Raccine Una protección sencilla contra el ransomware Por qué Con frecuencia vemos ransomware que elimina todas las copias de sombra mediante vssadmin. ¿Y si pudiéramos interceptar esa petición y matar el proceso que la invoca? Intentemos crear una vacuna sencilla. Cómo funciona Registramos un...

SrHollow

SrHollow Extracción de secretos LSA, reutilización de una copia de sombra VSS preexistente + parser regf en línea + descifrado AES-256 de LSA mediante bcrypt.dll. Cadena en 6 pasos 1. Enumerar\GLOBAL?? mediante NtOpenDirectoryObject + NtQueryDirectoryObject. Elegir el HarddiskVolumeShadowCopyN co...

CVE-2023-0386-OverlayFS

CVE-2023-0386 - OverlayFS / FUSE Fuente original del CVE escrita por xkaneiki: https://github.com/xkaneiki/CVE-2023-0386/tree/main Reescrito para que el exploit pueda ejecutarse en 1 shell el exploit original requiere 2 shells. Compile make all Create mount point for fuse filesystem mkdir -p...

CVE-2026-51992

CVE-2026-51992 Dentro de ClickHouse, existe una funcionalidad que permite a un usuario con los permisos adecuados crear diccionarios para interactuar con diferentes bases de datos y ejecutar consultas específicas en ellas. Para PostgreSQL, las consultas SELECT se envuelven en una declaración COPY...

CVE-2016-5195

CVE-2016-5195: condición de carrera del núcleo Linux Dirty COW Investigación defensiva, validación no armamentizada y análisis de parche para CVE-2016-5195 Dirty COW, una condición de carrera de copia en escritura copy-on-write del núcleo Linux que puede permitir que un usuario local modifique...

PoC-CVE-2026-46331

Este repositorio contiene un exploit de prueba de concepto PoC para CVE-2026-46331, una vulnerabilidad de escalada de privilegios local en el kernel de Linux en el subsistema de control de tráfico. Resumen de la vulnerabilidad La falla se encuentra en la acción de edición de paquetes actpedit,...

cve-2019-9193

CVE-2019-9193 • CVE-2019-9193 漏洞 PostgreSQL 通过“COPY TO / FROM PROGRAM”功能，可以在数据库的操作系统内执行任意代码的漏洞。 攻击向量涉及“SuperUser”和“pgexecuteserverprogram”组的用户。...

CVE-2016-5195

CVE-2016-5195 DirtyCOW PoC 修改自dirtycow.github.io include include include include include include include include void map; int f; struct stat st; char name; void madviseThreadvoid arg char str; str = chararg; int i, c = 0; fori = 0; i 100000000; i++ c += madvisemap, 100, MADVDONTNEED;...

dirtycow-lab

Dirty COW Educational PoC CVE-2016-5195 ⚠️ Legal Warning This code is for EDUCATIONAL PURPOSES ONLY. Any malicious use is strictly prohibited and illegal. 📖 What is Dirty COW? Dirty COW CVE-2016-5195 is a privilege escalation vulnerability in the Linux Kernel that exploits a race condition in the...

CVE-2015-3306-Home-Lab

ProFTPD 1.3.5 modcopy — Laboratorio de Simulación de RCE Este laboratorio está diseñado para simular la vulnerabilidad CVE-2015-3306 — ProFTPD modcopy Remote File Copy to RCE Se utiliza para aprender Web Shell Injection RCE a través del módulo modcopy de ProFTPD Características ProFTPD 1.3.5...

PT-2026-104519

Name of the Vulnerable Software and Affected Versions MPG WordPress plugin versions prior to 4.2.3 Description Insufficient validation of the dataset source during project import allows users with the Editor role and above to specify a local filesystem path instead of a remote URL. This leads to ...

CVE-2026-43284-DIRTY-FRAG-

CVE-2026-43284-DIRTY-FRAG- Подробный технический анализ уязвимости локального повышения привилегий CVE-2026-43284 Dirty Frag в ядре Linux. CVE-2026-43284 обычно упоминаемая как часть набора уязвимостей Dirty Frag — это критическая уязвимость локального повышения привилегий LPE в ядре Linux. Она...

AlmaLinux 9.2 [TuxCare] Security Update: nginx / nginx-all-modules / nginx-core / nginx-filesystem / etc (ALMALINUX9.2:CLSA-2026:1776766448)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1776766448 advisory. - NGINX Open Source and NGINX Plus have a vulnerability in the ngxhttpdavmodule module that might allow an attacker to trigger a buffer...

ROS-20261001-73-0014

The vulnerability in perl-YAML-Syck is related to copying buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to cause service interruptions remotely...

FreeBSD : FreeBSD -- Memory safety bugs in kqueue copy-on-fork implementation (d725b228-bccc-11f1-906f-bc241121aa0a)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the d725b228-bccc-11f1-906f-bc241121aa0a advisory. When copying knotes from a parent kqueue to a child, the copy code did not correctly exclude...

AlmaLinux 9.2 [TuxCare] Security Update: thunderbird Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1787115646)

The AlmaLinux 9.2 host has a package installed that is affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1787115646 advisory. - Spoofing issue in the WebAuthn component in Firefox for Android. This vulnerability was fixed in Firefox 143 and Thunderbird 143...

K000163493: PostGreSQL vulnerability CVE-2026-6464

Security Advisory Description Untrusted data inclusion in PostgreSQL psql COPY may allow a server administrator to elicit execution of data lines as psql commands, via error injection. If the "COPY FROM STDIN" or "\copy FROM STDIN" command fails before the server indicates that it awaits input...

Security Bulletin: Vulnerabilities in Netty,Apache Log4j Core,Spring Boot,Spring Framework,PostCSS,tmp,Spring Data,Apache Commons Lang,React Router,Bootstrap,d3-color might affect IBM Storage Defender Copy Data Management

Summary IBM Storage Defender Copy Data Management can be affected by vulnerabilities in Netty, Apache Log4j Core, Spring Boot, Spring Framework, PostCSS, tmp, Spring Data, Apache Commons Lang, React Router, Bootstrap,d3-color. Vulnerabilities include The attacker can present a server certificate...

Security Bulletin: Vulnerabilities in Netty.Spring WebFlux,Spring Framework,Bootstrap,Angular,Lodash,spring-security-config,Underscore might affect IBM Storage Defender Copy Data Management

Summary IBM Storage Defender Copy Data Management can be affected by vulnerabilities in Netty.Spring WebFlux,Spring Framework,Bootstrap,Angular,Lodash,spring-security-config. Vulnerabilities include an escalation attack exchanging a known session ID for that of an authenticated user, Denial of...

Security Bulletin: Vulnerabilities in Netty,jackson-databind,Angular,bootstrap,React Router,decode-uri-component,Reactor Netty,Spring WebFlux,Spring Framework,spring-web might affect IBM Storage Defender Copy Data Management

Summary IBM Storage Defender Copy Data Management can be affected by vulnerabilities in Netty, jackson-databind, Angular, bootstrap, React Router, decode-uri-component, Reactor Netty, Spring WebFlux, Spring Framework,spring-web. Vulnerabilities include allowing the renamed JSON key to be assigned...