CVE_2019_18935

RAUcrypto Combined exploit for Telerik UI for ASP.NET AJAX. File upload for CVE-2017-11317 and CVE-2017-11357 - will automatically upload the file .NET deserialisation for CVE-2019-18935 For exploitation to work, you generally need a version with hard coded keys, or you need to know the key, for...

CLR-Unhook

CLR Unhooking Tool Note: For this to have the effect of a clean CLR, you’d need to manually map the DLL from disk into memory. You cannot use LoadLibraryA/W, because antivirus solutions will detect the DLL load event and may hook it immediately. If you want this behavior, you can look up existing...

Shellcode-Encryptor

ShellcodeEncryptor A simple shell code encryptor/decryptor/executor to bypass anti virus. Note: I have completely redone the work flow for creating the bypass, I have found injecting the binary into memory using PowerShell as the most effective method. Purpose To generate a .Net binary containing...

OffensiveDLR

OffensiveDLR Toolbox que contiene notas de investigación y código PoC para weaponizar el DLR de .NET Contenidos Script| Descripción ---|--- Kukulkan| Una versión reducida de SILENTTRINITY, DLL y EXE en C que embeben un motor IPY. Las comunicaciones están cifradas y pueden usarse con CobaltStrike...

EUVD-2026-87068

In the Linux kernel, the following vulnerability has been resolved: net: hsr: free learned nodes on device setup failure hsrdevfinalize can fail after a lower-device RX handler has already been registered slave A is added before the failable slave B and interlink adds. RX handlers run in softirq...

CVE-2026-100071

The Linux kernel contains a vulnerability where the hsr_dev_finalize() function fails to release dynamic nodes learned into the node_db . This occurs because the function can fail after a lower-device RX handler is registered but before completion, allowing frames received during that window to p...

dncil

dncil es una librería de desensamblado de Common Intermediate Language CIL escrita en Python que permite analizar el encabezado, las instrucciones y los controladores de excepciones de métodos administrados de .NET. Los datos analizados se exponen a través de una API orientada a objetos para...

PENeL

PENeL - Powershell with Embedded .NET Library Program that prepares a .NET DLL Library to run embedded in Powershell Script Created By: Guilherme Bacellar Moralez Th3 0bservator https://twitter.com/th30bservator Disclaimer This code is created and maintened only for a research proposal. Please do...

CVE-2025-53770-Exploit

📌 SharePoint WebPart Injection Exploit Toolkit 🍕 Herramienta de explotación para la inyección de WebParts en SharePoint a través de ToolPane.aspx, que conduce a la deserialización de .NET y a una posible ejecución remota de código RCE. Desarrollado por: @GOTOCVE 🌍 Descripción general Esta...

SharpHound

SharpHound Obtener SharpHound La última compilación de SharpHound siempre se encontrará aquí. Para determinar la versión de SharpHound compatible con una instancia de BloodHound CE desplegada, inicia sesión en la interfaz web de BloodHound CE y haz clic en ⚙️ Configuración → Descargar colectores...

cont-flood-poc

PoC for CVE-2023-45288 This is a proof-of-concept code for the CONTINUATION flood vulnerability found and documented by Bartek Nowotarski. The technical details are very well documented in his blog post here. While my focus was on the Go bug as documented by the researcher, this code should be...

ROOT-APP-GOBINARY-CVE-2026-46600 CVE-2026-46600 in golang.org/x/net - Patched by Root

Root has patched CVE-2026-46600 in the golang.org/x/net package for Root:Go. Multiple fixed versions available...

ROOT-APP-GOBINARY-CVE-2026-42502 CVE-2026-42502 in golang.org/x/net - Patched by Root

Root has patched CVE-2026-42502 in the golang.org/x/net package for Root:Go. Multiple fixed versions available...

CVE-2026-98070

In the Linux kernel, the following vulnerability has been resolved: net/rds: acquire RDSINXMIT in rdstcpresetcallbacks rdstcpresetcallbacks quiesces the transmit path by setting the path state to RDSCONNRESETTING and then waiting for RDSINXMIT to be sampled clear before swapping the underlying...

CVE-2026-98069

In the Linux kernel, the following vulnerability has been resolved: net/rds: acquire the fastpath locks in rdsconnshutdown rdsconnshutdown quiesces the transmit and receive-refill paths by waiting for RDSINXMIT and RDSRECVREFILL to be sampled clear, and then runs the transport shutdown and...

CVE-2026-98017

In the Linux kernel, the following vulnerability has been resolved: net/sched: defer qdisc freeing after failed creation An RTMNEWQDISC request can make clsact bind a populated shared ingress block during -init, publishing an embedded miniQdisc to lockless readers. If the same request has an...

CVE-2026-97940

In the Linux kernel, the following vulnerability has been resolved: ipv6: fix fib6 walker UAF on seq stop ipv6routeiteractive treats a walker in FWSU at the table root as already unlinked. fib6delroute can move a still-linked walker into that same state when the current leaf is the last route at...

StandIn

StandIn StandIn is a small AD post-compromise toolkit. StandIn came about because recently at xforcered we needed a .NET native solution to perform resource based constrained delegation. However, StandIn quickly ballooned to include a number of comfort features. I want to continue developing...

CVE-2026-98131

In the Linux kernel, the following vulnerability has been resolved: net: stmmac: fix dma mapping leak in stmmactsoxmit In stmmactsoxmit, if the DMA mapping of an skb fragment fails, the frame is dropped but the DMA mappings already created for the linear part and for the fragments mapped before t...

EUVD-2026-86936

In the Linux kernel, the following vulnerability has been resolved: net: ethernet: oatc6: Improve the error recovery When oversubscribed traffic causes lot of buffer overflow errors, probably due to loss of data chunks, driver fails to find a data chunk with endvalid bit set, before it runs out o...