CVE-2021-36630

CVE-2021-36630 The SmartZone series devices of Ruckus have security risks. After notifying the manufacturer, they actively organized technical personnel to conduct investigations. During this period, we also provided security suggestions and verification methods many times. On July 19, the compan...

rbcd-attack

Abusando de la Delegación Restringida Basada en Recursos de Kerberos TL;DR Este repositorio trata sobre un ataque práctico contra la Delegación Restringida Basada en Recursos de Kerberos en un Dominio de Active Directory de Windows. La diferencia con otras implementaciones comunes es que lanzamos...

rbcd-attack

Abusing Kerberos Resource-Based Constrained Delegation TL;DR This repo is about a practical attack against Kerberos Resource-Based Constrained Delegation in a Windows Active Directory Domain. The difference from other common implementations is that we are launching the attack from outside of the...

CVE-2026-101074 Netcore NR289-GE Authentication boa password-check stack-based overflow

A weakness has been identified in Netcore NR289-GE 1.4.5102. The affected element is the function password-check of the file /bin/boa of the component Authentication. Executing a manipulation of the argument Username can lead to stack-based buffer overflow. The attack may be launched remotely. Th...

CVE-2026-101074

A stack-based buffer overflow exists in the Authentication component of Netcore NR289-GE version 1.4.5102 . The vulnerability is located within the password-check function of the /bin/boa file. An attacker can trigger the overflow by manipulating the Username argument, potentially leading to remo...

Security Bulletin: IBM DataPower Gateway affected by server-side request forgery (CVE-2026-14521)

Summary IBM DataPower Gateway affected by server-side request forgery CVE-2026-14521 Vulnerability Details CVEID:CVE-2026-14521 DESCRIPTION: IBM DataPower Gateway is vulnerable to server-side request forgery SSRF. This may allow an authenticated attacker to send unauthorized requests from the...

CVE-2026-70413

Dell Live Optics Collector versions prior to 27.2.13.310 are vulnerable to a Use of Hard-coded Password vulnerability. A low privileged attacker with local access could potentially exploit this flaw, resulting in Information exposure . Remediation is available via security update DSA-2026-339 . N...

pcileech

Resumen de PCILeech: PCILeech utiliza dispositivos hardware PCIe para leer y escribir la memoria del sistema objetivo. Esto se logra usando DMA a través de PCIe. No se necesitan controladores en el sistema objetivo. PCILeech también funciona sin hardware junto con una amplia gama de métodos de...

CVE-2025-27591-PoC

CVE-2025-27591 PoC: Local Privilege Escalation in Below v0.9.0 Proof of Concept for CVE-2025-27591, a vulnerability that allows to local unprivileged users to escalate their privileges to root through symlink attacks. 🕵️‍♂️ Technical Details The vulnerability affects the Below service versions...

CVE-2026-98127

A flaw was found in the Linux kernel's SMB client. The smb3insertrange function does not properly validate the resulting file size when inserting a range of space into an existing file on a mounted share. A local user can exploit this flaw using a fallocate request to bypass configured file size...

CVE-2026-98126

A flaw was found in the Linux kernel's SMB client. This flaw allows a local user to bypass enforced file-size restrictions and expand files beyond authorized limits. When handling file allocation operations that zero out a range of data without preserving the file's existing size, the kernel fail...

CVE-2026-101072

A vulnerability was identified in Netcore NR289-GE 1.4.5102. This issue affects the function system of the file /apip.cgi of the component CGI Handler. Such manipulation of the argument ip leads to os command injection. The attack can be launched remotely. The exploit is publicly available and...

CVE-2026-101071

A vulnerability was determined in Acrel Electric Unet Web Service up to 20260814. This vulnerability affects unknown code of the file /exchange/attachment/upload of the component Upload Endpoint. This manipulation of the argument File causes unrestricted upload. The attack can be initiated...

mininode

Mininode Mininode es una herramienta CLI para reducir la superficie de ataque de las aplicaciones Node.js mediante el análisis estático del código fuente. Soporta dos modos de reducción: 1 grueso, 2 fino. Mininode construye el gráfico de dependencias módulos y funciones utilizados de la aplicació...

CVE-2025-38001

CVE-2025-38001 RBTree Family Drama Linux HFSC Eltree Use-After-Free - Debian 12 PoC This PoC utilizes a page-level data-only attack based on RBTree transformations to compromise the system. The exploit is portable and works on all kernelCTF instances LTS 6.6.90, COS 109, COS 105 and Debian 12. On...

scan-cve-2018-8115

root@kitploit: /\ / | | / \ | | | / /\ \ / | | | |/ | \ \ / / | | | | '| | | | | | / \ | | || | | | | / | || | | | | || || | // \, |,|,| |/ ||,|| |||, | | | / | || |/ Docker images verifier cli-tool CVE-2018-8115 To help the community stay safe, we at Aqua created an open source tool that...

Swift-Attack

Swift-Attack Unit tests for blue teams to aid with building detections for some common macOS post exploitation methods. I have included some post exploitation examples using both command line history and API calls. The post exploitation examples included here are not all encompassing. Instead the...

WhisperPair

WhisperPair: Arsenal de Pruebas para Google Fast Pair -green Una herramienta práctica para comprobar si los dispositivos Google Fast Pair son vulnerables a ataques de emparejamiento, vinculación de cuentas y de nivel de protocolo. Este repositorio proporciona el arsenal de pruebas WhisperPair, un...

CVE-2026-101073

A security flaw in the CGI Dispatcher component of Netcore NR289-GE 1.4.5102 allows for improper authentication via an unknown function in the /bin/boa file. This vulnerability can be triggered through remote manipulation, potentially allowing unauthorized access. While the documents confirm that...

EUVD-2026-88293

A security flaw has been discovered in Netcore NR289-GE 1.4.5102. Impacted is an unknown function of the file /bin/boa of the component CGI Dispatcher. Performing a manipulation results in improper authentication. The attack may be initiated remotely. The exploit has been released to the public a...