CVE-2026-101281

A flaw has been found in Trusted Domain Project OpenDMARC up to 1.4.2. Affected by this vulnerability is the function opendmarcsp2findmailfromdomain of the file libopendmarc/opendmarcspf.c of the component SPF Macro Handler. This manipulation causes improper authentication. The attack is possible...

CVE-2026-101278

A weakness has been identified in Trusted Domain Project OpenDMARC up to 1.4.2. This affects the function opendmarcgettld of the file libopendmarc/opendmarctld.c : of the component PSL Wildcard Handler. Executing a manipulation can lead to origin validation error. The attack may be launched...

EUVD-2026-88601

A flaw has been found in RaspAP raspap-webgui up to 3.5.5. Affected is the function WiFiManager::writeWpaSupplicant of the file src/RaspAP/Networking/Hotspot/WiFiManager.php of the component SSID Processing. This manipulation of the argument ssid causes os command injection. The attack can be...

CVE-2026-101858 RaspAP raspap-webgui SSID Processing WiFiManager.php writeWpaSupplicant os command injection

A flaw has been found in RaspAP raspap-webgui up to 3.5.5. Affected is the function WiFiManager::writeWpaSupplicant of the file src/RaspAP/Networking/Hotspot/WiFiManager.php of the component SSID Processing. This manipulation of the argument ssid causes os command injection. The attack can be...

CVE-2026-101858

A flaw in RaspAP raspap-webgui versions up to 3.5.5 allows for OS command injection . The vulnerability exists within the SSID Processing component, specifically in the WiFiManager::writeWpaSupplicant function located in the file src/RaspAP/Networking/Hotspot/WiFiManager.php. Attackers can achiev...

CVE-2026-98071

A flaw was found in the Linux kernel's Reliable Datagram Sockets RDS subsystem. A race condition occurs in the connection path reset logic when connection state flags are completely cleared while concurrent transmission or completion tasks attempt to update them. A local user could exploit this...

hashcrack

hashcrack desempaqueta algunos tipos de hash, elige opciones sensatas e invoca hashcat Controladores NVIDIA aquí: http://www.nvidia.co.uk/Download/index.aspx?lang=en-uk Correo electrónico alternativo: [email protected] si necesitas soporte No estoy seguro de si alguien en NCC se hará cargo d...

CVE-2026-98069

A flaw was found in the Linux kernel's Reliable Datagram Sockets RDS subsystem. A race condition between active data transmission and connection teardown can lead to a Denial of Service DoS via a kernel crash. A local user could exploit this flaw by generating network traffic while terminating a...

CVE-2024-31771

CVE-2024-31771 TotalAV Escritura Arbitraria de Archivos TotalAV versión 6.0.x https://github.com/restdone/CVE-2024-31771/assets/42227817/ffe0c2ec-4ea6-4c29-852f-456b2e62f5b1 Cronología: 13 de febrero de 2024: se descubrió que la versión 6.0.740 era vulnerable y se informó a TotalAV. 15 de febrero...

CVE-2025-27591

CVE-2025-27591 introduction below versions v0.9.0 are vulnerable to a local privilege escalation vulnerability duo to the fact that the program creates a world-writable log file, an a world writable log file instead, the attacker can replace the log file with a symblink to any system-critical fil...

smbexec

smbexec A rapid psexec style attack with samba tools Original Concept and Script by Brav0Hax & PureHate Ported to ruby and modified by Smilingraccoon and Zeknox Codename - Machiavellian Written because we got sick of Metasploit PSExec getting popped Special thanks to Carnal0wnage who's blog...

CVE-2026-101281

A flaw in Trusted Domain Project OpenDMARC (up to version 1.4.2) affects the SPF Macro Handler component. Specifically, the function opendmarc_sp2_find_mailfrom_domain within the file libopendmarc/opendmarc_spf.c can be manipulated to cause improper authentication . This vulnerability is exploita...

CVE-2026-101281 Trusted Domain Project OpenDMARC SPF Macro opendmarc_spf.c opendmarc_sp2_find_mailfrom_domain improper authentication

A flaw has been found in Trusted Domain Project OpenDMARC up to 1.4.2. Affected by this vulnerability is the function opendmarcsp2findmailfromdomain of the file libopendmarc/opendmarcspf.c of the component SPF Macro Handler. This manipulation causes improper authentication. The attack is possible...

EUVD-2026-88599

A flaw has been found in Trusted Domain Project OpenDMARC up to 1.4.2. Affected by this vulnerability is the function opendmarcsp2findmailfromdomain of the file libopendmarc/opendmarcspf.c of the component SPF Macro Handler. This manipulation causes improper authentication. The attack is possible...

CVE-2026-98067

A flaw was found in the Linux kernel's EROFS Enhanced Read-Only File System. The rolling decompression mechanism used for LZ4-compressed files assumes that data is always copied forward in memory. On certain system architectures, the underlying memory copy operation can copy backward, invalidatin...

android_hid

androidhid 使用Android模拟Rubber Ducky攻击目标Android设备或PC 使用Android进行HID攻击 使用Android模拟Rubber Ducky攻击Android或Windows。这不是新技术，只是演示如何使用Android代替rubber ducky进行HID攻击。对于目标Android设备，不需要设备已root、启用ADB/USB调试并授权，因为攻击者的智能手机表现为已连接的键盘。 hidattack - 脚本包含针对目标Android设备执行（输入）的自定义命令 hidpc - 脚本包含针对目标Windows 10执行（输入）的自定义命令...

htshells

HTSHELLS - Web shells autocontenidos y otros ataques mediante archivos .htaccess. Los ataques se nombran de la siguiente manera: module.attack.htaccess y se agrupan por tipo de ataque en directorios. Elige el que necesites y cópialo a un archivo nuevo llamado .htaccess; revisa el archivo para ver...

CVE-2026-102374 GestSup before 3.2.62 Stored XSS via Double-Decoded Email Subject in OAuth IMAP Connector

GestSup versions before 3.2.62 contain a stored cross-site scripting vulnerability in the IMAP OAuth connector that double-decodes MIME-encoded email subjects after HTML escaping. Unauthenticated attackers can send crafted emails to monitored mailboxes with nested MIME encoded-words to inject...

CVE-2026-102373 GestSup before 3.2.62 Private Ticket Comment Disclosure via threadedit Parameter

GestSup versions before 3.2.62 fail to validate ticket ownership when loading comments via the threadedit parameter in thread.php. Authenticated attackers can enumerate sequential comment IDs to read private comments from other users' tickets without proper authorization checks...

CVE-2026-98064

A flaw was found in the Linux kernel. A local user can cause a Denial of Service DoS and crash the system by running a specially crafted BPF Berkeley Packet Filter program. The issue occurs within the BPF Type Format BTF component when attempting to display data referencing a void data type, whic...