CVE-2021-27190-PEEL-Shopping-cart-9.3.0-Stored-XSS

CVE-2021-27190 - PEEL Shopping, carrito de compras de comercio electrónico - Vulnerabilidad de Cross-Site Scripting Almacenado en 'Dirección' Fecha 2021-02-11 Autor del Exploit Anmol K Sachan Página del proveedor https://www.peel.fr/ Enlace del software...

PyStat

PyStat - Netstat Avanzado Para Windows Compatible con Python Versión 2.7 Características Conocer la dirección remota del proceso Conocer los puertos remotos del proceso Saber qué usuario está usando el proceso junto con el título y PID Registro de cambios: Soporte de instalación automática de...

CVE-2026-33017

CVE-2026-33017 Langflow RCE ★ CVE-2026-33017 Langflow Remote Code Execution PoC ★ https://github.com/user-attachments/assets/562fc637-6be1-4ab9-a396-bfad56447af7 Environment Setup Use the following commands to build and run the vulnerable Langflow environment: docker build -t...

CVE-2021-21551

CVE-2021-21551 Proof of concept exploit for CVE-2021-21551, vulnerability comes from user provided addresses being provided as arguments to a memmove call allowing for an arbitary read/write ioctls 0x9B0C1EC4 and 0x9B0C1EC8 as well as the physical address parameter for a MmMapIoSpace call that...

ARC-Browser-Address-Bar-Spoofing-PoC

Suplantación de la barra de direcciones de ARC Browser - iOS/iPadOS CVE-2024-25733 PoC de suplantación de la barra de direcciones de ARC Browser - iOS/iPadOS Exploit PoC Prueba de concepto function spoof setTimeout = window.stop; let randomPort; do randomPort = Math.floorMath.random 1000; while...

kyocera-cve-2022-1026

kyocera-cve-2022-1026 Kyocera 프린터에서 인증 없이 데이터를 추출할 수 있는 취약점으로, 평문 주소록과 도메인 가입 비밀번호를 복구할 수 있습니다. 취약점 개요 2021년 펜테스트를 진행하던 중, 저는 프린터를 원격으로 관리하는 데 사용되는 Kyocera의 thick client 애플리케이션을 살펴보고 있었습니다. 애플리케이션의 트래픽을 프록시하는 과정에서 Kyocera의 SOAP API포트 9091/TCP가 민감한 작업을 수행할 때 인증을 제대로 처리하지 않는다는 사실을 발견했습니다. Kyocera...

CVE-2023-36427

CVE-2023-36427 Este repositorio contiene el informe y el exploit de CVE-2023-36427, una corrupción de memoria en direcciones físicas arbitrarias desde la partición raíz en Windows. Los detalles y el exploit de la vulnerabilidad se encuentran en el informe enviado a Microsoft. Cronología 2 de juli...

windows-x86-shellcode-poc

Windows x86 Buffer Overflow PoC para Principiantes Este es un tutorial simple y autocontenido sobre exploits de desbordamiento de búfer basados en la pila para Windows de 32 bits. No se necesitan guías externas: todo lo que necesitas está aquí. ¿Qué es este repositorio? vulnerable.c: Un programa...

bing-ip2hosts

Bing-ip2hosts Bing-ip2hosts is a Bing.com web scraper to discover hostnames by IP address. Description Bing-ip2hosts is a Bing.com web scraper that discovers hostnames by IP address. Bing is the flagship Microsoft search engine formerly known as MSN Search and Live Search. It provides a feature...

AFD

AFD CVE-2022-24494 The vulnerability is an arbitrary memory read. The root cause is a lack of validation in a memory address suplied from user-land that is used in a memcpy operation in order to copy data from this memory address into the pool memory. The lack of check is in the addres...

page_table_walk

Captura la Bandera en Memoria Física Has leído sobre paginación. Los diagramas tienen sentido. Cuatro niveles, 9 bits cada uno, marco de página, desplazamiento. Claro. Pero luego te encuentras con un desafío que requiere caminar realmente las tablas de páginas, y te das cuenta de que no lo sabes...

CVE-2015-6086

Del Crash al Exploit: CVE-2015-6086 - Lectura Fuera de Límites/Omisión de ASLR $$$$$$\ $$\ $$\ $$$$$$$$\ $$$$$$\ $$$$$$\ $$\ $$$$$$$\ $$$$$$\ $$$$$$\ $$$$$$\ $$ $$\ $$ | $$ |$$ | $$ $$\ $$$ $$\ $$$$ | $$ | $$ $$\ $$$ $$\ $$ $$\ $$ / |$$ | $$ |$$ | / $$ |$$$$\ $$ |$$ | $$ | $$ / |$$$$\ $$ |$$ /...

IOCScraper

IOC Scraper IOC Scraper utilises IOCPARSER service to fetch IOCs from different vendor Blogs, PDFs, and CSV files. Parsing IOCs is time-consuming process, using current script one can automatically extract and aggregate IOCs easily. Features Defanged IOCs : Supports extracting and defanging IOCs...

CVE-2022-0848

CVE-2022-0848 Remote Code Execution RCE in part-db 0.5.11 Change the host in bash file and run...

CVE-2024-26229-lpe

CVE-2024-26229 CWE-781: Validación de direcciones incorrecta en IOCTL con código de control de E/S METHODNEITHER en el controlador csc.sys...

CLEANSTART-2026-GH89937 source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2...

CVE-2026-56854 affects multiple packages. The source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2026-46595. See references for individual vulnerability...

CVE-2026-100070

A flaw was found in the Linux kernel. This vulnerability can result in information disclosure when processing Session Initiation Protocol SIP traffic through the netfilter Network Address Translation NAT helper. When address rewriting shortens a packet, the helper fails to adjust its internal...

CVE-2026-47567

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer, where a user could cause uncontrolled resource consumption by exhausting the DRM VMA offset address space. A successful exploit of this vulnerability might lead to denial of service...

EUVD-2026-90176

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer, where a user could cause uncontrolled resource consumption by exhausting the DRM VMA offset address space. A successful exploit of this vulnerability might lead to denial of service...

CVE-2026-47567

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer, where a user could cause uncontrolled resource consumption by exhausting the DRM VMA offset address space. A successful exploit of this vulnerability might lead to denial of service...