OESA-2026-3795 glibc security update

The GNU C Library project provides the core libraries for the GNU system and GNU/Linux systems, as well as many other systems that use Linux as the kernel. These libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD, OS-specific APIs and more. These APIs include such foundational...

OESA-2026-3793 glibc security update

The GNU C Library project provides the core libraries for the GNU system and GNU/Linux systems, as well as many other systems that use Linux as the kernel. These libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD, OS-specific APIs and more. These APIs include such foundational...

OESA-2026-3763 busybox security update

The Swiss Army Knife of Embedded Linux Security Fixes: A vulnerability has been found in BusyBox up to 1.30.1. This vulnerability affects unknown code of the file networking/wget.c of the component FEATUREWGETTIMEOUT Handler. Such manipulation of the argument -T leads to null pointer dereference...

OESA-2026-3722 util-linux security update

The util-linux package contains a random collection of files that implements some low-level basic linux utilities. Security Fixes: util-linux versions through 2.41.5 and 2.42.2 fail to check mount helper exit status before running post-mount hooks, allowing unprivileged users to execute privilege...

CVE-2026-82780

Unrestricted upload of file with dangerous type issue exists in CONPROSYS TM Series. If a specially crafted file is uploaded by a remote authenticated attacker, an arbitrary command may be executed on the product...

NextSecureScan

NextSecureScan - Escáner de Vulnerabilidad de Middleware Next.js-CVE-2025-29927 NextSecureScan es un escáner de seguridad integral diseñado específicamente para identificar vulnerabilidades de omisión de autorización relacionadas con middleware CVE-2025-29927 en aplicaciones Next.js. Este escáner...

CVE-2024-53677

CVE-2024-53677 - Apache Struts 2 Remote Code Execution Vulnerability RCE Reproduction Environment This repository provides a container-based environment to reproduce the CVE-2024-53677 vulnerability in Apache Struts 2. This vulnerability involves path traversal and allows for arbitrary code...

CVE-2019-16405.rb

Este repositorio no tiene un README...

CVE-2017-8046

DESCARGO DE RESPONSABILIDAD: Este repositorio es complementario al artículo del blog de VGS, Cómo evitar "usar componentes con vulnerabilidades conocidas". Contiene una aplicación con una vulnerabilidad de seguridad conocida concretamente, CVE-2017-8046, así como la descripción de cómo explotarla...

CVE-2025-43426

CVE-2025-43426 CVE-2025-43426 video + informe...

AppleDOS

AppleDOS CVE-2018-4407 Basado en CVE-2018-4407 https://lgtm.com/blog/applexnuicmperrorCVE-2018-4407, este tweet y este video. El error es una vulnerabilidad de desbordamiento de montón en el manejo de paquetes maliciosos cuando el sistema operativo intenta enviar un mensaje ICMP que contiene...

CVE-2018-7600

Este repositorio no tiene un README...

Log4j-Windows-Scanner

Log4j-Windows-Scanner CVE-2021-44228 vulnerability in Apache Log4j library | Log4j vulnerability scanner on Windows machines. How does it work It detects the vulnerable versions of log4j by following the folders in the C Directory. When it exposes vulnerable files, it reveals ".TXT" files as...

CVE-2023-26360

Uso Usage: python3 script.py endpoint proxyurl Lectura de archivos...

PixelDump_CVE-2016-8462

PixelDump - CVE-2016-8462 PixelDump CVE-2016-8462 was one of Pixel bootloader vulnerabilities found/worked out by beaups and Jon 'jcase' Sawyer. Disclaimer This is a dirty POC that was never intended to be released, I just copied another project, spent a few minutes adding a few lines, and sent i...

CVE-2023-38831

CVE-2023-38831 exploit de winrar 6.22 = PoC rápida root@kitploit: git clone https://github.com/nhman-python/CVE-2023-38831.git cd cd CVE-2023-38831 python3 poc.py poc ejemplo de uso root@kitploit: python3 simplefile.txt script.bat output.zip...

safer-dependencies

Dependencias más seguras para Claude Code Cuando los asistentes de codificación con IA como Claude añaden paquetes a tu proyecto, a menudo eligen la versión que les suena bien, sin comprobar si tiene vulnerabilidades de seguridad conocidas, si el paquete sigue mantenido activamente o si el nombre...

CVE-2026-42530

cve-id ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments Example setup: root@kitploit: git clone cd Project use python follow below Create a virtual environment...

CVE-2020-6468-Chrome-Exploit

Exploit de Chrome CVE-2020-6468 Exploit para Issue 1076708. Escribí este exploit hace 2 años y luego me olvidé de él :| exploitv8.js es un exploit escrito para d8 mientras que exploitchrome.html apunta a Chrome...

nmap-CVE-2022-21907

nmap-CVE-2022-21907 Repositorio que contiene un script nse para la vulnerabilidad CVE-2022-21907. Es una vulnerabilidad de un componente IIS en Windows. Permite la ejecución remota de código. La vulnerabilidad afecta al módulo del kernel http.sys, que maneja la mayoría de las operaciones básicas ...