CVE-2026-90942

creationtimestamp| type| source ---|---|--- 2026-09-14 18:40:09+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvir3pm7j72g 2026-09-14 20:08:14+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvivzb3opi2p 2026-09-14 21:11:25+00:00| seen|...

CVE-2026-57578

creationtimestamp| type| source ---|---|--- 2026-09-14 18:40:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvir3mxqmp2j 2026-09-14 20:08:05+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvivyykzsy2f 2026-09-15 05:10:08+00:00| seen|...

evil-rmi-server

evil-rmi-server Un servidor RMI malicioso que puede lanzar un comando arbitrario. Puede ser útil para CVE-2021-44228 en un escenario local de escalada de privilegios. Construcción ./gradlew bootJar Ejecución root@kitploit: Usage: java -jar build/libs/evilRMIServer-1.0-SNAPSHOT.jar -hV -p= An evil...

CVE-2017-10661_POC

Este repositorio no tiene un README...

foxpwn

Foxpwn Exploit de prueba de concepto para CVE-2016-9066. Encuentra un análisis detallado aquí...

cve-2019-0808-poc

cve-2019-0808-poc cve-2019-0808-poc solo BSOD,usado para reiniciar SO;...

syscall_exploit_CVE-2018-8897

Este repositorio no tiene un README...

CVE-2023-38146-Poc

PoC para el exploit ThemeBleed CVE-2023-38146 Temas de Windows 11 Fuertemente inspirado por https://github.com/gabe-k/themebleed que solo funciona en Windows la razón por la que decidí escribir esto. Usé código modificado de impacket smbserver.py...

CVE-2023-4966

CVE-2023-4966 ¡solo para probar!...

CVE-2021-3156

CVE-2021-3156...

CVE-2025-66391

Este repositorio no tiene un README...

DEBIAN-CVE-2026-19542

Calling tdelete on a sufficiently deep tree in the GNU C Library version 2.1 to 2.44 may write one pointer past the end of an alloca-allocated array on the stack, which may crash the application. The tdelete implementation keeps an explicit stack of parent nodes for rebalancing, which is grown as...

DEBIAN-CVE-2026-19499

Calling strfmon and strfmonl in the GNU C Library version 2.38 to 2.44 can write past the end of the caller-supplied output buffer when a conversion uses right-justified width padding. Exploitation requires an application code path that calls strfmon or strfmonl with right-justified width padding...

UBUNTU-CVE-2026-55847

Allure 2 is the version 2.x branch of Allure Report, a multi-language test reporting tool. Prior to 2.39.0, the ansi.js helper at allure-generator/src/main/javascript/helpers/ansi.js passes attacker-influenced statusMessage and statusTrace values through AnsiToHtml without HTML escaping and wraps...

Security Bulletin: IBM Sterling Secure Proxy is vulnerable to unauthorized access or information disclosure due to Jetty (CVE-2026-8384)

Summary Eclipse Jetty path traversal/path normalization vulnerability can allow crafted URIs containing semicolon path parameters and .. sequences to bypass path-based authorization checks in applications relying on Jetty's canonicalized paths. IBM Sterling Secure Proxy has addressed the applicab...

BlueGate-CVE-2020-0609

Validador BlueGate de RD Gateway Herramienta de Validación Remota CVE-2020-0609 / CVE-2020-0610 Una pequeña utilidad Python solo de verificación para validar remotamente el comportamiento del parche asociado con las vulnerabilidades de Microsoft Remote Desktop Gateway: CVE-2020-0609 CVE-2020-0610...

CVE-2023-4863

Todo el crédito va para el script de DARKNAVY. Esta es solo una versión modificada con las constantes OFFSET y VALUE añadidas al inicio del archivo para que sea más fácil ajustarlas...

nginx:1.26 security update

An update is available for nginx, module.nginx. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list nginx is a web and proxy server supporting HTTP and other...

RLSA-2026:67283 Moderate: nginx:1.26 security update

nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security Fixes: nginx: NGINX: Arbitrary code execution via crafted HTTP requests CVE-2026-42533 For more details about the security issues, including the impac...

RLSA-2026:67315 Moderate: nginx:1.24 security update

nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security Fixes: nginx: NGINX: Arbitrary code execution via crafted HTTP requests CVE-2026-42533 For more details about the security issues, including the impac...