19858 matches found
CVE-2020-16923
creationtimestamp| type| source ---|---|--- 2026-09-04 08:00:05+00:00| seen| https://t.me/timcorehacking/1025 2026-09-05 01:00:36+00:00| seen| https://t.me/timcorehacking/1025...
CVE-2020-25778
creationtimestamp| type| source ---|---|--- 2026-09-04 08:00:05+00:00| seen| https://t.me/timcorehacking/1025 2026-09-05 01:00:35+00:00| seen| https://t.me/timcorehacking/1025...
CVE-2020-16915
creationtimestamp| type| source ---|---|--- 2026-09-04 08:00:05+00:00| seen| https://t.me/timcorehacking/1025 2026-09-05 01:00:36+00:00| seen| https://t.me/timcorehacking/1025...
CVE-2020-6084
creationtimestamp| type| source ---|---|--- 2026-09-04 08:00:04+00:00| seen| https://t.me/timcorehacking/1025 2026-09-05 01:00:35+00:00| seen| https://t.me/timcorehacking/1025...
CVE-2020-6086
creationtimestamp| type| source ---|---|--- 2026-09-04 08:00:04+00:00| seen| https://t.me/timcorehacking/1025 2026-09-05 01:00:35+00:00| seen| https://t.me/timcorehacking/1025...
prefetch-tool
Herramienta de Prefetch KASLR para Windows Una herramienta de prueba de concepto para evadir KASLR ASLR del kernel en Windows 11. Inspirada en EntryBleed para Linux. Esta herramienta fue desarrollada como parte de un exploit dirigido a Windows 11 24H2. No soy un experto en canales laterales en...
telegram_bbbot
telegrambbbot Telegram Bug Bounty Bot https://telegram.me/bugbountychannel History This bot adopted special for deploying to Heroku General purposes of this got - "Be helpful for infosec community!" Bot use https://github.com/maddevsio/bbcrawler for fetching information Used heroku...
dnscat2-powershell
dnscat2 是一款由 @iagox86 Ron Bowes 开发的 DNS 隐蔽通道工具，用于通过 DNS 请求传输数据。 这是 dnscat2 C 客户端的一个 PowerShell 版本。 点击此处查看博客文章，其中更详细地介绍了此脚本的用途及使用方法。 要使用此脚本，您需要 Ruby 版本的 dnscat2 服务器。运行服务器时务必添加--no-cache 选项。此客户端与服务器的缓存机制不兼容。 设置 首先，安装 dnscat2 服务器。 使用 --no-cache 禁用缓存启动服务器。启动服务器的命令应类似于：ruby dnscat2.rb...
webscan
webscan webscan is a browser-based network IP scanner and local IP detector. It detects IPs bound to the user/victim by listening on an RTP data channel via WebRTC and looping back to the port across any live IPs, as well as discovering all live IP addresses on valid subnets by monitoring for...
OpenVPN: denial of service
OpenVPN team reports: OpenVPN 2.x allows attackers to potentially cause a denial of service against the control channel reliability layer, either by driving the reliable TLS retransmission timeout to grow without bound, or by sending acknowledgements for packets that cannot be outstanding...
Linux Distros Unpatched Vulnerability : CVE-2026-56855
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. Now, we handle all RFC...
CVE-2025-32433
Security research on Erlang/OTP SSH CVE-2025-32433 Python exploit Proof-of-Concept CVE-2025-32433 Unauthenticated Remote Code Execution in Erlang/OTP SSH. I also have a banner grabbing Nuclei template and a Nuclei RCE check. The Suricata and Zeek IDS logs are in order based on a succesful Paramik...
CVE-2026-23006-Kyber-Ciphertext-Length-Side-Channel
CVE-2026-23006 – Canal lateral de longitud de texto cifrado de Kyber Código del programa Python root@kitploit: kyberlengthleak.py - Leaks secret key bit based on ciphertext length import random Simulate encapsulation: ciphertext length depends on message bit def encapsulatepk, bit: In a flawed...
Fenrir
Fenrir Publicado como código abierto por NCC Group Plc - http://www.nccgroup.com/ Desarrollado por Dave Spencer, david dot spencer at nccgroup dot com http://www.github.com/nccgroup/Fenrir Publicado bajo AGPL, consulte LICENSE para más información Descripción Fenrir fue creado para demostrar que ...
Phoenix: Unbounded channel joins per transport enables DoS over few connections
Summary Phoenix transports do not limit the number of channels in a given connection, making it easy to spawn hundreds of thousands of processes over a single connection, and, eventually reaching the max processes VM limit. The solution is to limit the number of channels per transport, so an...
EUVD-2026-42050
Phoenix: Presence keys colliding with Object.prototype members break existence checks...
CVE-2026-33630
c-ares is an asynchronous resolver library. From ver 1.32.3 until 1.34.7, a use-after-free / double-free in c-ares' query-completion handling. The same flaw — a query's callback being invoked while the query is still linked in the channel's internal lookup structures — is present at multiple poin...
Microsoft Entra ID Elevation of Privilege Vulnerability
Authentication bypass using an alternate path or channel in Microsoft Entra ID allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-85156
WWBN AVideo fails to properly validate access controls on the public channel page, allowing unauthenticated visitors to view unlisted and group-restricted videos through hardcoded visibility flags and an undefined property. Attackers can access the channel endpoint to retrieve sensitive video...