freeBokuLoader

freeBokuLoader Ein einfacher BOF, der versucht, den Speicherbereich freizugeben, in dem der User Defined Reflective Loader gespeichert ist. Wie der Name schon andeutet, wurde er gegen BokuLoader getestet, sollte aber mit den meisten, wenn nicht allen UDRLs funktionieren. Verwendung root@kitploit:...

CVE-2026-4020

cve-id ⚡ Einfache Nutzung Verwenden Sie dieses Projekt nur in sicheren und autorisierten Umgebungen wie: Lokale virtuelle Maschinen Docker-Container Isolierte Laborumgebungen Autorisierte Penetrationstest-Umgebungen Beispiel-Setup: root@kitploit: git clone cd Project use python follow below Creat...

CVE-2025-31161

CVE-2025-31161 Aviso: Esta ferramenta é apenas para testes de segurança autorizados e fins educacionais. O uso não autorizado contra sistemas para os quais você não tem permissão explícita para testar é ilegal. Visão Geral Esta ferramenta é uma prova de conceito PoC para CVE-2025-31161 , uma...

CVE-2025-21420-PoC

CVE-2025-21420 PoC Vulnerabilidade de Elevação de Privilégio da Ferramenta de Limpeza de Disco do Windows AFAIK, embora incompleto, este é o primeiro PoC para esta CVE. https://nvd.nist.gov/vuln/detail/CVE-2025-21420 https://vulners.com/cve/CVE-2025-21420 Encontramos uma maneira de fazer DLL...

CVE-2026-43499

👻 CVE-2026-43499 — GhostLock Una falla GhostLock di 15 anni permette l'escalation a root e la fuga dal container sulla maggior parte delle distribuzioni Linux GhostLock è una vulnerabilità Use-After-Free UAF di alta gravità nel sottosistema rtmutex del kernel Linux. La falla ha origine da una...

PersistAssist

PersistAssist PersistAssist è un framework di persistenza completamente modulare scritto in C. Tutte le tecniche di persistenza contengono un metodo di pulizia che servirà a rimuovere la persistenza oltre al codice di persistenza stesso. Questo è un work in progress, quindi ci sono molte classi...

cve-2021-34527

CVE-2021-34527 CVE-2021-34527 LPE शोषण AddPrinterDriverEx का उपयोग करके - यह LPE का एक हथियारबद्ध संस्करण है जिसका उपयोग DLL को SYSTEM स्तर तक बढ़ाने के लिए किया जा सकता है और यह आर्टिफैक्ट्स को भी साफ करेगा। यह LPE Windows Desktop 7,8,8.1,10,11 और Server 2008,2012,2016,2019 को प्रभावित करता है। ...

moonwalk

moonwalk Copri le tue tracce durante Linux Exploitation / Penetration Testing lasciando zero tracce nei log di sistema e nei timestamp del filesystem. 📖 Indice Introduzione Caratteristiche Installazione Utilizzo Contributo Licenza ℹ️ Introduzione moonwalk è un eseguibile singolo binario da 400 KB...

CVE-2026-78947

CVE-2026-78947 is an incomplete cleanup vulnerability in Chromium , affecting Google Chrome prior to 152.0.7977.65 . A remote attacker, leveraging social engineering , could use a crafted Chrome extension to bypass the web origin policy . Chromium rated the security severity as Low . The fix is t...

CVE-2026-79265

Incomplete cleanup in GetUserMedia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had already compromised the renderer process and leveraged social engineering to obtain sensitive information via a crafted HTML page. Chromium classified the severity as Medium . The vulnerab...

CVE-2026-78903

CVE-2026-78903 is a site isolation bypass in Google Chrome prior to 152.0.7977.65 , caused by incomplete cleanup in the SiteIsolation component. A remote attacker who had already compromised the renderer process could bypass site isolation using a crafted HTML page , potentially gaining access to...

Detections-CVE-2026-23918

MUDANDO PARA: https://github.com/insomnisec/publiccvedetections PARA UMA MELHOR GESTÃO DE LONGO PRAZO DAS PUBLICAÇÕES DE DETECÇÃO ESTE REPOSITÓRIO SERÁ REMOVIDO EM JUNHO DE 2026 POR FAVOR, USE O OUTRO REPOSITÓRIO DAQUI EM DIANTE CVE-2026-23918 "Apache HTTP/2 Double-Free" — Pacote de Detecção e...

azazel

Azazel V 0.1 The whole earth has been corrupted through the works that were taught by Azazel: to him ascribe all sin. -- 1 Enoch 2:8 Azazel is a userland rootkit based off of the original LDPRELOAD technique from Jynx rootkit. It is more robust and has additional features, and focuses heavily...

CVE-2026-23918

CVE-2026-23918 Double-free in Apache httpd modhttp2 stream cleanup leading to pre-auth RCE. Betroffen: httpd 2.4.66 mit modhttp2 und mehrthreadigem MPM event/worker. Behoben in: 2.4.67. Gefunden und gemeldet von Bartlomiej Dmitruk striga.ai und Stanislaw Strzalkowski isec.pl. Writeup:...

Ledger

Ledger — परिचालन परिवर्तन ट्रैकर एग्रेसर स्क्रिप्ट Ledger एक Cobalt Strike एग्रेसर स्क्रिप्ट है जो एंगेजमेंट के दौरान किए गए हर परिचालन परिवर्तन को ट्रैक करती है। आपके द्वारा सक्षम की गई हर सेवा, खोला गया हर फ़ायरवॉल नियम, बनाया गया हर खाता, या छुई गई हर रजिस्ट्री कुंजी जोखिम स्कोर, ऑपरेटर...

CVE-2026-74680

This vulnerability affects the Linux kernel 's cxacru USB ATM driver (drivers/usb/atm/cxacru.c). The root cause is a missing cleanup in cxacru_cm(): when an error occurs while submitting or waiting for snd_urb, the function returns early without killing the already-submitted rcv_urb, leaving it i...

CVE-2026-74680 usb: atm: cxacru: properly kill rcv_urb on error in cxacru_cm()

In the Linux kernel, the following vulnerability has been resolved: usb: atm: cxacru: properly kill rcvurb on error in cxacrucm If cxacrucm encounters an error while submitting or waiting for sndurb, it aborts and returns the error without killing the already submitted rcvurb. This leaves the...

CVE-2026-74680 usb: atm: cxacru: properly kill rcv_urb on error in cxacru_cm()

In the Linux kernel, the following vulnerability has been resolved: usb: atm: cxacru: properly kill rcvurb on error in cxacrucm If cxacrucm encounters an error while submitting or waiting for sndurb, it aborts and returns the error without killing the already submitted rcvurb. This leaves the...

CVE-2026-45099 Terragrunt: Arbitrary File Deletion via Malicious Module Manifest

Terragrunt is a flexible orchestration tool that allows Infrastructure as Code written in OpenTofu or Terraform to scale. Prior to 1.0.4, Terragrunt trusts paths decoded from a downloaded module's .terragrunt-module-manifest during fileManifest.Clean in internal/util/file.go. A malicious or...

Gitmails

Development - IMPORTANT This Gitmails version is no longer maintained. Check out the Gitmails Shell port if you want to use a version that is maintained and, hopefully, developed. If you do not want to use the shell port and prefer the Python version, feel free to fork Gitmails and direct it to...