xencrypt

Xencrypt PowerShell crypter v 1.0 Authors Xentropy @SamuelAnttila SecForce @SECFORCELTD If you want to read about the design behind this tool and how to make your own crypter, there's an article I wrote about it here: Write a crypter in any language Note Don't be a script kiddie, I made this GPLv...

tweetable-polyglot-png

tweetable-polyglot-png Empaqueta hasta 3MB de datos en un archivo PNG poliglota tweeteable. Véalo en acción aquí: https://twitter.com/David3141593/status/1371974874856587268 Otros hosts de imágenes en los que he verificado que esta técnica funciona: Imgur https://i.imgur.com/kNhGrN3.png Github re...

servu-cve-2026-28318-poc

CVE-2026-28318 — SolarWinds Serv-U "Content-Encoding: deflate" 事前認証クラッシュ 根本原因分析 + DoS 概念実証。 公開アドバイザリでは、これを認証不要の denial-of-service / uncontrolled resource consumption として分類しています。バイナリ解析の結果、根本的な欠陥は メモリ安全性 に関わるもので、HTTP deflate デコードパスにおける 無効なfree による内部ポインタの解放 であり、プロセスヒープを破壊します STATUSHEAPCORRUPTION,...

Linux Distros Unpatched Vulnerability : CVE-2026-89716

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - zram: validate deflate params We must validate user-supplied deflate winbits before we pass it to zlibdeflateworkspacesize, which triggers BUGON if winbits valu...

CVE-2026-89716

In the Linux kernel, the following vulnerability has been resolved: zram: validate deflate params We must validate user-supplied deflate winbits before we pass it to zlibdeflateworkspacesize, which triggers BUGON if winbits value is outside of valid ranges...

CVE-2026-89716

CVE-2026-89716 affects the Linux kernel's zram module. User-supplied deflate winbits are passed to zlib_deflate_workspacesize() without validation; if the value falls outside the valid range, a BUG_ON() is triggered, resulting in a kernel bug/panic. The fix validates the winbits parameter before ...

EUVD-2026-76628

In the Linux kernel, the following vulnerability has been resolved: zram: validate deflate params We must validate user-supplied deflate winbits before we pass it to zlibdeflateworkspacesize, which triggers BUGON if winbits value is outside of valid ranges...

CVE-2026-89716 zram: validate deflate params

In the Linux kernel, the following vulnerability has been resolved: zram: validate deflate params We must validate user-supplied deflate winbits before we pass it to zlibdeflateworkspacesize, which triggers BUGON if winbits value is outside of valid ranges...

PT-2026-90432

In the Linux kernel, the following vulnerability has been resolved: zram: validate deflate params We must validate user-supplied deflate winbits before we pass it to zlib deflate workspacesize, which triggers BUG ON if winbits value is outside of valid ranges...

DEBIAN-CVE-2026-46387

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 7.0.16 and 8.0.5, Suricata's HTTP/2 decompression path could grow the decompressed response-body buffer without an effective upper bound. A crafted HTTP/2 DATA...

CVE-2026-28318-check

SolarWinds Serv-U DoS no autenticado: Script de detección seguro Un detector seguro, no destructivo para CVE-2026-28318 , una denegación de servicio no autenticada en SolarWinds Serv-U= 15.5.4.108. Una única POST que lleva Content-Encoding: deflate y un cuerpo alimenta ese cuerpo a un descompreso...

UBUNTU-CVE-2026-85024

undici bundles a WebSocket client whose permessage-deflate size-limit...

DEBIAN-CVE-2026-85024

undici bundles a WebSocket client whose permessage-deflate size-limit cleanup removes all listeners from the internal zlib inflate stream, including its error listener, while that stream can still emit. When a remote peer sends a compressed payload that crosses the built-in 128 MiB...

CVE-2026-85024

undici bundles a WebSocket client whose permessage-deflate size-limit cleanup removes all listeners from the internal zlib inflate stream, including its error listener, while that stream can still emit. When a remote peer sends a compressed payload that crosses the built-in 128 MiB...

CVE-2026-85024

undici's bundled WebSocket client is vulnerable to a remote, unauthenticated Denial of Service via a flaw in its permessage-deflate decompression. During size-limit cleanup, all listeners—including the error listener—are removed from the internal zlib inflate stream, yet the stream can still emit...

CVE-2026-85024 undici vulnerable to Denial of Service via unhandled error in WebSocket permessage-deflate decompression

undici bundles a WebSocket client whose permessage-deflate size-limit cleanup removes all listeners from the internal zlib inflate stream, including its error listener, while that stream can still emit. When a remote peer sends a compressed payload that crosses the built-in 128 MiB...

EUVD-2026-71603

undici bundles a WebSocket client whose permessage-deflate size-limit cleanup removes all listeners from the internal zlib inflate stream, including its error listener, while that stream can still emit. When a remote peer sends a compressed payload that crosses the built-in 128 MiB...

CVE-2026-85024 undici vulnerable to Denial of Service via unhandled error in WebSocket permessage-deflate decompression

undici bundles a WebSocket client whose permessage-deflate size-limit cleanup removes all listeners from the internal zlib inflate stream, including its error listener, while that stream can still emit. When a remote peer sends a compressed payload that crosses the built-in 128 MiB...

CVE-2026-85024

undici bundles a WebSocket client whose permessage-deflate size-limit cleanup removes all listeners from the internal zlib inflate stream, including its error listener, while that stream can still emit. When a remote peer sends a compressed payload that crosses the built-in 128 MiB...

Linux Distros Unpatched Vulnerability : CVE-2026-85024

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - undici bundles a WebSocket client whose permessage-deflate size-limit cleanup removes all listeners from the internal zlib inflate stream, including its error...