CVE-2026-98207

A flaw was found in the Linux kernel's MultiMediaCard Serial Peripheral Interface MMC SPI driver. A local user or connected device can trigger this flaw during multi-block data transfers that encounter a Cyclic Redundancy Check CRC transmission error. The driver initiates a recovery retry without...

sqlmap

sqlmap sqlmap is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers. It comes with a powerful detection engine, many niche features for the ultimate penetration tester, and a broad range of switche...

CVE-2026-97076

The WP Rocket WordPress plugin is vulnerable to an Executable Regular Expression Error (CWE-624) in versions prior to 3.23.5 . This vulnerability can lead to Code Injection or a Denial of Service (DoS) attack. While the initial description mentions code injection, the PatchStack documentation spe...

electronegativity

Electronegativity ⚠️ We're no longer actively maintaining this project ⚠️ What's Electronegativity? Electronegativity is a tool to identify misconfigurations and security anti-patterns in Electron-based applications. It leverages AST and DOM parsing to look for security-relevant configurations, as...

CVE-2026-86850

The SKU Error Fixer for WooCommerce WordPress plugin, affecting versions up to and including 1.0 , contains a vulnerability where it fails to perform capability or nonce checks on two specific AJAX actions. Because these actions are accessible to unauthenticated users , an attacker can permanentl...

flawfinder

About This is "flawfinder" by David A. Wheeler. Flawfinder is a simple program that scans C/C++ source code and reports potential security flaws. It can be a useful tool for examining software for vulnerabilities, and it can also serve as a simple introduction to static source code analysis tools...

blind-sql-bitshifting

Blind SQL Injection via Bitshifting This is a module that performs blind SQL injection by using the bitshifting method to calculate characters instead of guessing them. It requires 7/8 requests per character, depending on the configuration. Usage import blind-sql-bitshifting as x Edit this...

toxy

toxy Not actively maintained, may not work with latest node.js runtimes. If you are interested in maintaining toxy, please open an issue. Hackable HTTP proxy to simulate server failure scenarios , systems resiliency testing and unexpected network conditions , built for node.js. It was mainly...

MAL-006

MAL-006: Entidad Externa XML en "Try It" en WSO2 ESB Se identificó un ataque de Entidad Externa XML XXE basado en errores en la herramienta "Try It" de WSO2 ESB. ¿Por qué no hay CVE? El proveedor respondió que "se recomienda deshabilitar Try It en producción" y no se realizó una divulgación...

Veridiff

════════════════════════════════════════════════════════════════ VERIDIFF the exact instruction where two runs of the same code split ════════════════════════════════════════════════════════════════ Two traces go in. One address comes out: the exact basic block where your two runs stopped agreein...

etl-parser

etl-parser Event Trace Log file reader in pure Python etl-parser is a pure Python 3 parser library for ETL Windows log files. ETL is the default format for ETW as well as the default format for the Kernel logger. etl-parser has no system dependencies, and will work well on both Windows and Linux...

CVE-2021-42574

rustc version 1.56.1: fixed and compile error rustc version 1.56: compile success...

Baron-Samedit-Heap-Buffer-Overflow-CVE-2021-3156

Baron-Samedit-Heap-Buffer-Overflow-CVE-2021-3156 Versión vulnerable al exploit La vulnerabilidad Baron Samedit CVE-2021-3156 afecta a las versiones heredadas de sudo 1.8.2 hasta 1.8.31p2 y a las versiones estables 1.9.0 hasta 1.9.5p1. Esta falla de desbordamiento de búfer basado en montón se...

The vulnerability of DesktopServicesHelper on macOS operating systems allows a hacker to increase their privileges.

The vulnerability of DesktopServicesHelper in macOS operating systems is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to gain increased privileges...

Guide-and-theoretical-code-for-CVE-2023-35674

Guide-and-theoretical-code-for-CVE-2023-35674 Guía y código teórico para CVE-2023-35674 Debido a que Android está fuera de mi liga, por favor usa esto como una visión general desde mi punto de vista sobre cómo explotaría este CVE. Los fragmentos de código son solo esqueletos, por favor ayuda : As...

phpstan

PHPStan - Herramienta de Análisis Estático de PHP PHPStan se centra en encontrar errores en tu código sin ejecutarlo realmente. Detecta clases enteras de errores incluso antes de que escribas pruebas para el código. Acerca PHP a los lenguajes compilados en el sentido de que la corrección de cada...

failpoint

failpoint Una implementación de failpoints para Golang. Los failpoints se utilizan para añadir puntos de código donde se pueden inyectar errores de forma controlada por el usuario. Un failpoint es un fragmento de código que solo se ejecuta cuando el failpoint correspondiente está activo. Inicio...

ThreatIngestor

Utilidades de ThreatIngestor Scripts para mejorar el uso de ThreatIngestor y ayudar a minimizar errores. Todos los scripts contienen el siguiente argumento opcional para permitir una mayor verbosidad en stdout: python3 scripts/ -v Una lista rápida de todos los scripts disponibles: Script| Ejemplo...

Microfinance-Management-System-V1.0-SQL-Injection-Vulnerability-Unauthenticated

Microfinance Management System V1.0 Vulnerabilidad de Inyección SQL No autenticado 1. Descripción: Microfinance Management System permite la Inyección SQL a través del parámetro 'customernumber' en /mims/updatecustomer.php. Explotar este problema podría permitir a un atacante comprometer la...

CVE-2025-6082

CVE-2025-6082 PoC de Divulgación de Ruta Completa Autor : Byte Reaper Telegram : @ByteReaper0 CVE : CVE-2025-6082 Vulnerabilidad : Divulgación de Ruta Completa CWE-200 Descripción Este PoC explota un fallo de Divulgación de Ruta Completa en el plugin de WordPress Birth Chart Compatibility version...