7301 matches found
Kernel-Exploits
内核漏洞利用 内核漏洞利用代码仓库...
local-exploits
本地漏洞利用 各类本地漏洞利用 CVE-2020-8793 opensmptd-makemap-lpe —— Fedora 31 OpenSMTPD makemap 本地 root 漏洞利用。 代码大部分取自 Qualys 安全公告（2020-02-24），针对 CVE-2020-8793。 opensmtpd：非特权攻击者读取任意文件可导致信息泄露或权限提升 fedora-all CVE-2020-7247 root66 OpenBSD 6.6 OpenSMTPD 6.6 本地 root 漏洞利用。 代码大部分取自 Qualys PoC（2020-01-28），针对...
exploits
Este repositorio no tiene un README...
win-exp-
描述 该工具将目标的补丁级别与 Microsoft 漏洞数据库进行比较，以检测目标上可能缺失的补丁。如果存在针对缺失公告的公开漏洞利用程序和 Metasploit 模块，它还会通知用户。 它需要 Windows 主机的 'systeminfo' 命令输出，以便与 Microsoft 安全公告数据库进行比较，并确定主机的补丁级别。 它能够通过 --update 标志从 Microsoft 自动下载安全公告数据库，并将其保存为 Excel 电子表格。...
research
安全研究 本仓库专门用于记录我所发现的安全漏洞（CVE）。该仓库包含所发现漏洞的详细技术文档、概念验证（PoC）漏洞利用代码与分析。 关于 本仓库汇总了我发现并研究的所有 CVE，包括： 每个漏洞的详细技术分析 用于教育目的的概念验证（PoC）漏洞利用代码 攻击场景与影响评估 修复状态与补丁信息 官方 CVE 记录的相关引用 已发现的 CVE CVE-2026-26158 - BusyBox 硬链接绕过（9.3 严重） CVE-2026-26157 - BusyBox 路径遍历（7.8 高危） 警告 警告： 本仓库中的漏洞利用代码仅供教育与研究目的使用 。...
Ironsquirrel
IRONSQUIRREL 本项目旨在以加密方式向受害者浏览器传递浏览器漏洞利用代码。采用椭圆曲线 Diffie-Hellman（secp256k1）进行密钥协商，并使用 AES 进行加密。 通过以加密方式向受害者传递漏洞利用代码（和 shellcode），攻击无法被重放。同时，HTML/JS 源代码经过加密，从而显著增加了逆向分析漏洞利用代码的难度。 如果您不明白我在说什么，请搜索“如何隐藏您的浏览器 0-day 漏洞”，并查看我的演讲。或者可以在 YouTube 上观看：https://www.youtube.com/watch?v=eyMDd98uljI 或者查看 SlideShar...
Jenkins - Remote Command Injection
Jenkins 2.153 and earlier and LTS 2.138.3 and earlier are susceptible to a remote command injection via stapler/core/src/main/java/org/kohsuke/stapler/MetaClass.java that allows attackers to invoke some methods on Java objects by accessing crafted URLs that were not intended to be invoked this wa...
Whetstone
Whetstone On-device JIT enabler for iOS 12 / 13, all devi...
Linux Distros Unpatched Vulnerability : CVE-2026-91838
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in NetworkManager-sstp, the SSTP VPN plugin for NetworkManager. A local unprivileged user can exploit this vulnerability by embedding special...
Exploits + Shellcode + GHDB v2026-09-12
The Exploit Database Git Repository This is an official repository of The Exploit Database, a project sponsored by Offensive Security. Our repositories are: Exploits & Shellcodes: gitlab.com/exploit-database/exploitdb Binary Exploits: gitlab.com/exploit-database/exploitdb-bin-sploits Papers:...
Astra Linux – Vulnerability in Thunderbird
The ms-msdt, search, and search-ms protocols deliver content to Microsoft applications, bypassing the browser, when a user accepts a prompt. These applications have known vulnerabilities that have been exploited in the wild although we know of none exploited through Thunderbird. Therefore, in thi...
Linux Distros Unpatched Vulnerability : CVE-2026-89087
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The cstruct package before 6.3.0 for OCaml mishandles indexes. CVE-2026-89087 Note that Nessus relies on the presence of the package as reported by the vendor...
KLA91275 DoS vulnerability in Microsoft Browser
Denial of service vulnerability was found in Microsoft Browser. Malicious users can exploit this vulnerability to cause denial of service. Original advisories CVE-2026-85046 Exploitation Public exploits exist for this vulnerability. Related products Microsoft-Edge CVE list CVE-2026-85046 unknown...
Oracle Linux 10 : glibc (ELSA-2026-42694)
The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-42694 advisory. - CVE-2026-5425: Fix out-of-bounds write via TSIG record processing RHEL-180652, RHEL-185612 Tenable has extracted the preceding description block...
Linux Distros Unpatched Vulnerability : CVE-2026-78123
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - strongSwan 5.0.2 through 6.0.7 has an Expired Pointer Dereference in PKCS7 parsing in the openssl plugin. CVE-2026-78123 Note that Nessus relies on the presence...
Linux Distros Unpatched Vulnerability : CVE-2026-78129
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - strongSwan 4.6.2 through 6.0.7 has an infinite loop in PKCS5 decryption. CVE-2026-78129 Note that Nessus relies on the presence of the package as reported by th...
Linux Distros Unpatched Vulnerability : CVE-2026-78124
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - strongSwan 5.0.2 through 6.0.7 allows PKCS7 certificate enumeration in the openssl plugin that leads to a lack of release of memory after its effective lifetime...