Important: Red Hat Security Advisory: kernel security update

An update for kernel is now available for Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

extended-xss-search

Extended XSS Searcher and Finder This is the extended version based on the initial idea already published as "xssfinder". This private version allows an attacker to perform not only GET but also POST requests. Additionally its possible to proxy every request through Burp or another tunnel. First...

physical-analyzer-scripts

physical-analyzer-scripts Scripts de Python de Cellebrite Physical Analyzer para ayudar a los analistas con funcionalidad extendida...

pysqli

PySQLi - Python SQL injection framework 1. Overview PySQLi is a python framework designed to exploit complex SQL injection vulnerabilities. It provides dedicated bricks that can be used to build advanced exploits or easily extended/improved to fit the case. 2. Why another SQLi framework ? Simple...

extended-ssrf-search

Extended ssrf search This tool search for SSRF using predefined settings in different parts of a request path, host, headers, post and get parameters. First step Rename example.app-settings.conf to app-settings.conf and adjust settings. The most important setting is the callback url. I recommend ...

CVE-2023-2640-32629

Escalada de privilegios en Ubuntu: CVE-2023-2640 y CVE-2023-32629 Esta es una vulnerabilidad de escalada local de privilegios que afecta a ciertos kernels de Ubuntu. Permite a usuarios sin privilegios establecer atributos extendidos privilegiados en archivos montados, omitiendo las comprobaciones...

LAPSToolkit

LAPSToolkit Functions written in PowerShell that leverage PowerView to audit and attack Active Directory environments that have deployed Microsoft's Local Administrator Password Solution LAPS. It includes finding groups specifically delegated by sysadmins, finding users with "All Extended Rights"...

badecparams

BADECPARAMS Prueba de concepto para CVE-2020-0601. badecparams.py genera una autoridad de certificación intermedia que explota la vulnerabilidad y luego emite certificados Authenticode y TLS Los certificados TLS tienen Validación Extendida en Microsoft Edge e Internet Explorer. httpd.py sirve el...

CVE-2026-97439

A flaw was found in the Linux kernel's NTFS3 file system. A local user can cause a Denial of Service DoS by manipulating extended file attributes on a mounted NTFS volume. Improper attribute handling clears internal compression flags without synchronizing file mapping operations, triggering a...

CVE-2021-3493-Exploit

CVE-2021-3493-Exploit Una prueba de concepto de escalada de privilegios local para CVE-2021-3493, escrita en C. 📌 Descripción Este repositorio contiene una implementación en C del exploit para CVE-2021-3493. Esta es una vulnerabilidad de Escalada de Privilegios Local LPE en la implementación de...

Important: Red Hat Security Advisory: kpatch-patch-5_14_0-570_116_1, kpatch-patch-5_14_0-570_135_1, kpatch-patch-5_14_0-570_39_1, kpatch-patch-5_14_0-570_66_1, and kpatch-patch-5_14_0-570_94_1 security update

An update for multiple packages is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

CVE-2026-62911

CVE-2026-62911 Pre-auth RCE on Microsoft Exchange Server. No credentials needed. Orange Tsai DEVCORE used this at Pwn2Own Berlin 2026 as part of a 3-bug chain. $200,000 prize, full SYSTEM takeover. What it does Exchange exposes MailboxReplicationProxyService MRSProxy on two paths. One of them sit...

CVE-2026-98133

A flaw was found in the Linux kernel's NTFS file system implementation. When an error occurs while setting an extended attribute EA, the kernel prematurely clears the flag indicating that extended attributes are present. A local user can exploit this vulnerability by triggering a failed extended...

macOSTriageCollectionScript

macOSTriageCollectionScript Un script de recopilación de datos de triaje para macOS que utiliza sysdiagnose con algunas adiciones para reunir datos de triaje útiles para investigaciones. ¿Qué recopila el script? Los datos recopilados incluyen: sysdiagnose , una utilidad presente en varios sistema...

CVE-2025-13486

CVE-2025-13486 explotación Plugin ACF Extended para WordPress — Ejecución Remota de Código y Escalada de Privilegios Explotación de la CVE-2025-13486 descubierta por Marcin Dudek dudekmar ⚠️ Aviso legal Este repositorio se proporciona únicamente con fines de investigación y seguridad defensiva. El...

CVE-2026-64705

CVE-2026-64705 — Desbordamiento de montón del kernel en xattr de HFS macOS Análisis de causa raíz y prueba de concepto para CVE-2026-64705, un desbordamiento de búfer en la extensión del kernel HFS corregido en macOS Sonoma 14.8.7 HT127117: HFS — Impacto: una app podría causar una terminación...

CVE-2026-8809

CVE-2026-8809 Advanced Custom Fields: Extended = 0.9.2.5 - Escalada de Privilegios No Autenticada mediante Bypass de Validación al Parámetro 'acfpostid' Esta vulnerabilidad de seguridad crítica CVSS 9.8 afecta a todas las versiones del popular plugin de WordPress Advanced Custom Fields: Extended...

CVE-2024-13184

CVE-2024-13184 El Ultimate WordPress Toolkit – WP Extended = 3.0.12 - Inyección SQL No Autenticada a través del Módulo de Intentos de Inicio de Sesión Descripción El plugin The Ultimate WordPress Toolkit – WP Extended para WordPress es vulnerable a una inyección SQL basada en tiempo a través del...

cve-2025-13486-vuln-setup

CVE-2025-13486 Entorno de prueba vulnerable Configuración Docker de una sola vez para probar la vulnerabilidad RCE de ACF Extended. Inicio rápido 1. Download plugins run once ./download-plugins.sh 2. Start environment docker-compose up -d --build 3. Wait 30 seconds for setup, then test nuclei -t...

CVE-2026-80467

███████╗███████╗███╗ ██╗██╗███╗ ███╗ █████╗ ███╗ ██╗ ██╔════╝██╔════╝████╗ ██║██║████╗ ████║██╔══██╗████╗ ██║ ███████╗█████╗ ██╔██╗ ██║██║██╔████╔██║███████║██╔██╗ ██║ ╚════██║██╔══╝ ██║╚██╗██║██║██║╚██╔╝██║██╔══██║██║╚██╗██║ ███████║███████╗██║ ╚████║██║██║ ╚═╝ ██║██║ ██║██║ ╚████║...