rootsh

rootsh rootsh is a local privilege escalation targeting OS X Yosemite 10.10.5 build 14F27. It exploits CVE-2016-1758 and CVE-2016-1828, two vulnerabilities in XNU that were patched in OS X El Capitan 10.11.4 and 10.11.5. rootsh will not work on platforms with SMAP enabled. CVE-2016-1758...

dp_cryptomg

dpcryptomg Another tool for exploiting CVE-2017-9248, a cryptographic weakness in Telerik UI for ASP.NET AJAX dialog handler. Exploitation leads to access to a file manager utility capable up uploading arbitrary files, usually leading to remote code execution. The vulnerability is caused by an...

CVE-2021-45067

CVE-2021-45067 This bug was Out of Bounds Read caused by treating ANSI string as Unicode which can be exploited to leak sensitive information from the sandboxed adobe reader process. Blog Adobe Reader - XFA - ANSI - Unicode Confusion Information Leak Advisory CVE-2021-45067 Demo...

teatime

Teatime - Un Framework de Ataque RPC para Blockchain .. image:: https://img.shields.io/pypi/v/teatime.svg :target: https://pypi.python.org/pypi/teatime .. image:: https://img.shields.io/travis/dmuhs/teatime.svg :target: https://travis-ci.com/dmuhs/teatime .. image::...

appspec-yaml-leaks

Badges License MIT Installation 1...

LInux-Kernel-InfoLeak-6.12.-Leveraged-to-do-cross-container-info-leak.-

LInux-Kernel-InfoLeak-6.12.-Leveraged-to-do-cross-container-info-leak.- POC shows how to leak postgresql stuff cause hugefile sub-system. Based on https://x.com/spendergrsec/status/1993794163880718700?s=20...

CVE-2025-48734

CVE-2025-48734: Apache Commons BeanUtils – enum declaringClass Information Leak & RCE Chain For educational and authorized security research purposes only. This repository provides a controlled lab environment to reproduce the CVE-2025-48734 vulnerability in Apache Commons BeanUtils and explore h...

GitMonitor

GitMonitor GitMonitor One way to continuously monitor sensitive information that could be exposed on Github Summary I know that there are many other tools available for finding sensitive information currently leaked on Github, I myself still use some of them. However, I think they still lack some...

CVE-2026-97496

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix OOB memory exposure in getwavestate The getwavestate function for v9 trusts cphqdcntlstacksize and cphqdcntlstackoffset values read directly from the MQD, which are written by GPU microcode and fully...

EUVD-2026-86094

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix OOB memory exposure in getwavestate The getwavestate function for v9 trusts cphqdcntlstacksize and cphqdcntlstackoffset values read directly from the MQD, which are written by GPU microcode and fully...

CVE-2026-97476

A vulnerability in the Linux kernel allows an unprivileged caller in a fresh user namespace and network namespace to access sensitive information via the RDS_INFO_ * family of getsockopt(2) options. Because the rds_info_getsockopt() handler lacked network namespace (netns) or capable() checks, it...

EUVD-2026-86035

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: fix SMI event cross-process information leak kfdsmievenabled skips the suser privilege check when pid=0. PROCESSSTART, PROCESSEND, and VMFAULT events are emitted with pid=0 while carrying another process's PID and...

CVE-2026-97422

A vulnerability in the Linux kernel 's drm/amdkfd component allows a cross-process information leak regarding SMI events. The issue arises because the kfd_smi_ev_enabled() function skips user privilege checks when pid=0. Consequently, PROCESS_START , PROCESS_END , and VMFAULT events are emitted w...

EQGRP_Lost_in_Translation

EQGRP Lost in Translation Decrypted content of odd.tar.xz.gpg, swift.tar.xz.gpg and windows.tar.xz.gpg Downloaded from https://yadi.sk/d/NJqzpqo3GxZA4 Original post from the ShadowBrokers https://steemit.com/shadowbrokers/@theshadowbrokers/lost-in-translation windows : contains Windows exploits,...

cve-2024-12085

CVE-2024-12085 Infoleak exploit Note, this exploit is not versatile! Target module and checksums are hardcoded. Automatic checksum calculation has yet to be implemented. Miscellaneous files port-forwarding.py is modified from https://gist.github.com/WangYihang/e7d36b744557e4673d2157499f6c6b5e. It...

opencast-CVE-2021-43821-env

opencast-CVE-2021-43821-env opencast CVE-2021-43821 sensitive information leak vulnerability environment Reproduction article: https://mp.weixin.qq.com/s/fjna3mHraPmEy1b1wnEYrQ...

RastLeak

RastLeak Tool to automatic leak information using Hacking with engine searches Google and Bing. How to install root@kitploit: git clone https://github.com/n4xh4ck5/RastLeak.git Install dependencies with pip: root@kitploit: pip install -r requirements.txt To install wget: root@kitploit: sudo pip...

CVE-2019-7711

🛡️ CVE-2019-7711: Green Hills INTEGRITY RTOS Information Leak 📌 Repositorio de documentación técnica y recursos sobre la vulnerabilidad de Format String en el servidor Telnet de Green Hills INTEGRITY RTOS v5.0.4. 📖 Descripción General La vulnerabilidad afecta al servidor IPCOMShell Telnet de...

CVE-2018-4901

CVE-2018-4901 crash poc & Leak info PoC details see: https://bigric3.blogspot.com/2018/03/cve-2018-4901-analysisadobe-acrobat.html...

freebsd-dirent-info-leak-bugs

How did I find the bugs? 1. Randomly decide to audit the filesystems in FreeBSD 2. Do some research and find that the default filesystem in use is a combination of FFS and UFS 3. Spend some time auditing ufscreate and find 0 bugs 4. Go here and look through the commit history for the UFS file...