CLSA-2026-1790875447 TuxCare security update for org.springframework.integration (5 CVEs)

TuxCare rebuilt 39 org.springframework.integration packages to address 5 CVEs. Fixed in 5.5.16-tuxcare.1...

CVE-2025-31161

Explotación CVE-2025-31161 INSTALACIÓN 1. git clone https://github.com/cesarbtakeda/CVE-2025-31161.git && cd CVE-2025-31161 2. Modo de uso sudo exploit2.py -h -u HOST -p PORT -tu TARGETUSER -nu NEWUSER -np PASSWORD o 1. Depende de la biblioteca lcurl git clone...

CVE-2021-4034

CVE-2021-4034 Este es un exploit creado para CVE-2021-4034 como POC. Está basado en la información de https://www.qualys.com/2022/01/25/cve-2021-4034/pwnkit.txt. Cómo usarlo: Descarga la carpeta del exploit. Compila prog.c con gcc prog.c Ve a la carpeta GCONVPATH=. y asegúrate de que el archivo...

CVE-2021-42342

CVE-2021-42342 CVE-2021-42342 RCE POC1: solo imprime include include include include static void beforemainvoid attributeconstructor; static void beforemainvoid write1, "Hello World!\n", 14; POC2: reverse shell include include include include char serverip=""; uint32t serverport=7777; static void...

CVE-2023-54404 Zod 4.6.5 Uncontrolled Resource Consumption via Array Validation

Zod schema-validation library through 4.6.5 contains an uncontrolled resource consumption vulnerability that allows attackers to exhaust memory by submitting a large array to an application using an array schema without a length constraint. Attackers can exploit the handleArrayResult parse logic ...

CVE-2025-59489-POC

CVE-2025-59489-POC Prueba de concepto para CVE-2025-59489, la primera de su tipo hasta donde sé. Comprueba si afecta a juegos de Unity en el dispositivo Android. Probado en API26, Android 11, en la versión de Battle Nations del 29 de septiembre de 2025. Solo incluye arm64-v8a , compila...

CVE-2025-24054-24071---Metasploit-Module

CVE-2025-24054/24071 - Metasploit 模块 概述 该漏洞发生在解压 .zip 文件的过程中。当与特制的 .library-ms 文件交互时，Windows 资源管理器会处理内部的 XML 架构，并自动向攻击者控制的远程路径发起 SMB 身份验证请求。 这种行为允许在无需用户进行解压文件之外的任何额外交互的情况下，泄露用户的 NTLM 哈希值。如需查看概念验证，建议访问以下链接：Fluffy - HTB。 ⚠️ 重要说明： 尽管该漏洞最初以 CVE-2025-24071 传播，但目前官方追踪编号为 CVE-2025-24054。 📌 安装 克隆仓库： ❯ git...

PickleScan has multiple stdlib modules with direct RCE not in blocklist

Summarypicklescan v1.0.3 latest does not block at least 7 Python standard library modules that provide direct arbitrary command execution or code evaluation. A malicious pickle file importing these modules is reported as having 0 issues CLEAN scan. This enables remote code execution that bypasses...

CVE-2026-85228

A flaw was found in Deep Java Library. Due to an integer overflow during tensor buffer validation, a remote, unauthenticated attacker can send a crafted tensor payload to trigger out-of-bounds memory access. Successful exploitation can allow an attacker to obtain sensitive data from adjacent...

CLSA-2026-1790872344 TuxCare security update for drupal/core (2 CVEs)

TuxCare rebuilt drupal/core to address 2 CVEs. Fixed in 10.5.12-p1+tuxcare...

0xGUARD

📄 Características Remapeo de módulos Filtrado de subprocesos Ocultamiento de módulos Comprobación de memoria Comprobación de integridad Anti-Inyección de DLL Anti-Depuración Política de procesos Ofuscación de cadenas literales Compatibilidad con Themida/VMProtect ✔️ Dependencias Windows 711 Visual...

CVE-2026-22018-Jenkins-Pipeline-Shared-Library-Code-Execution-via-Grab-

CVE-2026-22018 – Ejecución de código en la biblioteca compartida de Jenkins Pipeline mediante @Grab Código del programa pipeline de Groovy // Jenkinsfile - loads untrusted shared library @Library'evil-library@master' node evilStep CVE-2026-22018 – Ejecución remota de código en la biblioteca...

go-zeek-broker-ws

Biblioteca de interfaz websocket de Zeek Broker para Golang Esta biblioteca implementa la interfaz websocket de Zeek Broker. Se proporcionan funciones auxiliares con asignaciones razonables entre los tipos de Zeek y Go. Uso La biblioteca contiene dos paquetes: encoding encoding modela la estructu...

CLSA-2026-1790870256 TuxCare security update for brace-expansion (1 CVE)

TuxCare rebuilt brace-expansion to address 1 CVE. Fixed in 1.1.14-tuxcare.2...

CLSA-2026-1790870000 TuxCare security update for fast-uri (1 CVE)

TuxCare rebuilt fast-uri to address 1 CVE. Fixed in 3.1.3-tuxcare.3...

CLSA-2026-1790869488 TuxCare security update for brace-expansion (1 CVE)

TuxCare rebuilt brace-expansion to address 1 CVE. Fixed in 1.1.15-tuxcare.2...

CLSA-2026-1790869390 TuxCare security update for @react-native-community (1 CVE)

TuxCare rebuilt 8 @react-native-community packages to address 1 CVE. Fixed in 5.0.1-tuxcare.1...

CLSA-2026-1790868478 TuxCare security update for league/flysystem (1 CVE)

TuxCare rebuilt league/flysystem to address 1 CVE. Fixed in 3.33.0-p1+tuxcare...

CLSA-2026-1790868324 TuxCare security update for adm-zip (1 CVE)

TuxCare rebuilt adm-zip to address 1 CVE. Fixed in 0.5.10-tuxcare.2...

go-cpe

go-cpe Una librería de Go para CPEA Common Platform Enumeration 2.3 go-cpe es una implementación de los algoritmos de Naming y Matching de CPE, tal como se describen en los NIST IR 7695 y 7696. Para la implementación de referencia en Java, consulte:...