msmap

MSMAP Msmap es un generador de WebShells en Memoria. Compatible con varios Contenedores, Componentes, Codificadores, WebShell / Proxy / Killer y Clientes de Gestión. 简体中文 La idea detrás I, La idea detrás II, La idea detrás III Características WIP Función Menú Dinámico Compilación Automática Gener...

nishang

Nishang Nishang es un conjunto de scripts y payloads que permite el uso de PowerShell para seguridad ofensiva, pruebas de penetración y red teaming. Nishang es útil durante todas las fases de las pruebas de penetración. Por Nikhil Mittal Fundador de Altered Security - ¡Formación práctica en red...

CVE-2026-17544

CVE-2026-17544 — PHP bcmath OOB write → universal memory-only RCE A weaponized proof-of-concept for CVE-2026-17544 , an out-of-bounds write in PHP's rewritten bcmath extension bcstr2num. This turns the publicly known DoS-only crash into a full, universal, memory-only remote code execution primiti...

cve-2024-0519-rca-research

CVE-2024-0519 — RCA Research Root cause analysis artifacts for CVE-2024-0519 V8 out-of-bounds memory access, Chrome 120, exploited in the wild. Fix : e0f2a195d87c9a06685121e0e783efd92d030df3 — Toon Verwaest, 2024-01-12 V8 version studied : 12.0.267.16 fbc4963bbff, ARM64 macOS Files Path|...

ios-malicious-bithunter

iOS Malicious Bit Hunter Resumen iOS Malicious Bit Hunter es un motor de detección de complementos maliciosos para aplicaciones iOS. Puede analizar el encabezado del archivo macho de la biblioteca dinámica dylib inyectada basándose en el tiempo de ejecución, y puede realizar análisis de...

CryKeX

Propiedades: Multiplataforma Minimalismo Simplicidad Interactividad Compatibilidad/Portabilidad Independiente de la aplicación Envoltorio de procesos Inyección de procesos Dependencias: Unix - debería funcionar en cualquier SO basado en Unix BASH - todo el script privilegios root opcional...

CVE-2012-6422

Exynos Exploit This is a POC for exploiting the /dev/exynos-mem vulnerability introduced in earlier samsung phones. It was done out of interest in kernel vulnerability research and as a part of a CTF challenge. The Exploit The vulnerability introduced in these phones is the permissions for the...

MongoBLEED---CVE-2025-14847-POC-

MongoBLEED---CVE-2025-14847-POC- This repo contains my python script version of CVE-2025-14847 MongoBleed Description The script simulates a malicious request by sending a forged decompression size field. If the server is vulnerable, it will return adjacent data from the heap memory. Prerequisite...

CVE-2026-14854

The WooCommerce Bookings WordPress plugin before 3.11.0 does not limit a user-supplied value before using it to allocate memory in one of its unauthenticated AJAX actions, allowing unauthenticated attackers to exhaust server memory and cause a Denial of Service with a single request...

gpg_reaper

GPG Reaper TL;DR: Obtener/Robar/Restaurar Claves Privadas GPG de la caché/memoria de gpg-agent Este POC demuestra un método para obtener claves privadas GPG de la memoria de gpg-agent en Windows. Normalmente esto solo debería ser posible dentro de un período de 10 minutos valor de...

memoro

Memoro Memoro es un perfilador de montón heap altamente detallado. Memoro no solo te muestra dónde y cuándo tu programa realiza asignaciones de montón, sino que también te mostrará cómo tu programa realmente utilizó esa memoria. Memoro recopila información detallada sobre los accesos al montón,...

CVE-2026-98248

A flaw was found in the Linux kernel's arm64 per-CPU memory operations. When performing atomic operations on 8-bit and 16-bit variables using Large System Extensions LSE, the assembly instructions fail to specify the proper size suffix, erroneously reading and writing 32 bits of memory. A local...

MemProcFS-Analyzer

MemProcFS-Analyzer MemProcFS-Analyzer.ps1 is a PowerShell script utilized to simplify the usage of MemProcFS and to optimize your memory analysis workflow. MemProcFS - The Memory Process File System by Ulf Frisk https://github.com/ufrisk/MemProcFS Features: Fast and easy memory analysis! You can...

CVE-2026-98247

A flaw was found in the Linux kernel's Bluetooth subsystem. When processing responses for supported codecs, the parser fails to verify that adequate buffer space remains before reading the vendor codec count. A malicious or malfunctioning Bluetooth controller can supply a truncated response packe...

patriot

Patriot Piccolo progetto di ricerca per il rilevamento di varie tecniche stealth in memoria. Scarica l'ultima release qui. La versione attuale supporta i seguenti rilevamenti: Strutture CONTEXT sospette che puntano a funzioni VirtualProtect. Prende di mira la ricerca di Austin Hudson Foliage e Ek...

CVE-2026-14854

The WooCommerce Bookings WordPress plugin, in versions prior to 3.11.0 , is vulnerable to an unauthenticated Denial of Service (DoS) . The flaw exists because the plugin fails to limit a user-supplied value used for memory allocation within an unauthenticated AJAX action . An unauthenticated atta...

CVE-2026-14854 WooCommerce Bookings < 3.11.0 - Unauthenticated Denial of Service

The WooCommerce Bookings WordPress plugin before 3.11.0 does not limit a user-supplied value before using it to allocate memory in one of its unauthenticated AJAX actions, allowing unauthenticated attackers to exhaust server memory and cause a Denial of Service with a single request...

EUVD-2026-96746

The WooCommerce Bookings WordPress plugin before 3.11.0 does not limit a user-supplied value before using it to allocate memory in one of its unauthenticated AJAX actions, allowing unauthenticated attackers to exhaust server memory and cause a Denial of Service with a single request...

CVE-2026-98310

A flaw was found in the Linux kernel's Intel Xe graphics driver. A local user can cause a Denial of Service DoS by triggering memory reclaim operations while the device is in a runtime-suspended state. This issue occurs because the driver's memory shrinker does not acquire a runtime power...

CVE-2023-38545-sample

Quick description This showcases the cURL CVE-2023-38545. It is as lightweight as I could make it. Setup First, build the Docker Image: docker build . -t cveimage Next, we can simply run the image file, creating a temporary Docker Container which will get deleted once the container is stopped:...