393715 matches found
CVE-2026-107676
FFmpeg versions through 9.0.2 are vulnerable to an uninitialized memory disclosure within the av_dynamic_hdr_plus_to_t35() function. When the tone_mapping_flag is set to 0, the function fails to initialize up to three payload bytes. An attacker can exploit this by providing crafted Matroska T.35 ...
IRTriage
Incident Response Triage: Scripted collection of system information valuable to a Forensic Analyst. IRTriage will automatically "Run As ADMINISTRATOR" in all Windows versions except WinXP. The original source was Triage-ir v0.851 an Autoit script written by Michael Ahrendt. Unfortunately Michael'...
meterssh
Tool Name: MeterSSH Written by: David Kennedy Company: TrustedSec Website: https://www.trustedsec.com Twitter: @TrustedSec, @HackingDave MeterSSH is a way to take shellcode, inject it into memory then tunnel whatever port you want to over SSH to mask any type of communications as a normal SSH...
AmdRyzenMasterCheat
ECPRO-LAN Anti-Cheats: FACEIT, ESEA w/ custom version Early 2019 - late 2020. R.I.P. https://h0mbre.github.io/RyzenMasterCVE/ Requirements: Windows 10 Enterprise 1607 LTSB with all updates AMD Ryzen CPU Motherboard B350-B450 B550 client is bugged Logitech GHUB installed for mouse input Older gen...
PythonMemoryModule
PythonMemoryModule pure-python implementation of MemoryModule technique to load a dll or unmanaged exe entirely from memory "Python memory module" AI generated pic - hotpot.ai What is it PythonMemoryModule is a Python ctypes porting of the MemoryModule technique originally published by Joachim...
CVE-2025-39913
CVE-2025-39913 - Linux Kernel eBPF SOCKMAP UAF Author: Byte Reaper My platform :https://www.bytrep.com/ Description This repository contains a technical proof-of-concept for CVE-2025-39913, a vulnerability in the Linux kernel's tcpbpfsendverdict function. When bpfmsgcorkbytes fails to allocate...
CVE-2026-65650
CVE-2026-65650 — PoC: DoS autenticado en la subida de avatares de Elgg Denegación de servicio autenticada en la función de subida de avatares de Elgg mediante dimensiones de imagen sin límites, lo que provoca el agotamiento de la memoria de GD. Afectado: Elgg saveIconFromUploadedFile'avatar' retu...
FreeMOCA
Trayectoria de Aprendizaje Continuo como Memoria para la Consolidación sin Repetición en el Análisis de Código Malicioso !NOTE Esta es la implementación oficial del artículo Continual Learning Trajectory as Memory for Replay-Free Consolidation in Malicious Code Analysis. Pipeline de FreeMOCA...
CVE-2026-14905
IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 is vulnerable to an XML external entity injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive...
BrokenType
BrokenType BrokenType es un conjunto de herramientas diseñadas para probar la robustez y seguridad del software de rasterización de fuentes, especialmente bases de código propensas a problemas de corrupción de memoria escritas en C/C++ y lenguajes similares. Consta de los siguientes componentes:...
CVE-2026-105405
ImageMagick before 6.9.13-56 and 7.x before 7.1.2-31 contains an invalid memory free vulnerability in the MVG decoder. Attackers can supply a crafted MVG image for processing to trigger the invalid free and crash the application, causing a denial of service...
ZeroRAT
ZeroRAT Introducción Herramienta de control remoto RAT para Windows. El cliente solo necesita ejecutar una única instrucción; utiliza programas nativos de Windows para ejecutarse, no escribe archivos en el disco y cuenta con características naturales de evasión de antivirus. Deja de funcionar tra...
CVE-2024-33901-ProofOfConcept
CVE-2024-33901-ProofOfConcept Short program that demonstrates the vulnerability CVE-2024-33901 in KeePassXC version 2.7.7 The report for the class might need the source code linked, so that's why I created the repo for this How to replicate the vulnerability 1. Open KeePassXC and authenticate the...
EUVD-2026-95075
Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. From 1.77.0 until 1.107.7 and 2.52.0, the local webfetchtool and the WebFetch local fallback can consume excessive CPU and memory during HTML-to-Markdown conversion of attacker-controlled HTML...
CVE-2026-107570
A flaw was found in mutt. When an email is processed as a template, an out-of-bounds write vulnerability in the convertfilefromto function can be triggered by a specially crafted Content-Type header. A remote attacker could entice a user to use a malicious email message as a template, potentially...
CVE-2026-98179
A flaw was found in the Linux kernel's AMD GPU amdgpu driver. This issue can lead to a Denial of Service DoS caused by resource exhaustion during device removal or driver unloading. Because the cleanup routine fails to release mapped input/output I/O register memory, a privileged local user could...
peda
peda PEDA - Python Exploit Development Assistance for GDB Key Features: Enhance the display of gdb: colorize and display disassembly codes, registers, memory information during debugging. Add commands to support debugging and exploit development for a full list of commands use peda help: aslr --...
CVE-2026-98183
A flaw was found in the Linux kernel's mac80211 wireless networking subsystem. An adjacent attacker can trigger an out-of-bounds read by transmitting specially crafted wireless mesh network frames containing empty Path Request PREQ elements. This issue occurs because the kernel reads header field...
RDGScanner
Escáner para CVE-2020-0609 y CVE-2020-0610 Un escáner de prueba de concepto para comprobar si un servidor de puerta de enlace RDP tiene las vulnerabilidades CVE-2020-0609 y CVE-2020-0610. Probado en: Windows Server 2012 x64 Windows Server 2016 x64 Windows Server 2019 x64 Descargo de responsabilid...