CVE-2025-49844_POC

CVE-2025-49844POC POC de CVE-2025-49844 -h ver información de ayuda ··· Redis presenta una vulnerabilidad de ejecución remota de código en scripts Lua CVE-2025-49844. La causa principal de esta vulnerabilidad es un defecto de diseño en la interacción entre el motor de scripts Lua de Redis y la...

CVE-2026-24688

CVE-2026-24688 - pypdf - Vulnerabilidad DoS por Referencia Circular Este repositorio incluye código de prueba de concepto para desencadenar CVE-2026-24688. Resumen Vulnerabilidad crítica de Denegación de Servicio en la lógica de análisis de esquemas marcadores de pypdf. Al procesar un PDF con...

CVE-2026-107299 msgpack5: Reserved byte can cause unbounded stream buffering

msgpack5 is a msgpack v5 implementation for node.js and the browser. Prior to 6.1.0, the streaming decoder treats the reserved MessagePack byte 0xc1 as incomplete input instead of invalid input. When 0xc1 begins a stream, subsequent data remains buffered while the decoder waits for bytes that...

EUVD-2026-95110

msgpack5 is a msgpack v5 implementation for node.js and the browser. Prior to 6.1.0, the streaming decoder treats the reserved MessagePack byte 0xc1 as incomplete input instead of invalid input. When 0xc1 begins a stream, subsequent data remains buffered while the decoder waits for bytes that...

CVE-2026-107299

The msgpack5 library, a MessagePack v5 implementation for Node.js and browsers, is vulnerable in versions prior to 6.1.0 . The streaming decoder incorrectly treats the reserved MessagePack byte 0xc1 as incomplete input rather than invalid input. When this byte begins a stream, subsequent data rem...

TomcatKiller-CVE-2025-31650

TomcatKiller-CVE-2025-31650 Una herramienta diseñada para detectar la vulnerabilidad CVE-2025-31650 en Apache Tomcat versiones 10.1.10 a 10.1.39 Esta vulnerabilidad permite a un atacante provocar una fuga de memoria enviando solicitudes HTTP/2 especialmente manipuladas con encabezados de priorida...

CVE-2026-21986-VirtualBox-DoS

CVE-2026-21986 - Agotamiento de Memoria del Kernel en Carpetas Compartidas de VirtualBox DoS Resumen Este repositorio contiene una prueba de concepto y un informe técnico sobre CVE-2026-21986, una vulnerabilidad de denegación de servicio en Oracle VM VirtualBox. El problema existe en la interfaz...

patriot

Patriot Small research project for detecting various kinds of in-memory stealth techniques. Download the latest release here. The current version supports the following detections: Suspicious CONTEXT structures pointing to VirtualProtect functions. Targets research by Austin Hudson Foliage and Ek...

patriot

Patriot Pequeño proyecto de investigación para detectar diversas técnicas de sigilo en memoria. Descargue la última versión aquí. La versión actual admite las siguientes detecciones: Estructuras CONTEXT sospechosas que apuntan a funciones VirtualProtect. Apuntando a la investigación de Austin...

kur

kur Un código que simplemente ofrece la capacidad de leer/escribir memoria en modo kernel desde el modo usuario utilizando un driver firmado vulnerable. Simplemente utiliza MmCopyVirtualMemory, una API no documentada aunque una de las más comunes, en modo kernel para que puedas leer/escribir...

CVE-2026-107294 Pydantic AI: Unbounded memory use when downloading remote content via web_fetch or FileUrl

Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. From 1.77.0 until 1.107.2 and 2.24.0, webfetchtool, the WebFetch local fallback, and remote FileUrl media downloads buffer the complete HTTP response body before enforcing content-size controls. An...

EUVD-2026-95104

Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. From 1.77.0 until 1.107.2 and 2.24.0, webfetchtool, the WebFetch local fallback, and remote FileUrl media downloads buffer the complete HTTP response body before enforcing content-size controls. An...

CVE-2026-107294

Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. From 1.77.0 until 1.107.2 and 2.24.0, webfetchtool, the WebFetch local fallback, and remote FileUrl media downloads buffer the complete HTTP response body before enforcing content-size controls. An...

CVE-2026-107294

The Pydantic AI Python agent framework is vulnerable to an unbounded memory exhaustion issue in versions 1.77.0 through 1.107.2 and 2.24.0 . The web_fetch_tool , WebFetch local fallback , and remote FileUrl media downloads (including ImageUrl , DocumentUrl , VideoUrl , and AudioUrl ) buffer the e...

kernel: vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu()

A flaw was found in the Linux kernel's Virtual Extensible LAN VXLAN module. This vulnerability occurs because a cached IP header pointer is improperly reused after a Path Maximum Transmission Unit PMTU check. When the packet's head is modified during the PMTU check, the old cached IP header point...

kernel: nvme-tcp: fix host memory disclosure on R2T for a read command

A flaw was found in the Linux kernel's NVMe Non-Volatile Memory Express over TCP nvme-tcp component. A malicious NVMe controller can exploit this vulnerability by sending a Ready to Transfer R2T command for a read request. The host system, failing to properly validate the request direction, will...

kernel: tunnels: do not assume transport header in iptunnel_pmtud_check_icmp()

A flaw was found in the Linux kernel's tunnels module. This vulnerability occurs when the iptunnelpmtudcheckicmp function is called without the skb transport header being properly set. An attacker could exploit this condition to trigger an out-of-bound memory access, which may lead to system...

kernel: KVM: arm64: Reassign nested_mmus array behind mmu_lock

A flaw was found in the Linux kernel's KVM Kernel-based Virtual Machine for arm64 architectures. An issue in the reallocation of the nestedmmus array allows a process to access freed memory. This memory corruption vulnerability could enable a local attacker to escalate privileges or cause a denia...

kernel: netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack()

A flaw was found in the Linux kernel's netfilter connection tracking subsystem. The TCP option processing mechanism improperly assumes memory alignment when reading packet headers. A remote attacker could exploit this vulnerability by sending crafted TCP packets with misaligned SACK options throu...

CVE-2022-21894

baton drop CVE-2022-21894: Vulnerabilidad de omisión de la característica de seguridad de Secure Boot Las aplicaciones de arranque de Windows permiten que la configuración truncatememory elimine bloques de memoria que contienen rangos "persistentes" de datos serializados del mapa de memoria, lo q...