OHTS

OHTS CVE-2017-8759 | Vulnerabilidade de Execução Remota de Código no .NET Framework 1. Introdução Uma vulnerabilidade de execução remota de código existe quando o Microsoft .NET Framework processa entrada não confiável. Um atacante que explorasse com sucesso esta vulnerabilidade em software que u...

CVE-2023-22098

CVE-2023-22098 - Oracle VM VirtualBox 7.0.10 r158379 Escape Ei, magos de VM, Em 2023, o notável pesquisador de segurança Andy Nguyen @TheFlow0 descobriu múltiplas vulnerabilidades no Virtio-net para o VirtualBox. Todos os créditos a ele pelo seu trabalho incrível. Este repositório contém o exploi...

CVE-2023-21768-dotnet

CVE-2023-21768 - Dotnet Porte Dotnet / c do exploit AFD-for-WinSock-EoP Referências: https://github.com/zoemurmure/CVE-2023-21768-AFD-for-WinSock-EoP-exploit https://github.com/chompie1337/WindowsLPEAFDCVE-2023-21768 Por quê? Às vezes você não pode usar binários compilados. Como fazer? Execute o...

CVE-2019-18935

Template Nuclei CVE-2019-18935 - Submissão de Bounty Este repositório contém um template Nuclei completo e validado para detecção da CVE-2019-18935 RCE por desserialização no Telerik UI for ASP.NET AJAX, criado para o programa de bounty da ProjectDiscovery. 🎯 Visão Geral CVE-2019-18935 é uma...

CVE-2025-24054-PoC

CVE-2025-24054 Prova de Conceito Uma simples Prova de Conceito para CVE-2025-24054 – Vulnerabilidade de Divulgação de Hash NTLM do Windows Library .library-ms. ⚠️ Apenas para Uso Educacional e em Laboratório Autorizado Descrição CVE-2025-24054 permite que um atacante force um sistema Windows a...

Invoke-noPac

Invoke-noPac O assembly .Net é baseado no meu fork https://github.com/ricardojba/noPac que possui algumas alterações de código para melhorar o original. PowerSharpPack estilo carregador de assembly .Net para o CVE-2021-42287 - CVE-2021-42278 Scanner & Exploit noPac. Uso: Set-PSReadlineOption...

kygocera

kygocera CVE-2022-1026 CVE-2022-1026 https://www.rapid7.com/blog/post/2022/03/29/cve-2022-1026-kyocera-net-view-address-book-exposure/ के लिए Rapid7 PoC का बेहतर गोलांग संस्करण श्रेय: Aaron Herndon / https://twitter.com/ac3lives नमस्ते: https://github.com/D4RKMATT3R CVE-2022-1026 इंस्टॉल git clon...

CVE-2026-87078

A memory leak flaw was found in the XS backend of the Perl Net::IDN::Punycode module part of the Net-IDN-Encode distribution. The decodepunycode function allocates a scalar output buffer before validating the Punycode input. The buffer is released only on the success path, so each of the three...

CVE-2023-23397

Prova de Conceito do CVE-2023-23397 Este é um exploit de prova de conceito PoC para o CVE-2023-23397, uma vulnerabilidade no cliente Windows Microsoft Outlook. Pré-requisitos Python 3 Pacote pywin32 Como usar Windows 1. Instale o pacote pywin32 necessário executando pip install pywin32. 2. Execut...

kernel: packet: use consistent hard_header_len in non-ring send paths

An out-of-bounds write problem was observed in packetsendmsgspkt in net/packet/afpacket.c in the Linux Kernel. In this flaw, AFPACKET hardheaderlen race may allow local privilege escalation...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.16.72 security and extras update

Red Hat OpenShift Container Platform release 4.16.72 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.16. Red Hat Product Security has rated this update as having a security impact of...

Malicious code in mfasolver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f583d18816b977d3e721da8423405533e9915ad13631d8114e40e54aefd9152 package.json at line 41 declares the only runtime dependency node-net-pool as...

MAL-2026-17663 Malicious code in mfasolver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f583d18816b977d3e721da8423405533e9915ad13631d8114e40e54aefd9152 package.json at line 41 declares the only runtime dependency node-net-pool as...

CLEANSTART-2026-KG46723 When returning errors, functions in the net/textproto package would include its input as part of the error

CVE-2026-42507 affects multiple packages. When returning errors, functions in the net/textproto package would include its input as part of the error. See references for individual vulnerability details...

openSUSE 16 Security Update : prometheus-blackbox_exporter (openSUSE-SU-2026:22026-1)

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:22026-1 advisory. Changes in prometheus-blackboxexporter: - CVE-2026-84304: Fix heap memory exhaustion OOM via HTTP/2 DATA frame fragmentation in gRPC-Go by bumpi...

Linux Distros Unpatched Vulnerability : CVE-2026-98278

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: remove WARNONONCE from the devfillforwardpath loop check ipipfillforwardpath and ip6tnlfillforwardpath look up the route to the tunnel's remote endpoint an...

kernel: packet: use consistent hard_header_len in non-ring send paths

An out-of-bounds write problem was observed in packetsendmsgspkt in net/packet/afpacket.c in the Linux Kernel. In this flaw, AFPACKET hardheaderlen race may allow local privilege escalation...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.19.50 bug fix and security update

Red Hat OpenShift Container Platform release 4.19.50 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.19. Red Hat Product Security has rated this update as having a...

Important: Red Hat Security Advisory: Release of components for Service Telemetry Framework 1.5.7

Release of components for the Service Telemetry Framework Service Telemetry Framework STF provides automated collection of measurements and data from remote clients, such as Red Hat OpenStack Platform or third-party nodes. STF then transmits the information to a centralized, receiving Red Hat...

CVE-2026-19186

An integer underflow vulnerability exists in the ieee802154_decipher_data_frame() function within subsys/net/l2/ieee802154/ieee802154_frame.c . The software fails to verify if a received frame is long enough before subtracting header and authentication tag lengths from the total length. Because t...