linux_CVE-2020-24490-beforePatch

Este repositorio no tiene un README...

CVE-2023-36884_patcher

CVE-2023-36884patcher CVE-2023-36884 affects Office 2016, 2019, 2021 versions. This is its temporary patch. After downloading, right-click and run with administrator privileges...

text4shell-tools

commons-text-tools Enlaces rápidos Haz clic para encontrar: Busca archivos .jar de commons-text y sus versiones Llamadas a funciones vulnerables de commons-text Parche en caliente en archivos .jar de commons-text para deshabilitar los comportamientos vulnerables Ejemplo de escaneo y parcheo Resum...

AMSI-ETW-Patch

AMSI-ETW-Patch Este repositorio contiene información para parchear AMSI y ETW usando un parche de un solo byte para ambos. La idea era limitar la detección del propio parche, ya que es un solo byte. AMSI patch-amsi-x64.c La idea es que AMSI realiza muchas comprobaciones de validación antes de...

New-lib3mf.dll-for-MeshMixer

适用于 MeshMixer 的新版 lib3mf.dll 为 MeshMixer 预编译的 lib3mf.dll，包含针对 CVE-2021-21772 的回移植补丁以及更新的 zlib 1.3.1。 替换原始文件到 C:\Program Files\Autodesk\Meshmixer\ 包含源代码，如果您希望自行编译。 CVE-2021-21772：https://talosintelligence.com/vulnerabilityreports/TALOS-2020-1226...

dnsmasq-2.4.1-fix-CVE-2017-14491

dnsmasq-2.4.1-fix-CVE-2017-14491...

CVE-2026-100552 OpenClaw before 2026.8.1 Policy Bypass via Native Tools

OpenClaw npm package 'openclaw' before 2026.8.1 does not correctly enforce per-chat tool policies for Codex app-server runtime tools. A conversation-level tools.allow rule filtered OpenClaw tools but did not restrict the shell, process, file, and patch tools owned by the Codex runtime. When a...

Citrix ShareFile StorageZones Controller - Unauthenticated Remote Code Execution

A vulnerability has been discovered in the customer-managed ShareFile storage zones controller which, if exploited, could allow an unauthenticated attacker to remotely compromise the customer-managed ShareFile storage zones controller. id: CVE-2023-24489 info: name: Citrix ShareFile StorageZones...

Drupal - Remote Code Execution

Drupal 8.5.x before 8.5.11 and Drupal 8.6.x before 8.6.10 V contain certain field types that do not properly sanitize data from non-form sources, which can lead to arbitrary PHP code execution in some cases. id: CVE-2019-6340 info: name: Drupal - Remote Code Execution author: madrobot severity:...

Atlassian Confluence Download Attachments - Remote Code Execution

Confluence Server and Data Center had a path traversal vulnerability in the downloadallattachments resource. A remote attacker who has permission to add attachments to pages and / or blogs or to create a new space or a personal space or who has 'Admin' permissions for a space can exploit this pat...

cve-2021-44228-qingteng-patch

青藤 log4j2-patch https://github.com/qingtengyun/cve-2021-44228-qingteng-patch 修复 log4j2的 CVE-2021-44228 , 利用 JVM 提供的 Instrumentation API来更改加载到 JVM 中的现有字节码。 在不重启Java进程的情况下，修改org.apache.logging.log4j.core.lookup.JndiLookup类的lookup方法，固定返回 Patched JndiLookup::lookup。 简单参考了...

patch-diffing-in-the-dark

Patch Diffing In The Dark A series of blog posts leveraging CVE analysis and patch diffing to discover new vulnerabilities. As revealed in the blog posts, 4 CVEs came from the in-depth study of CVE-2021-1657. TOC Results from CVE-2021-1657: Part 1 - Patch Diffing In The Dark Part 2 - Down the...

spring-break_cve-2017-8046

spring-breakcve-2017-8046 Este es un programa Java que explota la vulnerabilidad Spring Break CVE-2017-8046. Este software está escrito para tener la menor cantidad de dependencias externas posible. AVISO LEGAL Esta herramienta está destinada a ingenieros de seguridad y profesionales de appsec pa...

CVE-2026-69263

CVE 2026-69263 Qué CVE 2026-69263 es un bypass del parche de la antigua vulnerabilidad RCE parcheada en agosto de 2025. El parche introdujo una denylist que bloqueaba la instalación de paquetes arbitrarios. Cómo Dado que npm lee la configuración de las variables de entorno, establecer la variable...

CVE-2026-100387 pgPointcloud through 1.2.5 heap out-of-bounds read via WKB deserialization

pgPointcloud through 1.2.5 contains a heap out-of-bounds read vulnerability in dimensional patch WKB deserialization that allows authenticated database users to read adjacent heap memory. Attackers can supply crafted pcpatch values with attacker-controlled size fields to copy heap memory into...

CVE-2023-35744

CVE-2023-35744 关键补丁更新...

sctphantom

SCTPhantom — Linux kernel SCTP ASCONF use-after-free tracking site Source for the SCTPhantom patch-status tracker: a single-page site recording which distributions have shipped a fix for the SCTP ASCONF transport use-after-free in the Linux kernel. Where the facts live Everything about the bug —...

CVE-2018-14881_no_patch

This repository does not have a README...

CVE-2026-26114-Patch

CVE-2026-26114-Patch parcheando el N-day de CVE-2026-26114 antes que microsoft. donde microsoft no pudo parchear el 100% en muchos meses. pero FAC security lo hizo...

UEFI-Security-Research-Howyar-SysReturn-NetCopy

🌊 UEFI Security Research - Howyar SysReturn NetCopy Under the cloak of Secure Boot, some architectures sink deeper than the vulnerabilities that exposed them. Some binaries are revoked. Some patches are shipped. But deep below the surface, old habits leave traces. This is what remains when a...