CVE-2026-109390

AnyDesk before 8.0.3 allows unauthenticated remote attackers to execute arbitrary code via a heap-based buffer overflow, as demonstrated on Linux for command execution as root without the victim approving desktop control. In the stream packet handler for mode 5 in the session protocol, a payload...

CVE-2026-109390

AnyDesk versions prior to 8.0.3 are vulnerable to a heap-based buffer overflow that allows unauthenticated remote attackers to execute arbitrary code. The root cause is a failure to validate a payload length value within the stream packet handler for mode 5 in the session protocol. On Linux syste...

powerg-tools

PowerG Analysis Tools A collection of tools for reverse engineering and interacting with the PowerG radio protocol. This release accompanies the research James Chambers and Sultan Qasim Khan presented at REcon and hardwear.io. Please see the presentation recording and slides for more information:...

Threaded-CVE-2018-15473

CVE-2018-15473 — SSH Username Enumeration Tool A Python 3 reimplementation of the classic CVE-2018-15473 OpenSSH user enumeration exploit, extended with multi-threading, wordlist support, automatic vulnerability detection, and thread-safe exploit patching. Table of Contents About the Vulnerabilit...

phantom-grid

Phantom Grid - Enterprise Zero Trust Network Access ZTNA Phantom Grid is a next-generation Zero Trust Network Access ZTNA and active defense system. It operates at both the Kernel Level eBPF and Application Level mTLS to transform Linux servers into a robust, deceptive attack surface. Built for...

CVE-2018-10933

Proof of Concept CTF challenge By Silas Springer Based on CVE-2018-10933 Background CVE-2018-10933 is a vulnerability discovered in select versions of libSSH, which can allow potentially unrestricted machine access. The vulnerability arises from improper handling of packet headers during the...

Security Bulletin:Vulnerabilities exists in Golang package used by IBM Netezza Appliance

Summary Vulnerabilities identified in IBM Netezza Appliance have been addressed in the latest security patch release of NPS. Vulnerability Details CVEID:CVE-2026-46597 DESCRIPTION: An incorrectly placed cast from bytes to int allowed for server-side panic in the AES-GCM packet decoder for...

ddos-traffic-monitor

DDoS Traffic Monitor A real-time traffic monitoring tool that detects and displays network traffic volume per IP address to identify potential DDoS attacks. The tool is built with Python 2.7 using Flask as the backend and a web-based frontend for visualization. Features Real-time Monitoring :...

Oracle Linux 8 : kernel (ELSA-2026-77498)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-77498 advisory. - svcrdma: Reject inline replies that overflow the pull-up buffer Roberto Bergantinos Corpas RHEL-187743 CVE-2026-89530 - packet: use consistent...

Rocky Linux 8 [CIQ] Security Update: kernel-rt / kernel-rt-core / kernel-rt-debug / kernel-rt-debug-core / etc Multiple Vulnerabilities (crlsa-2026_77500)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202677500 advisory. kernel: vsock/vmci: fix UAF when peer resets connection during handshake CVE-2026-64115 kernel: packet: use consistent hardheaderlen in non-ring send path...

zmap

ZMap: El escáner de Internet ZMap es un escáner de red rápido, sin estado y de un solo paquete, diseñado para estudios de red a escala de Internet. En un ordenador de escritorio típico con una conexión Ethernet de gigabit, ZMap es capaz de escanear todo el espacio de direcciones IPv4 públicas en ...

mylg

myLG, Herramienta de Diagnóstico de Red en Línea de Comandos myLG es una utilidad de software de código abierto que combina las funciones de diferentes sondas de red en una sola herramienta de diagnóstico de red. Características Vidrios de red populares ping/trace/bgp: Telia, Level3, NTT, Cogent,...

udpx

Rápido y ligero, UDPX es un escáner UDP de un solo paquete escrito en Go que admite el descubrimiento de más de 45 servicios con la capacidad de agregar servicios personalizados. Es fácil de usar y portátil, y puede ejecutarse en Linux, Mac OS y Windows. A diferencia de los escáneres de Internet...

CVE-2020-0796

CVE-2020-0796 An even more simple PoC and Scanner for CVE-2020-0796, as it uses static packets. There is a protection to prevent accidental usage on public IPs don't do that and an on/off switch to flick crashing. Only requires vanilla Python 3! Scan mode: python3 poc-and-scan.py 10.0.0.15 N...

scapy

Scapy Scapy es un potente programa y biblioteca de manipulación interactiva de paquetes basado en Python. Es capaz de forjar o decodificar paquetes de una amplia variedad de protocolos, enviarlos por la red, capturarlos, almacenarlos o leerlos usando archivos pcap, emparejar solicitudes y...

fwknop

fwknop - Autorización de Paquete Único Introducción fwknop implementa un esquema de autorización conocido como Autorización de Paquete Único SPA, por sus siglas en inglés para un fuerte ocultamiento de servicios. SPA requiere solo un único paquete que está cifrado, no reproducible y autenticado...

external_tcpdump_AOSP10_r33_CVE-2019-15166

tcpdump To report a security issue please send an e-mail to [email protected]. To report bugs and other problems, contribute patches, request a feature, provide generic feedback etc please see the file CONTRIBUTING in the tcpdump source tree root. TCPDUMP 4.x.y Now maintained by "The Tcpdump...

mdk4

MDK4 MDK es una herramienta de prueba de concepto para explotar debilidades comunes del protocolo IEEE 802.11. Acerca de MDK4 MDK4 es una nueva versión de MDK3. MDK4 es una herramienta de prueba de Wi-Fi de E7mer, ASPj de k2wrlz, que utiliza la librería osdep del proyecto aircrack-ng para inyecta...

CVE-2022-31491

CVE-2022-31491 Metasploit module and PoC files in this repo. Further Information Voltronic Viewpower/Pro and rebrands/derivatives The UPS management software normally allows a properly Authenticated and Authorized user using a web interface to configure the system to run a single OS command of th...

open-ssh-user-enumeration

Script de Enumeración de Nombres de Usuario de OpenSSH CVE-2018-15473 Este script verifica la vulnerabilidad de enumeración de nombres de usuario en OpenSSH 7.7 y anteriores CVE-2018-15473. Envía un paquete de autenticación malformado e interpreta la respuesta del servidor SSH para identificar...