5184 matches found
ghostlock-emerald
GhostLock para POCO M6 Pro emerald GhostLock CVE-2026-43499 es un use-after-free de 15 años de antigüedad en el código de herencia de prioridad de futex del kernel de Linux que permite a cualquier usuario local obtener root. Este proyecto lo utiliza para rootear el POCO M6 Pro MediaTek Helio G99...
Tomcat-CVE-2025-31650
CVE-2025-31650 🚨 Prueba de Concepto PoC para la vulnerabilidad DoS HTTP/2 en Apache Tomcat CVE-2025-31650 Este script provoca una condición de agotamiento de memoria en Apache Tomcat enviando cabeceras priority malformadas a través de HTTP/2. 🎯 Versiones Afectadas Apache Tomcat 9.0.76 – 9.0.102...
Dos-exploit-
Dos-exploit- CVE-2025-31650 Título del exploit: Apache Tomcat 10.1.39 - Denegación de Servicio DOS Autor: Abdualhadi khalifa CVE: CVE-2025-31650 root@kitploit: import httpx import asyncio import random import urllib.parse import sys import socket from colorama import init, Fore, Style init class...
CVE-2025-31650
TomcatKiller - CVE-2025-31650 🚨 Proof of Concept PoC for Apache Tomcat HTTP/2 DoS vulnerability CVE-2025-31650 This script triggers a memory exhaustion condition in Apache Tomcat by sending malformed priority headers over HTTP/2. 🎯 Affected Versions Apache Tomcat 9.0.76 – 9.0.102 Apache Tomcat...
TomcatKiller-CVE-2025-31650
TomcatKiller-CVE-2025-31650 Una herramienta diseñada para detectar la vulnerabilidad CVE-2025-31650 en Apache Tomcat versiones 10.1.10 a 10.1.39 Esta vulnerabilidad permite a un atacante provocar una fuga de memoria enviando solicitudes HTTP/2 especialmente manipuladas con encabezados de priorida...
CVE-2021-26832
CVE-2021-26832 Descripción sugerida Cross Site Scripting XSS en el formulario de la página 'Restablecer contraseña' de Priority Enterprise Management System v8.00 permite a los atacantes ejecutar javascript en nombre de la víctima mediante el envío de una URL maliciosa o dirigiendo a la víctima a...
SploitScan
SploitScan 📜 Description SploitScan is a powerful and user-friendly tool designed to streamline the process of identifying exploits for known vulnerabilities and their respective exploitation probability. Empowering cybersecurity professionals with the capability to swiftly identify and apply kno...
Analysis-of-TomcatKiller---CVE-2025-31650-Exploit-Tool
Tomcat Vulnerability Scanner A tool to detect CVE-2025-31650 in Apache Tomcat servers using Shodan integration. Features HTTP/2 priority vulnerability detection Shodan target discovery CSV/JSON reporting Installation root@kitploit: python -m venv venv source venv/bin/activate pip install -r...
priority-intelligence-requirements-dev
Desarrollo de Requisitos Prioritarios de Inteligencia @ Red Hat v1.1 En el panorama de la inteligencia de amenazas cibernéticas CTI, por sus siglas en inglés, que evoluciona rápidamente, la formulación de Requisitos Prioritarios de Inteligencia PIRs se presenta como un componente crucial de tu...
GhostLock-OPPO-PCKM00
GhostLock — PoC para OPPO PCKM00 4.14.180 CVE-2026-43499 GhostLock — Escalada de privilegios local por use-after-free en la herencia de prioridad del futex del kernel de Linux, PoC adaptado al OPPO PCKM00 OP4A57, SM6150, Android 11, kernel 4.14.180-perf+. AVISO / 免责声明 Este proyecto es solo para...
tlsenum
tlsenum tlsenum is a command-line TLS enumeration tool that attempts to enumerate what TLS cipher suites a server supports and list them in order of priority. It works by sending out sending out TLS ClientHello messages and parsing the ServerHello responses from the server. tlsenum assumes that t...
CVE-2019-9511_Priority-Churn-Data-Dribble
HTTP/2 CVE-2019-9511 & CVE-2019-9513 Lightweight Probes Repositorio con scripts de validación controlada para comportamientos asociados a las CVEs CVE-2019-9511 y CVE-2019-9513 , ambas relacionadas con vectores de denegación de servicio en implementaciones HTTP/2. Los scripts fueron creados para...
pixel-ksu-root
pixel-ksu-root Root a stock, locked-bootloader Google Pixel from an unprivileged adb shell, using a kernel CVE — no unlock, no flash, no vendor help. A userspace-reachable CVE gives a short-lived kernel read/write primitive, which late-loads a KernelSU module kernelsu.ko into the running GKI...
CVE-2025-31650
Apache Tomcat 10.1.39 - Denegación de Servicio DoS Esta herramienta realiza una inundación de solicitudes HTTP/2 asíncronas de alto volumen utilizando cabeceras priority malformadas para probar la estabilidad de servidores Apache Tomcat que ejecutan las versiones 10.1.10 a 10.1.39. ⚠️ Esto es...
CVE-2026-43499
👻 CVE-2026-43499 — GhostLock 15-Year-Old GhostLock Flaw Enables Root and Container Escape on Most Linux Distros GhostLock is a high-severity Use-After-Free UAF vulnerability in the Linux Kernel rtmutex subsystem. The flaw originates from incorrect waiter cleanup during Priority Inheritance PI...
ghostlock-oneplus
GhostLock — Locked Bootloader Jailbreak Kernel exploit for Android devices with locked bootloader. Achieves temporary root + KernelSU installation without unlocking bootloader or modifying boot image. Runtime auto-detection of kernel version with multi-device offset table. Vulnerability...
CVE-2026-80778
In the Linux kernel, the following vulnerability has been resolved: futex/pi: Reject cross-mm private futex owners A private futex key borrows the waiter's mm without taking an mmusers reference. Nevertheless, attachtopiowner currently accepts an owner from a different address space and copies th...
Malicious Package
Overview priority-slot-queue is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Malicious code in priority-slot-queue (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28d9070a4736fe0ceeb43d3f01cad7456582c802e6bb0f84ab6b4e1050947316 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
MAL-2026-15892 Malicious code in priority-slot-queue (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28d9070a4736fe0ceeb43d3f01cad7456582c802e6bb0f84ab6b4e1050947316 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...