cve-2019-6207

CVE-2019-6207 $ clang exploit.c -o exploit $ ./exploit CVE-2019-6207 exploit to leak 4 bytes of arbitrary kernel memory Tested on MacOS 10.14.1, should works on: MacOS wop != NETRTDUMP2 int size = rtmsg2RTMGET, &info, NULL, w, credp; if w-wreq != NULL && w-wtmem != NULL struct rtmsghdr rtm = stru...

CobaltBus

CobaltBus Intégration C2 externe de Cobalt Strike avec Azure Servicebus, trafic C2 via Azure Servicebus Configuration 1. Créez un Azure Service Bus 2. Créez une stratégie d'accès partagé chaîne de connexion qui ne peut qu'envoyer et écouter 3. Modifiez la variable statique connectionString dans l...

Important: Red Hat Security Advisory: kernel security update

An update for kernel is now available for NVIDIA for RHEL 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...

DirtyAH6

DirtyAH6 CVE-2026-80844 Разбор !WARNING PoC предоставлен исключительно для помощи защитникам, мейнтейнерам и авторизованным командам безопасности в проверке патчей, мер защиты, обнаружения и подверженности уязвимости на системах, которыми они владеют или которые им явно разрешено тестировать. Вы...

NoFaxGiven

NoFaxGiven - Выполнение кода и закрепление в службе FAX от имени NETWORK SERVICE Расширение маршрутизации факсов — это DLL, добавляющая функции маршрутизации в службу факсов. На одном сервере может находиться несколько расширений маршрутизации факсов. Когда сервер факсов получает факсимильное...

OST-C2-Spec

Черновик: Запрос на Обсуждение Аннотация В этом документе представлен обзор Версии 1 спецификации OST C&C. Он предназначен для подробного описания сообщений и полей, входящих в состав этих сообщений. Введение Мотивация, стоящая за этой спецификацией, — предоставить протокол обмена сообщениями C&C...

laravel-framework

About Laravel Note: This repository contains the core code of the Laravel framework. If you want to build an application using Laravel, visit the main Laravel repository. Laravel is a web application framework with expressive, elegant syntax. We believe development must be an enjoyable, creative...

hawkopsec

HawkOpsec One-tap Linux OPSEC hardening & anonymity toolkit -0b0d10 HawkOpsec turns a pile of manual privacy commands into security modes you apply with one tap. Pick a mode — the tool starts Tor, configures DNS, randomizes your identity and hardens the kernel for you. Hit RESET and every change ...

Spring-Cloud-Function-SpEL

Spring-Cloud-Function-SpEL Подробности можно посмотреть в личном блоге https://pizz33.github.io/ Тестовая среда для инъекции выражения SpEL в Spring Cloud Function Версия java11, запуск: java -jar demo-0.0.1-SNAPSHOT.jar После сборки откройте порт 127.0.0.1:8080 POST /functionRouter HTTP/1.1 Host...

CVE-2022-22963

CVE-2022-22963 Инструмент для обнаружения и эксплуатации уязвимости удалённого выполнения кода через инъекцию SpEL-выражений в Spring Cloud Function. Обзор уязвимости CVE-2022-22963 — это высококритичная RCE-уязвимость CVSS 9.8 в функции маршрутизации Spring Cloud Function. Когда приложение...

LiteLLM: Authenticated SSRF and provider-credential exfiltration via unvalidated request-body routing parameters

ImpactAny authenticated LiteLLM proxy user could redirect an outbound provider call to a destination they control and cause the proxy to send its own configured provider credentials to that destination. The proxy's request-body validation was a denylist that did not cover every sensitive paramete...

openbsd_ov1

OpenBSD TCP/IP overflow Протестировано на последней версии OpenBSD 7.2 Подробности: int ipdooptionsstruct mbuf m, struct ifnet ifp ... for ; cnt 0; cnt -= optlen, cp += optlen opt = cpIPOPTOPTVAL; if opt == IPOPTEOL break; if opt == IPOPTNOP optlen = 1; else if cnt cnt code = &cpIPOPTOLEN - uchar...

CVE-2022-22963-PoC

CVE-2022-22963 RCE PoC Минимальный пример для воспроизведения удаленного выполнения кода CVE-2022-22963 в org.springframework.cloud:spring-cloud-function-core. Эксплуатация Запуск сервера mvn spring-boot:run Выполнение запроса curl -X POST -H 'spring.cloud.function.routing-expression:...

CVE-2025-66850

Finding Within the ‘LibreNMS’ application, we discovered a reflected Cross-Site Scripting vulnerability; this vulnerability exists in the routing module’s protocol parameter, allowing an attacker to render malicious JavaScript in a victim’s browser. This vulnerability affects all versions from...

GHSA-3CV6-JPF6-8222 LiteLLM: Authenticated SSRF and provider-credential exfiltration via unvalidated request-body routing parameters

Impact Any authenticated LiteLLM proxy user could redirect an outbound provider call to a destination they control and cause the proxy to send its own configured provider credentials to that destination. The proxy's request-body validation was a denylist that did not cover every sensitive paramet...

LiteLLM: Authenticated SSRF and provider-credential exfiltration via unvalidated request-body routing parameters

Impact Any authenticated LiteLLM proxy user could redirect an outbound provider call to a destination they control and cause the proxy to send its own configured provider credentials to that destination. The proxy's request-body validation was a denylist that did not cover every sensitive paramet...

ble_proxy

BLE HTTP Proxy System A Bluetooth Low Energy BLE based HTTP proxy system that routes web browser traffic through an iOS device. This allows web browsing through the iOS device's internet connection using BLE as the transport layer. Architecture Overview Browser → Windows Proxy → BLE/TCP → iOS/Moc...

SUSE CVE-2026-97939

In the Linux kernel, the following vulnerability has been resolved: ipmr: account multicast table and route memory A netadmin in a user+net namespace can create many IPv4 and IPv6 multicast routing tables with MRTTABLE and MRT6TABLE. Each unseen id allocates an mrtable via the shared mrtablealloc...

CVE-2026-97939

A flaw was found in the Linux kernel's IP multicast routing subsystem. A local user with network administration privileges inside a network namespace can create an excessive number of multicast routing tables. Because these allocations are not tracked against memory control group limits, kernel...

CVE-2022-22963

Spring Cloud Function VulnerabilityCVE-2022-22963 Vulnerable Application to CVE-2022-22963 CVE-2022-22963 Exploit Demo https://user-images.githubusercontent.com/57348147/161266562-51d025f0-54d4-488f-ac50-2317e29bfbdf.mp4 Build docker pull me2nuk/cves:2022-22963 docker run -it -p 8080:8080...