USN-8877-1 linux-gcp, linux-gcp-fips vulnerabilities

It was discovered that the i.MX clock driver in the Linux kernel did not properly handle certain memory allocation failure conditions, leading to a null pointer dereference vulnerability. A local attacker could possibly use this to cause a denial of service system crash. CVE-2022-3114 Several...

USN-8876-1 linux-azure-fde vulnerabilities

It was discovered that the i.MX clock driver in the Linux kernel did not properly handle certain memory allocation failure conditions, leading to a null pointer dereference vulnerability. A local attacker could possibly use this to cause a denial of service system crash. CVE-2022-3114 Several...

USN-8876-1: Linux kernel (Azure CVM) vulnerabilities

It was discovered that the i.MX clock driver in the Linux kernel did not properly handle certain memory allocation failure conditions, leading to a null pointer dereference vulnerability. A local attacker could possibly use this to cause a denial of service system crash. CVE-2022-3114 Several...

hulk

Hulk DoS tool HULK DoS tool ported to Go language from Python. Original Python utility by Barry Shteiman http://www.sectorix.com/2012/05/17/hulk-web-server-dos-tool/ I just ported the code as is quick and dirty. Original functions names are keeped and original logic mostly keeped too. The main...

ntlmv1-multi

NTLMv1 Multi Tool This tool reverses NTLMv1 hashes to NTLM, or more specifically it formats NTLMv1 challenge responses into a format that can be cracked with hashcat mode 14000 CT3 calculation If you specify --ct3 it will calculate the the final 4 digits of the NTLM for you, if you specify --json...

CVE-2021-24086-exp

CVE-2021-24086 This is a proof of concept for CVE-2021-24086 "Windows TCP/IP Denial of Service Vulnerability ", a NULL dereference in tcpip.sys patched by Microsoft in February 2021. According to this tweet, the vulnerability has been found by @piazzt. It is triggerable remotely by sending...

CVE-2019-0708-Windows

CVE-2019-0708-Windows This article will share the Windows Remote Desktop Service vulnerability CVE-2019-0708, and provide a detailed explanation of the vulnerability and defensive measures. As a cybersecurity beginner, the author shares some self-study basic tutorials, mainly online notes about...

nextjs-security-update

nextjs-security-update There are people building OSS tools to exploit the new Next.js vulnerabilities. This is a tool to fight back - makes it dumb easy to upgrade all your Next.js apps across all your GitHub accounts. Uses the official Vercel fix tool under the hood. What happened Dec 11, 2025:...

git-vuln-finder

git-vuln-finder Finding potential software vulnerabilities from git commit messages. The output format is a JSON with the associated commit which could contain a fix regarding a software vulnerability. The search is based on a set of regular expressions against the commit messages only. If CVE ID...

Reconnoitre

Una herramienta de reconocimiento creada para los laboratorios OSCP para automatizar la recopilación de información y la enumeración de servicios mientras crea una estructura de directorios para almacenar resultados, hallazgos y exploits utilizados para cada host, comandos recomendados para...

Goahead-CVE-2017-17562

Goahead-CVE-2017-17562...

CVE-2024-6387

OpenSSH CVE-2024-6387 Mitigation Script This repository contains a Python script designed to help network administrators scan and secure SSH configurations against the CVE-2024-6387 vulnerability found in OpenSSH's signal handling mechanism. This vulnerability, if exploited, can allow unauthorize...

CVE-2017-1000475

CVE-2017-1000475: Freesshd Unquoted Service Path Prove of concept Windows 10 with freeSSHd 1.3.1, installed by default and with the option running as a system service. Command to check Unquoted Service Path. The service is unquoted by default. The process is running as SYSTEM by default. Create a...

CVE-2024-20656

CVE-2024-20656 PoC for EoP in VSStandardCollectorService150 service https://www.mdsec.co.uk/2024/01/cve-2024-20656-local-privilege-escalation-in-vsstandardcollectorservice150-service/...

peirates

Peirates ¿Qué es Peirates? Peirates, una herramienta de penetración para Kubernetes, permite a un atacante escalar privilegios y pivotar a través de un clúster de Kubernetes. Automatiza técnicas conocidas para robar y recolectar tokens de cuentas de servicio, secretos, obtener ejecución de código...

CVE-2023-22077

CVE-2023-22077 CVE Proof Of Concept: https://databasesecurityninja.wordpress.com/2025/08/04/cve-2023-22077-denial-of-service-from-pdb-level-against-container-level-dos-breaking-pdb-isolation/...

CVE-2020-1350

CVE-2020-1350 SIGRed Denial of Service PoC Exploit This repo has my version of a DoS PoC exploit for the SIGRed vulnerability disclosed by MS and Check Point Research on July 14th, 2020. @maxpl0it also wrote a PoC that he published on July 15th, but I structured my exploit a little differently th...

dheat_dos_attack_poc

DHeat DoS Attack POC CVE-2002-20001 POC for Testing the Existence of DHEat DOS Attack for CVE-2002-20001 in SSH Service Usage command: python3 dheatdosattackpoc.py : Replace with the actual IP address or hostname of the SSH server you have permission to test. : Target Port number running SSH...

CVE-2021-20294-POC

CVE-2021-20294-POC Jan 21 2023, Altin tin-z, github.com/tin-z Poc download and compile wget https://ftp.gnu.org/gnu/binutils/binutils-2.35.tar.gz && tar -xzvf binutils-2.35.tar.gz cd binutils-2.35 && ./configure && make && cd .. gcc -shared -fPIC poc.c -o poc.so -Wl,--version-script=poc.ver launc...

CVE-2019-0709

CVE-2019-0708 BlueKeep Exploit CVE-2019-0708 RCE and Crash Exploit using Python Crash Exploit Published Usage: python3 crashexploit.py 127.0.0.1 64 RCE Exploit Not Published Usage: python3 exploitrce.py 127.0.0.1 payload...