Citrix_Secure_Access_LPE_0DAY

Citric Secure Access Local privilege escalation I have discovered a local privilege escalation vulnerability in the Citrix Secure Access Windows Client. This vulnerability allows a privileged administrator to inject a malicious payload to gain NT Authority privileges. The affected versions of...

P4wnP1_aloa

P4wnP1 A.L.O.A. P4wnP1 A.L.O.A. by MaMe82 is a framework which turns a Rapsberry Pi Zero W into a flexible, low-cost platform for pentesting, red teaming and physical engagements ... or into "A Little Offensive Appliance". 0. How to install The latest image could be found under release tab. The...

CVE-2026-107159

A flaw was found in miniupnpd. An unauthenticated attacker on the adjacent network can exploit this vulnerability to cause a Denial of Service DoS by crashing the service. By sending a specially crafted Simple Service Discovery Protocol SSDP search request with an invalid delay value, the attacke...

chrome_v8_cve_checker

How to use Open https://itsshotgun.github.io/chromecve-2025-5419checker/ in Chrome The page will detect your Chrome version and tell you if you’re vulnerable. If vulnerable, it’ll show a link to update Chrome immediately. Why This zero-day lets malicious websites run baaaaaaad code on your machin...

DEBIAN-CVE-2026-107159

MiniUPnPd through 2.3.11 built with --strict contains a divide-by-zero vulnerability in ProcessSSDPData that allows unauthenticated local network attackers to crash the daemon. Attackers can send a single multicast M-SEARCH datagram with MX: 0 and a known ST to port 1900, triggering SIGFPE and...

CVE-2026-107159

MiniUPnPd through 2.3.11 built with --strict contains a divide-by-zero vulnerability in ProcessSSDPData that allows unauthenticated local network attackers to crash the daemon. Attackers can send a single multicast M-SEARCH datagram with MX: 0 and a known ST to port 1900, triggering SIGFPE and...

CVE-2026-107159

MiniUPnPd versions through 2.3.11 built with the --strict flag are vulnerable to a divide-by-zero vulnerability in the ProcessSSDPData() function. An unauthenticated attacker on the local network can crash the daemon by sending a single multicast M-SEARCH datagram to port 1900 featuring an MX: 0 ...

EUVD-2026-94308

MiniUPnPd through 2.3.11 built with --strict contains a divide-by-zero vulnerability in ProcessSSDPData that allows unauthenticated local network attackers to crash the daemon. Attackers can send a single multicast M-SEARCH datagram with MX: 0 and a known ST to port 1900, triggering SIGFPE and...

CVE-2026-107159 MiniUPnPd through 2.3.11 Divide-by-Zero DoS via SSDP M-SEARCH MX Header

MiniUPnPd through 2.3.11 built with --strict contains a divide-by-zero vulnerability in ProcessSSDPData that allows unauthenticated local network attackers to crash the daemon. Attackers can send a single multicast M-SEARCH datagram with MX: 0 and a known ST to port 1900, triggering SIGFPE and...

CVE-2026-107159

MiniUPnPd through 2.3.11 built with --strict contains a divide-by-zero vulnerability in ProcessSSDPData that allows unauthenticated local network attackers to crash the daemon. Attackers can send a single multicast M-SEARCH datagram with MX: 0 and a known ST to port 1900, triggering SIGFPE and...

CVE-2026-107159 MiniUPnPd through 2.3.11 Divide-by-Zero DoS via SSDP M-SEARCH MX Header

MiniUPnPd through 2.3.11 built with --strict contains a divide-by-zero vulnerability in ProcessSSDPData that allows unauthenticated local network attackers to crash the daemon. Attackers can send a single multicast M-SEARCH datagram with MX: 0 and a known ST to port 1900, triggering SIGFPE and...

CVE-2026-107159 MiniUPnPd through 2.3.11 Divide-by-Zero DoS via SSDP M-SEARCH MX Header

MiniUPnPd through 2.3.11 built with --strict contains a divide-by-zero vulnerability in ProcessSSDPData that allows unauthenticated local network attackers to crash the daemon. Attackers can send a single multicast M-SEARCH datagram with MX: 0 and a known ST to port 1900, triggering SIGFPE and...

CVE-2023-23397

CVE-2023-23397 Simple and dirty PoC of the CVE-2023-23397 vulnerability impacting the Outlook thick client. Description Outlook suffers from a lack of control over the user input that allows to configure the sound of a meeting and appointment reminder. Indeed, an attacker is able to force a victi...

CVE-2024-38063

CVE-2024-38063 - Windows TCP/IP Remote Code Execution Vulnerability Research Comprehensive research to save you time, energy, sanity, & understanding. I want to start this off by saying that this specific CVE is like many in that due to its high severity score, it has gained an enormous amount...

CVE-2021-3122-Details

CVE-2021-3122-Details Blog Post on how we found a CVE in AlohaPOS. https://www.sentinelone.com/blog/cve-2021-3122-how-we-caught-a-threat-actor-exploiting-ncr-pos-zero-day/...

ctftool

CTFTOOL Vous voulez simplement tester l'exploit SYSTEM ? Cliquez ici. Un outil interactif d'exploration CTF Voici ctftool, un outil interactif en ligne de commande pour expérimenter avec CTF, un protocole peu connu utilisé sur Windows pour implémenter les services de texte. Cela peut être utile...

apache_normalize_path

CVE-2021-41773|CVE-2021-42013: Path Traversal Zero-Day in Apache HTTP Server Exploited On October 5, the Apache HTTP Server Project patched CVE-2021-41773, a path traversal and file disclosure vulnerability in Apache HTTP Server, an open-source web server for Unix and Windows that is among the mo...

CVE-2022-30190

CVE 30190 Amine TITROFINE | December 17, 2022 Follina CVE-2022-30190 is a Microsoft Office zero-day vulnerability that has recently been discovered. It’s a high-severity vulnerability that hackers can leverage for remote code execution RCE attacks. It exists when MSDT is called using the URL...

flipperzero-firmware

Прошивка Flipper Zero Официальный сайт Flipper Zero — Простой способ объяснить друзьям, на что способен Flipper Zero. Обновление прошивки Flipper Zero — Улучшения для вашего дельфина: последние выпуски прошивки, инструменты обновления для ПК и мобильных устройств. Документация для пользователей —...

rxerium-templates

Курируемая коллекция из 144+ шаблонов Nuclei , ориентированных на zero-day и активно эксплуатируемые уязвимости в дикой природе , а также несколько прочих шаблонов. Шаблоны используют пассивные методы обнаружения сопоставление версий/дат и организованы по годам для удобной навигации. ⚠️ Примечание...