sylkie

sylkie A command line tool and library for testing networks for common address spoofing security vulnerabilities in IPv6 networks using the Neighbor Discovery Protocol. Getting Started Note: This project is still in the early phases of development. If you run into any problems, please consider...

CVE-2023-4279

CVE ID : CVE-2023-4279 Tipo de vulnerabilidad : Suplantación de dirección IP Descripción : Este complemento recupera direcciones IP de clientes a partir de encabezados potencialmente no confiables, lo que permite a un atacante manipular su valor. Esto puede usarse para ocultar el origen del tráfi...

AceLdr

AceLdr - メモリスキャナーを回避 Cobalt Strike用の位置独立リフレクティブローダー。Hunt-Sleeping-Beacons, BeaconHunter, BeaconEye, Patriot, Moneta, PE-sieve, MalMemDetect による検出結果はゼロ。 特徴 簡単に使用可能 シェルコードを生成する前に、単一のCNAスクリプトをインポートするだけです。 動的メモリ暗号化 Beaconからのすべての割り当てに対して新しいヒープを作成し、スリープ前にエントリを暗号化します。 コードの難読化と暗号化...

CVE-2023-4281

ID de CVE: CVE-2023-4281 Tipo de vulnerabilidad: Suplantación de dirección IP Descripción: El complemento Activity Log recupera las direcciones IP de los clientes desde cabeceras potencialmente no confiables, lo que permite a un atacante manipular su valor. Esto puede usarse para ocultar el orige...

CVE-2023-34051

CVE-2023-34051 CVE-2023-34051 是一个认证绕过漏洞，绕过了 VMSA-2023-0001 的补丁。 VMSA-2023-0001（适用于 vRealize Log Insight）包含以下 CVE： VMware vRealize Log Insight 目录遍历漏洞 CVE-2022-31706 VMware vRealize Log Insight 访问控制缺陷漏洞 CVE-2022-31704 VMware vRealize Log Insight 信息泄露漏洞 CVE-2022-31711 此漏洞的默认配置会写入一个 cron 任务以创建反向...

patriot

Patriot Small research project for detecting various kinds of in-memory stealth techniques. Download the latest release here. The current version supports the following detections: Suspicious CONTEXT structures pointing to VirtualProtect functions. Targets research by Austin Hudson Foliage and Ek...

CVE-2026-0101-BLE-Address-Spoofing-via-Weak-Resolvable-Private-Address

CVE-2026-0101 – 通过弱可解析私有地址实现 BLE 地址欺骗 程序代码（使用 bleak 模拟的 Python） root@kitploit: bleperipheralsim.py - Simulated BLE peripheral with weak RPA verification import asyncio, random, hashlib from bleak import BleakServer, BleakScanner Simplified - we'll use a basic socket to simulate BLE bonding Store...

CVE-2022-4539

Consideraciones de uso: Adaptabilidad: Puede modificar fácilmente las cargas útiles, la lógica de generación de IP y los proxies para adaptarse a diferentes escenarios o entornos. Uso ético: Asegúrese de tener permiso explícito antes de probar cualquier sistema con este código. Escalabilidad: Est...

Mail: Email address spoofing via malformed RFC 2047 encoded-words

Summary Mail::Utilities.qvaluedecode and Mail::Utilities.bvaluedecode decoded only the first RFC 2047 encoded-word in a string and used an overly greedy pattern to match the charset token. A crafted, malformed encoded-word embedded in an address display name or local part could cause the decoded...

CVE-2026-73742

A vulnerability in an API endpoint of HPE Networking Fabric Composer could allow an authenticated low privilege operator user to spoof the source address attributed to their requests. Successful exploitation could allow an attacker to cause inaccurate attribution information to be recorded on the...

EUVD-2026-69469

A vulnerability in an API endpoint of HPE Networking Fabric Composer could allow an authenticated low privilege operator user to spoof the source address attributed to their requests. Successful exploitation could allow an attacker to cause inaccurate attribution information to be recorded on the...

PT-2026-83972

net ipv6 send ns in subsys/net/ip/ipv6 nbr.c allocates a transmit net pkt for a Neighbor Solicitation. When it is called with a data packet pending on an unresolved neighbor and that neighbor's pending queue is already non-empty an NS is already outstanding, the function appends the data packet a...

Improper Validation of Syntactic Correctness of Input

Overview Affected versions of this package are vulnerable to Improper Validation of Syntactic Correctness of Input through qvaluedecode and bvaluedecode in lib/mail/utilities.rb. An attacker can make a display name or local part decode to a different address than intended by supplying a malformed...

CVE-2026-53791

rsync daemon before 3.5.0 contains an IP address spoofing vulnerability that allows unauthenticated remote attackers to bypass IP-based access controls by sending a crafted PROXY protocol header with a forged source address. Attackers who can connect directly to the rsync daemon can inject a...

PT-2026-70799

Name of the Vulnerable Software and Affected Versions Coturn versions prior to 4.13.1 Description The good peer addr function in src/server/ns turn server.c utilizes ioa addr in range in src/client/ns turn ioaddr.c without canonicalizing IPv4-compatible, 6to4, and 64:ff9b::/96 NAT64 address forms...

CVE-2026-25552 Ghost CLI < 1.30.1 IP Spoofing via X-Forwarded-For Header

Ghost CLI before 1.30.1 contains an IP spoofing vulnerability that allows unauthenticated remote attackers to bypass rate-limiting controls by manipulating the X-Forwarded-For header through a misconfigured Nginx configuration. Attackers can append attacker-controlled values to the header chain...

CVE-2026-25552

Ghost CLI before 1.30.1 contains an IP spoofing vulnerability that allows unauthenticated remote attackers to bypass rate-limiting controls by manipulating the X-Forwarded-For header through a misconfigured Nginx configuration. Attackers can append attacker-controlled values to the header chain...

CVE-2026-25552 Ghost CLI < 1.30.1 IP Spoofing via X-Forwarded-For Header

Ghost CLI before 1.30.1 contains an IP spoofing vulnerability that allows unauthenticated remote attackers to bypass rate-limiting controls by manipulating the X-Forwarded-For header through a misconfigured Nginx configuration. Attackers can append attacker-controlled values to the header chain...

CVE-2026-11870

The WP Ghost Hide My WP Ghost WordPress plugin before 7.0.05 does not verify that client IP information comes from a trusted proxy before trusting attacker-controllable HTTP headers, allowing unauthenticated attackers to spoof their IP address to bypass the WP Ghost Hide My WP Ghost WordPress...

CVE-2026-11870 Hide My WP Ghost < 7.0.05 - IP Address Spoofing via Trusted Proxy Headers Leading to Protection Mechanism Bypass

The WP Ghost Hide My WP Ghost WordPress plugin before 7.0.05 does not verify that client IP information comes from a trusted proxy before trusting attacker-controllable HTTP headers, allowing unauthenticated attackers to spoof their IP address to bypass the WP Ghost Hide My WP Ghost WordPress...