clairvoyance

🔮 clairvoyance Clairvoyance /klɛərˈvɔɪəns /; from French clair meaning clear and voyance meaning vision from Wikipedia. Overview clairvoyance creates a colorful visualization of the page protection of an entire 64-bit process address space user and kernel running on a Windows 64-bit kernel. To...

Win10Pcap-Exploit

Win10Pcap-Exploit credit to https://twitter.com/R00tkitSMM [email protected] telegram username : https://telegram.me/firozi some day ago i found vulnerability in win10pcap Driver that can lead to Privilege escalation i report vulnerability and now bug is fixed : www.win10pcap.org/download/ s...

CVE-2026-108105

The Open5GS software (versions through 2.8.0 ) is vulnerable to a reachable assertion vulnerability within the mme_gn_handle_sgsn_context_request() function. A remote unauthenticated attacker can exploit this by sending malformed SGSN Address IEs via GTPv1-C traffic from a configured SGSN address...

CVE-2026-108105 Open5GS through 2.8.0 MME Reachable Assertion via GTPv1 SGSN Context Request

Open5GS through 2.8.0 contains a reachable assertion vulnerability in mmegnhandlesgsncontextrequest that allows remote unauthenticated attackers to crash the MME via malformed SGSN Address IEs. Attackers sending GTPv1-C traffic from a configured SGSN address with a known UE IMSI or P-TMSI can...

CVE-2026-98218

A flaw was found in the Linux kernel's I2C Address Translator ATR component. When an adapter fails to register, the driver frees the channel memory without clearing its reference pointer, leaving a dangling pointer. A local user could exploit this flaw during cleanup routines to trigger a...

CVE-2025-5548

Breaking FreeFloat FTP: analysis and exploitation of CVE-2025-5548 Anderson Steven — Master in Cybersecurity, Module 6 Vulnerabilities Individual assignment: Methodology for vulnerability analysis and exploitation Why this repository I did not want to simply hand in "here is the exploit working"...

CVE-2017-13089

CVE-2017-13089 Payload generator for CVE-2017-13089. This version requires manually locating the stack address to be executed. Directly attacking is also likely to succeed In the shellcode section, buf is a normal payload generated with msf; simply replace it with the payload you need. Usage:...

Hack-Captive-Portal

Hack-Captive-Portal This script helps to pass through the captive portals in public Wi-Fi networks. It hijacks IP and MAC from somebody who is already connected and authorized on captive portal. Installation and usage You need sipcalc and nmap for this script. Then download .sh script and run it...

reverseip_py

reverseippy Domain parser for IPAddress.com Reverse IP Lookup. Writen in Python 3. What is Reverse IP? Reverse IP refers to the process of looking up all the domain names that are hosted on a particular IP address. This can be useful for a variety of reasons, such as identifying all the websites...

DRMBinViaOrdinalImports

DRMBinViaOrdinalImports - Create Anti-Copy DRM Malware Quick Links Maldev Academy Home Maldev Academy Syllabus Maldev Academy Pricing Summary This repository uses a technique to modify a program's Import Address Table IAT by replacing the imported function names with their corresponding ordinals,...

moonwalk

moonwalk: DLL Base Address Finder This Rust library and CLI tool demonstrates an alternative method to find the base address of loaded DLLs without using a Process Environment Block PEB walk. This technique is particularly useful in scenarios where PEB walking might be detected or blocked. Branch...

CLEANSTART-2026-XM64150 IPv6 branch of the FastCGI client access check compares only the first 12 bytes of a 16-byte IPv6 address, so listen

Security vulnerability affects the php package. The IPv6 branch of the FastCGI client access check compares only the first 12 bytes of a 16-byte IPv6 address, so listen...

CLEANSTART-2026-VA40669 source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2...

CVE-2026-56854 affects multiple packages. The source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2026-46595. See references for individual vulnerability...

CVE-2025-23247

CVE-2025-23247 Epic Collab with @reubensammut : as alaways : wip for CVE-2025-23247 . ATM just crash PoC which shows we control buffer and offset, so we got aaw. Bug from https://talosintelligence.com/vulnerabilityreports/TALOS-2025-2151 checksec ./cuobjdump '/home/vlad/cuobjdump' Arch:...

CVE-2026-107726

Hazelcast is vulnerable to an arbitrary memory access flaw in versions prior to 5.4.5, 5.5.10, 5.6.1, and 5.7.0 . The root cause is improper validation of data supplied by a malicious client capable of connecting to a cluster. An attacker can perform arbitrary reads from a cluster member's Java h...

CVE-2026-107295

Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. From 1.34.0 until 1.107.4 and 2.28.0, the Agent.toweb and clai web development chat endpoint has missing request content-type validation. A website visited by a developer can submit a...

K000163599: Linux kernel vulnerability CVE-2026-53375

Security Advisory Description In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vce: Prevent partial address patches In the case that only one of lo/hi is valid, the patching could result in a bad address written to in FW. CVE-2026-53375 Impact There is no impact; F5...

Malicious code in @dransay/address-validation (npm)

Source: ossf-package-analysis 82ababa5637b2f53f5087a161eeba1b6ca6ddba6d31ebb7842614bf0da119fa7 The OpenSSF Package Analysis project identified '@dransay/address-validation' @ 99.0.0 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with...

Malicious code in @dransay/address-validation (npm)

@dransay/[email protected] is a dependency-confusion probe claiming the internal @dransay/ namespace, not an identified public package. Its preinstall hook runs on npm install as node beacon.js and sends a DNS lookup and an HTTPS GET to db3klhbi6i9hark1kegg174t38h33b6wt.oast.site, using t...

MAL-2026-17668 Malicious code in @dransay/address-validation (npm)

@dransay/[email protected] is a dependency-confusion probe claiming the internal @dransay/ namespace, not an identified public package. Its preinstall hook runs on npm install as node beacon.js and sends a DNS lookup and an HTTPS GET to db3klhbi6i9hark1kegg174t38h33b6wt.oast.site, using t...