Project-Pwnag0dchi

Proyecto Pwnag0dchi Creé esto porque mucha gente preguntaba sobre los plugins personalizados y configuraciones que uso. Siguiendo esta guía, tu Pwnagotchi se verá exactamente como se ve en mis redes sociales y videos de YouTube en 5 minutos como máximo. También encontrarás una guía completa de...

CVE-2026-104967 Plane: Cross-workspace association destruction and issue mutation/read via unscoped queries in BulkDeleteIssuesEndpoint and SubIssuesEndpoint

Plane is an open-source project management tool. Prior to 1.4.0, BulkDeleteIssuesEndpoint and SubIssuesEndpoint in apps/api/plane/app/views/issue/ accept body- or URL-supplied issue IDs and operate on them without checking that the IDs belong to the caller's workspace and project. The permission...

CVE-2026-104967

The open-source project management tool Plane (prior to version 1.4.0 ) is vulnerable to cross-workspace data manipulation via the BulkDeleteIssuesEndpoint and SubIssuesEndpoint in apps/api/plane/app/views/issue/. The root cause is an authorization bypass (CWE-639) where the application fails to ...

CVE-2026-52924

. CVE-2026-52924: SCTP Use-After-Free in Stale Cookie Handling Vulnerability Summary CVE ID: CVE-2026-52924 Severity: CRITICAL CVSS 9.8 Component: Linux Kernel - SCTP Stream Control Transmission Protocol Type: Use-After-Free CWE-416, CWE-825 Published: 2026-06-24 Status: Fixed Affected Versions...

MEC

가짜 확장자 제어 MEC 가짜 확장자 제어MEC는 Windows가 파일을 열 때 확장자뿐만 아니라 매직 넘버에 의존하도록 하는 프로그램입니다. 이는 시스템을 훨씬 더 안전하게 만듭니다. 많은 공격이 확장자를 속이고 파일이 실제로 열려야 하는 프로그램 대신 취약한 프로그램으로 열리거나 실행되도록 하려고 시도하기 때문입니다. 개발자 모드 자세한 내용은 https://mec.e-paths.com 을 참조하십시오. 가짜 확장자를 이용한 공격 방지 공격자는 보통 파일의 확장자를 변경하여 사용자가 파일을 신뢰하도록 만듭니다. 이는...

CVE-2024-23700

CVE-2024-23700 - Android Companion Device Privilege Escalation PoC This project demonstrates CVE-2024-23700, a privilege escalation vulnerability related to the Companion Device mechanism on Android. The PoC shows how an app can exploit the companion device association flow to obtain certain...

CVE-2026-8347

CVE-2026-8347 – Insecure Direct Object Reference IDOR in Concrete CMS Overview CVE-2026-8347 is an Insecure Direct Object Reference IDOR vulnerability affecting Concrete CMS versions 9.5.0 and earlier. The issue exists in the Express Association Reorder functionality due to insufficient...

CVE-2023-38831

Place the bait file and evil script file in the current directory, the bait file is recommended to be an image .png, jpg or a document .pdf 2. Run python gen-CVE2023-38831.py CLASSIFIEDDOCUMENTS.pdf script.bat poc.rar to generate your exploit...

CVE-2024-20154

CVE-2024-20154: NB-IoT SIB1-NB Stack Overflow in MediaTek MT6769 Baseband Classification: CWE-121 — Stack-based Buffer Overflow Severity: Critical MediaTek bulletin · 8.8 High, Attack Vector: Adjacent CISA-ADP Type: Remote Code Execution — no user interaction, no prior association Disclosure:...

CVE-2019-6203-PoC

CVE-2019-6203-PoC There is a PEAP bug in all Apple devices that would allow an attacker to force any Apple device iOS, macOS or tvOS to associate with a malicious access point. This is a PoC for CVE-2019-6203, works on iOS 12.2, macOS 10.14.4, tested on Kali Linux. You need a Wi-Fi card that...

CVE-2026-103239

MISP contains a privilege escalation vulnerability in the tag collection creation and editing functionality. The affected actions accepted the full HTTP request payload and passed it to a bulk-association save operation, which writes not only the intended tag collection record but also any...

EUVD-2026-89761

MISP contains a privilege escalation vulnerability in the tag collection creation and editing functionality. The affected actions accepted the full HTTP request payload and passed it to a bulk-association save operation, which writes not only the intended tag collection record but also any...

CVE-2026-96274

In Baicells Nova 430H, an unauthenticated device within radio range can send a malformed uplink message during connection setup that contains an invalid NAS payload. Because the eNodeB does not properly validate this payload, it forwards the message to the core network, which can trigger a shutdo...

CVE-2026-96274 Uncaught exception in Baicells Nova 430H

In Baicells Nova 430H, an unauthenticated device within radio range can send a malformed uplink message during connection setup that contains an invalid NAS payload. Because the eNodeB does not properly validate this payload, it forwards the message to the core network, which can trigger a shutdo...

CVE-2026-96274

The Baicells Nova 430H is vulnerable to a denial-of-service (DoS) condition where an unauthenticated device within radio range can send a malformed uplink message during connection setup. The flaw exists because the eNodeB fails to properly validate an invalid NAS payload , leading it to forward ...

CVE-2026-96274 Uncaught exception in Baicells Nova 430H

In Baicells Nova 430H, an unauthenticated device within radio range can send a malformed uplink message during connection setup that contains an invalid NAS payload. Because the eNodeB does not properly validate this payload, it forwards the message to the core network, which can trigger a shutdo...

EUVD-2026-89358

In Baicells Nova 430H, an unauthenticated device within radio range can send a malformed uplink message during connection setup that contains an invalid NAS payload. Because the eNodeB does not properly validate this payload, it forwards the message to the core network, which can trigger a shutdo...

Enumprotections_BOF

Enumprotections BOF This BOF can be used to enumerate system processes and identify the protection level of each one. Additional information, like service relation, user, session, and path, are also returned. This information in combination can be used to identify good candidates to explore for...

CVE-2026-93761

A flaw was found in Mongoid. An inefficient regular expression regex complexity issue in the in-memory query evaluation component of the Mongoid library may allow an unauthenticated attacker to cause excessive processing within an embedding application. This can lead to a denial of service DoS...

CVE-2026-93806

A flaw was found in the Linux kernel's cfg80211 wireless subsystem. An attacker within Wi-Fi range could cause a Denial of Service DoS by sending a truncated association response frame. The wireless component accesses status and information fields before verifying that the received management fra...