kernel: libceph: refresh auth->authorizer_buf{,_len} after authorizer update

A flaw was found in the libceph component of the Linux kernel. During an authorizer update, if the authorizer is rebuilt, a stale pointer to a freed memory region can be retained. A remote attacker could exploit this by triggering a specific network reconnection, leading to a use-after-free...

lama

lama Lama, la aplicación que no tiene pelos en la lengua. Descripción Lama es una herramienta GNU Linux para generar listas de palabras. El objetivo es obtener un diccionario de contraseñas personalizado para un objetivo particular, ya sea físico o moral. Por lo tanto, es importante que las...

CVE-2026-98104

A flaw was found in the Linux kernel's network traffic control u32 classifier clsu32. This vulnerability allows a local user with network administration privileges to cause a Denial of Service DoS. When the pool of internal identifiers for filters or hash tables is exhausted, the kernel fails to...

CVE-2026-93267

A flaw was found in the Linux kernel's Remote Direct Memory Access RDMA subsystem. During object deallocation, internal resources associated with a Direct Memory Access Handle DMAH may be freed before the handle is removed from resource tracking. A local attacker can exploit this race condition...

CVE-2026-101055

A security flaw in Thinkware U3000 (up to version 1.02.04 ) allows for information disclosure via the GET_STATUS function of the TCP Service component. By manipulating the wifi_info argument, an attacker can remotely execute this attack. An exploit has been released to the public and may be used ...

CVE-2026-101055 Thinkware U3000 TCP Service GET_STATUS information disclosure

A security flaw has been discovered in Thinkware U3000 up to 1.02.04. Affected by this vulnerability is the function GETSTATUS of the component TCP Service. The manipulation of the argument wifiinfo results in information disclosure. The attack can be executed remotely. The exploit has been...

EUVD-2026-88227

A security flaw has been discovered in Thinkware U3000 up to 1.02.04. Affected by this vulnerability is the function GETSTATUS of the component TCP Service. The manipulation of the argument wifiinfo results in information disclosure. The attack can be executed remotely. The exploit has been...

hideNsneak

Bienvenido a hideNsneak. Esta aplicación ayuda a gestionar infraestructura de ataque para pentesters proporcionando una interfaz para desplegar, gestionar y desmantelar rápidamente varios servicios en la nube. Estos incluyen VMs, domain fronting, servidores Cobalt Strike, API gateways y firewalls...

thc-ipv6

THC-IPV6-ATTACK-TOOLKIT c 2005-2022 [email protected] https://github.com/vanhauser-thc/thc-ipv6 root@kitploit: Licenciado bajo AGPLv3 ver archivo LICENSE INTRODUCCIÓN Este código fue inspirado cuando entré en contacto con IPv6, aprendí más y más sobre él, y luego no encontré herramientas par...

nccfsas

Introducción Este repositorio contiene información publicada públicamente por el equipo de Full Spectrum Attack Simulation FSAS de NCC Group...

CVE-2026-93795

A flaw was found in the Linux kernel's block control group blk-cgroup subsystem, which can lead to a Denial of Service DoS. When an insertion failure occurs during the creation of a block group structure, the error-handling path fails to properly shut down reference counting. A local user can...

CVE-2026-93794

A flaw was found in the Linux kernel's SMB Server Message Block client. A local user can cause data corruption when performing hole-punching operations on a mounted SMB share. Because dirty memory pages are not flushed prior to punching a hole, uncommitted cached data can subsequently be written...

CVE-2026-93796

A flaw was found in the Linux kernel's iwlwifi driver. When wireless device initialization encounters an error during transmit setup, the cleanup process frees memory allocated for packet reception but fails to clear the corresponding pointers. A local user could trigger subsequent device teardow...

CVE-2026-82294

A flaw was found in Elasticsearch. An authenticated remote attacker can exploit this vulnerability to trigger excessive resource allocation, leading to a Denial of Service DoS. By sending requests that consume disproportionate system resources, an attacker can exhaust system capacity and cause th...

jok3r

...

PassGAN

PassGAN Este repositorio contiene el código del artículo PassGAN: A Deep Learning Approach for Password Guessing. El modelo de PassGAN proviene de Improved Training of Wasserstein GANs y se asume que los autores de PassGAN utilizaron la implementación en tensorflow improvedwgantraining en su...

Log4j-JNDIServer

Log4j-JNDIServer Este proyecto ayudará a probar las vulnerabilidades Log4j CVE-2021-44228/CVE-2021-45046. Instalación y Compilación Cargue el proyecto en Intellij Idea Seleccione JDK en "Projects Settings" CTRL + ALT + SHIFT + S En "Project Settings", cree el Artifact - "Artifacts" - "Create JAR...

CVE-2026-94399

A flaw was found in Elasticsearch. An authenticated remote attacker can exploit this vulnerability by submitting requests that trigger excessive resource allocation, leading to system exhaustion. This flaw can result in a Denial of Service DoS, rendering the service unresponsive to legitimate...

CVE-2026-93261

A flaw was found in the Linux kernel's lock dependency validator lockdep. When lock class registration fails, the kernel omits a check for an empty result before calculating internal index values, leading to memory corruption. A local user can exploit this vulnerability during lock reacquisition ...

CVE-2026-101054 Thinkware U3000 TCP Service wpa_supplicant.conf get_file access control

A vulnerability was identified in Thinkware U3000 up to 1.02.04. Affected is the function getfile of the file /tmp/wpasupplicant.conf of the component TCP Service. The manipulation leads to improper access controls. Remote exploitation of the attack is possible. The exploit is publicly available...