cbrutekrag

cbrutekrag Test di penetrazione su server SSH utilizzando attacchi a dizionario. Scritto in C. brute krag significa "forza bruta" in afrikáans Dichiarazione di non responsabilità Questo strumento è solo per scopi di test etici. cbrutekrag e i suoi proprietari non possono essere ritenuti...

CVE-2026-98243

A flaw was found in the Linux kernel's dma-buf subsystem. When querying driver or timeline names on synchronization fences, the kernel fails to properly verify the fence signaling state before accessing operational handlers. This flaw can lead to a use-after-free condition where previously releas...

CVE-2024-21689

CVE-2024–21689 RCE Bamboo Data Center and Server Atlassian CVSS Score - 7.6 🔥 Description This High severity RCE Remote Code Execution vulnerability CVE-2024-21689 was introduced in versions 9.1.0, 9.2.0, 9.3.0, 9.4.0, 9.5.0, and 9.6.0 of Bamboo Data Center and Server. This RCE Remote Code...

creak

creak Realiza algunos de los ataques MITM más famosos sobre direcciones objetivo ubicadas en una red local. Entre estos, deniega las capacidades de navegación y descarga de un host objetivo en la red local realizando un ataque de envenenamiento ARP y enviando paquetes TCP reset a cada solicitud...

CVE-2021-31761

..| CVE-2021-31761 |.. Description : Exploiting a Reflected Cross-Site Scripting XSS attack to get a Remote Command Execution RCE through the Webmin's running process feature Tested Version : Webmin 1.973 GitHub's latest version 07/03/2021 Attack Type: Remote Impact : Remote Command Execution...

CVE-2024-26574

CVE-2024-26574 Wondershare Filmora v.13.0.51 - Insecure Permissions Privilege Escalation Description: Insecure Permissions vulnerability in Wondershare Filmora and versions below allows a local unprivileged attacker to execute arbitrary code as SYSTEM via a crafted script to the controlable path...

CVE-2023-0386-OverlayFS

CVE-2023-0386 - OverlayFS / FUSE Original CVE source written by xkaneiki: https://github.com/xkaneiki/CVE-2023-0386/tree/main Rewritten so the exploit can be run in 1 shell original exploit requires 2 shells. Compile make all Create mount point for fuse filesystem mkdir -p /tmp/fusepwn/lower Star...

flashlight

Herramienta automatizada de recolección de información para testers de penetración Videos : https://www.youtube.com/watch?v=EUMKffaAxzs&list=PL1BVM6VWlmWZOv9Hv8TV2v-kAlUmvA5g7&index=4 https://www.youtube.com/watch?v=qCgW-SfYl1c&list=PL1BVM6VWlmWZOv9Hv8TV2v-kAlUmvA5g7&index=5...

attack-surface-framework

Attack Surface Framework Resumen ASF tiene como objetivo proteger a las organizaciones actuando como un vigía de la superficie de ataque. Proporcionando un "Objeto" que puede ser: un Dominio, dirección IP o CIDR Interno o Externo, ASF descubrirá activos/subdominios, enumerará sus puertos y...

CVE-2026-98309

A flaw was found in the Linux kernel. A use-after-free vulnerability exists in the VideoCore IV vc4 display driver where background polling tasks are not properly finalized when the driver is unbound. A local user could exploit this flaw by unbinding the device or unloading the driver module,...

CVE-2026-108538

A security vulnerability has been detected in GPAC up to 26.07.0. The impacted element is the function gfmxv of the file utils/osthread.c of the component MP4Box. Such manipulation leads to use after free. The attack can be launched remotely. The exploit has been disclosed publicly and may be use...

CVE-2026-108539

A vulnerability was detected in GPAC up to 26.07.0. This affects the function gffqpop of the file filtercore/filterqueue.c of the component MP4Box. Performing a manipulation results in use after free. The attack may be initiated remotely. The exploit is now public and may be used. The vendor was...

web-check

Web-Check Comprehensive, on-demand open source intelligence for any website 🌐web-check.xyz Kindly supported by: NinjaPear API to get a full B2B profiles from any URL | Hostinger Deploy Web-Check with one click on Hostinger | Warp Built for coding with multiple AI agents ---|---|--- Contents About...

beef

Copyright c 2006-2026 Wade Alcorn - [email protected] Browser Exploitation Framework BeEF - https://beefproject.com Vedi il file 'doc/COPYING' per i permessi di copia =============================================================================== Cos'è BeEF? BeEF è l'acronimo di The Browser...

routopsy

routopsy Routopsy es un conjunto de herramientas diseñado para atacar protocolos de red que a menudo se pasan por alto. Routopsy actualmente admite ataques contra Protocolos de Enrutamiento Dinámico DRP y Protocolos de Redundancia de Primer Salto FHRP. La mayoría de los ataques actualmente...

CVE-2026-108539 GPAC MP4Box filter_queue.c gf_fq_pop use after free

A vulnerability was detected in GPAC up to 26.07.0. This affects the function gffqpop of the file filtercore/filterqueue.c of the component MP4Box. Performing a manipulation results in use after free. The attack may be initiated remotely. The exploit is now public and may be used. The vendor was...

pmkidcracker

Crackeador de PMKID WPA2 Este programa es una herramienta escrita en Python para recuperar la clave precompartida de una red WiFi WPA2 sin necesidad de desautenticación ni requerir que haya clientes en la red. Aprovecha la debilidad de ciertos puntos de acceso que anuncian el valor PMKID en el...

bpflock

bpflock - Blocca macchine Linux bpflock - sicurezza basata su eBPF per bloccare e controllare le macchine Linux. Nota: bpflock è attualmente in fase sperimentale , potrebbe rompersi, le opzioni e la semantica di sicurezza potrebbero cambiare, alcuni programmi BPF saranno aggiornati per utilizzare...

CVE-2019-19550

CVE-2019-19550 Description Remote Authentication Bypass in Senior Rubiweb 6.2.34.28 and 6.2.34.37 allows admin access to sensitive information of affected users using vulnerable versions. The attacker only needs to provide the correct URL. Important Dates Announcement to Vendor: 2019-12-02 Public...

stride-gpt

STRIDE GPT è uno strumento di threat modelling basato sull'IA che sfrutta i Large Language Models LLM per generare modelli di minaccia e alberi di attacco per una determinata applicazione basandosi sulla metodologia STRIDE. Gli utenti forniscono i dettagli dell'applicazione, come il tipo di...