CVE-2026-98301

A flaw was found in the Linux kernel's network bridge subsystem. A local user with network configuration privileges can trigger a Denial of Service DoS by updating bridge Multiple Spanning Tree MST states. Because a blocking operation is invoked within an atomic execution context that cannot safe...

CVE-2026-98299

A flaw was found in the Linux kernel's TCP networking subsystem. A privileged local user can cause a Denial of Service DoS by configuring TCP receive buffer limits to an abnormally low value. This improper setting causes the kernel to encounter a division-by-zero error during buffer adjustment...

maskprocessor

maskprocessor Generador de palabras de alto rendimiento con un conjunto de caracteres configurable por posición Ataque por máscara Intenta todas las combinaciones de un espacio de claves dado, igual que en el ataque de fuerza bruta, pero más específico. Ventaja sobre la fuerza bruta La razón para...

mfoc

MFOC è un'implementazione open source dell'attacco "offline nested" di Nethemba. Questo programma consente di recuperare le chiavi di autenticazione dalle carte MIFARE Classic. Si prega di notare che MFOC è in grado di recuperare le chiavi dal target solo se dispone di una chiave nota: quella...

CVE-2026-108521

A vulnerability has been found in Studio-Saelix Sencho up to 0.97.1. Affected by this issue is the function isValidRemoteUrl of the file backend/src/utils/validation.ts of the component Add Remote Node API Endpoint. Such manipulation leads to server-side request forgery. The attack can be execute...

htshells

HTSHELLS - Web shell autocontenute e altri attacchi tramite file .htaccess. Gli attacchi sono nominati secondo il seguente schema, module.attack.htaccess e raggruppati per tipo di attacco in directory. Scegli quello che ti serve e copialo in un nuovo file chiamato .htaccess, controlla il file per...

CVE-2026-98297

A flaw was found in the Linux kernel's Bluetooth subsystem. A race condition occurs when network transmission requests are queued while the Bluetooth device is being shut down and its background workqueue is draining. A local attacker could exploit this vulnerability by sending data through...

CVE-2024-40324

CVE-2024-40324 Description A CRLF injection vulnerability in E-Staff v5.1 allows attackers to insert Carriage Return CR and Line Feed LF characters into input fields, leading to HTTP response splitting and header manipulation. Vulnerability Type CRLF Vendor of Product E-Staff Affected Product Cod...

CVE-2026-108521 Studio-Saelix Sencho Add Remote Node API Endpoint validation.ts isValidRemoteUrl server-side request forgery

A vulnerability has been found in Studio-Saelix Sencho up to 0.97.1. Affected by this issue is the function isValidRemoteUrl of the file backend/src/utils/validation.ts of the component Add Remote Node API Endpoint. Such manipulation leads to server-side request forgery. The attack can be execute...

CVE-2026-108521

A server-side request forgery (SSRF) vulnerability exists in Studio-Saelix Sencho up to version 0.97.1 . The flaw is located in the isValidRemoteUrl function within the backend/src/utils/validation.ts file of the Add Remote Node API Endpoint component. An authenticated user with node-management p...

CVE-2023-44487

HTTP2 Rapid Reset Attack: CVE-2023-44487 Quick exploit to test out rapid reset attack CVE-2023-44487. Note: For education purpose only Exploit: Quick exploit to test out rapid reset attack CVE-2023-44487. Note: For education purpose only Table of Contents Installation Usage Installation Clone the...

fragattacks

FragAttacks: Fragmentation & Aggregation Attacks 1. Introduzione Questo repository contiene il tool FragAttacks. Può testare client Wi-Fi e punti di accesso per attacchi di fr ammentazione e ag gregazione. Queste vulnerabilità riguardano tutte le reti Wi-Fi protette. Per maggiori informazioni su...

PyStegosploit

PyStegosploit - Exploit Delivery via Steganography and Polyglots video1 | video2 | page by Charmve - yidazhang1 at gmaildotcom, @Charmve @therealsaumil @amichael May 2021 Stegosploit creates a new way to encode "drive-by" browser exploits and deliver them through image files. These payloads are...

llm-prompt-injection-resources

llm-prompt-injection-resources A curated collection of resources for learning and researching LLM prompt injection attacks, defenses, and security. Donate Support the maintenance of this project with PayPal or by scanning the QR code below...

awesome-shodan-queries

Impresionantes Consultas de Búsqueda de Shodan Con el tiempo, he recolectado una variedad de consultas de búsqueda interesantes, divertidas y deprimentes para usar en Shodan, el literal motor de búsqueda de internet. Algunas devuelven resultados que provocan vergüenza ajena, mientras que otras...

cve-2024-25423

cve-2024-25423 An issue in MAXON CINEMA 4D R2024.2.0 allows a local attacker to execute arbitrary code via a crafted c4d file. Additional Information Cinema 4D out-of-bounds write vulnerability when parsing c4d files Affected Component c4dbase.xdl64 Tested Versions CINEMA 4D R2024.2.0 Attack Type...

Metasploit-Attack-Report

This repository does not have a README...

CVE-2020-16270

CVE-2020-16270 Suggested description : OLIMPOKS under 3.3.39 allows Auth/Admin ErrorMessage XSS. Remote Attacker can use discovered vulnerability to inject malicious JavaScript payload to victim’s browsers in context of vulnerable applications. Executed code can be used to steal administrator’s...

CVE-2025-1974

cve-2025-1974-win11-attack-defense-lab Windows 11-first educational repository for studying CVE-2025-1974 in a safe, non-weaponized ATTACK + DEFENSE lab. The project is designed for university coursework, team demos, and report-ready screenshots. It emphasizes clean-room implementation, local-onl...

CVE-2026-108682: Improper Resource Shutdown or Release

A weakness has been identified in zhayujie CowAgent up to 2.1.6. The affected element is the function read of the file /upload of the component Web Console. This manipulation causes denial of service. It is possible to initiate the attack remotely. The exploit has been made available to the publi...