exploitarium

https://discord.gg/WytKH65ZR join up for research, help, documentation, and more useful information for those interested. Statement This repo was incomplete when published. In regard to AI usage, my fuzzing workflow was automated by AI with a strict workflow. I used GPT-5.3 for ALL the fuzzing, a...

TEST-CVE-2023-32233

Use-After-Free en Netfilter nftables al procesar solicitudes por lotes Detalles de la vulnerabilidad El código afectado se origina del kernel oficial de Linux de https://kernel.org/ y es parte del componente Netfilter nftables net/netfilter/nftablesapi.c. Netfilter nftables permite actualizar su...

CVE-2022-40684

CVE-2022-40684 CVE-2022-40684 exploit individual o por lotes Modo de uso Generar clave pública python3 exp.py -u ip:port -k idrsa2048.pub -l hosts.txt especificar archivo por lotes FOFA title="FortiGate"...

saas_enum

SaaS Enum SaaS Enum es una herramienta de línea de comandos para descubrir las plataformas SaaS que una empresa puede estar utilizando. La herramienta busca registros DNS que coincidan con patrones de proveedores conocidos y, opcionalmente, realiza comprobaciones web ligeras para confirmar...

EUVD-2026-76117

When XML batch processing is turned on and the XPath option is selected, the raw batch input goes through a default XPath/JAXP setup with no entity restrictions, so XXE injection can allow data exfiltration and denial-of-service attacks...

CVE-2026-82578 NextGen Healthcare Mirth Connect Improper Restriction of XML External Entity Reference

When XML batch processing is turned on and the XPath option is selected, the raw batch input goes through a default XPath/JAXP setup with no entity restrictions, so XXE injection can allow data exfiltration and denial-of-service attacks...

CVE-2026-82578

NextGen Healthcare Mirth Connect is affected by an XXE injection vulnerability in its XML batch processing feature. When the XPath option is selected, raw batch input is processed through a default XPath/JAXP parser with no entity restrictions , allowing an unauthenticated, network-based attacker...

CVE-2026-11961

CVE-2026-11961 Herramienta de explotación masiva para CVE-2026-11961 que afecta al plugin de WordPress User Registration & Membership. Características Detección de versión del plugin Soporte para un único objetivo Procesamiento de objetivos por lotes Soporte multi-hilo Credenciales aleatorias o...

pdbdownload

Una utilidad para descargar archivos PDB asociados a un Portable Executable PE. Características Descargar símbolos PDB de msdl.microsoft.com. Procesar un solo archivo PortableExecutable PE o un lote de ellos. Demostración...

Stego-Lab

Stego-Lab Esteganografía. EXIF. Marcas de agua. Decodificar. Lote. Flujos de trabajo profesionales de privacidad de imágenes para iPhone, iPad y macOS. Sitio web · GitLab · Página del proyecto · Política de privacidad · Kit de prensa · Soporte · Licencia Por qué Stego-Lab Stego-Lab reúne flujos d...

Open-Redirect-Finder

Open-Redirect-Finder Open Redirect Finder es una herramienta de automatización utilizada para detectar vulnerabilidades de redirección abierta en una URL. Características Procesamiento por lotes: admite probar múltiples URLs a la vez desde un archivo de entrada. Validación automática: comprueba s...

CVE-2021-22005-

CVE-2021-22005- CVE-2021-22005 script de python para verificación por lotes Entorno de ejecución: python3 Ejecución: coloque las URLs a verificar en un archivo de texto, por ejemplo url.txt, luego ejecute python3 url.txt...

CVE-2026-81643 Broken access control in AshGraphql subscription batcher applies authorization suppression to only the first notification

Incorrect Authorization vulnerability in ash-project ashgraphql delivers GraphQL subscription payloads for records a subscriber is not authorized to see. In AshGraphql.Subscription.Batcher, dosend/5 resolves the first notification of a batch and filters it with shouldsend?/1, which drops results...

CVE-2026-81643 Broken access control in AshGraphql subscription batcher applies authorization suppression to only the first notification

Incorrect Authorization vulnerability in ash-project ashgraphql delivers GraphQL subscription payloads for records a subscriber is not authorized to see. In AshGraphql.Subscription.Batcher, dosend/5 resolves the first notification of a batch and filters it with shouldsend?/1, which drops results...

Astra Linux – Vulnerability found in Linux 5.15, Linux 5.10, and Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: Do not ignore the genmask when looking up a chain by its ID. When adding a rule to a chain whose ID is referenced, if that chain has been deleted in the same batch, the rule might end up referencing a deleted...

CVE-2026-73558

A flaw was found in vLLM, an inference and serving engine for large language models. An integer overflow vulnerability in the actandmulkernel kernel allows a remote attacker to cause cross-user data leakage. By crafting specific requests processed in the same inference batch, an attacker can obta...

PT-2026-71673

Name of the Vulnerable Software and Affected Versions vLLM versions prior to 0.27.0 Description An integer overflow occurs in the calculation blockIdx.x 2 d within the activation kernels.cu file. This flaw can cause the act and mul kernel function to consume input from another user within the sam...

Exploit for Use After Free in Linux Linux_Kernel

CVE-2023-32233 — nftables Use-After-Free: Reproduction & Root...

UBUNTU-CVE-2026-64575

In the Linux kernel, the following vulnerability has been resolved: bpf: tcp: fix double sock release on batch realloc bpfitertcpbatch releases the current batch via bpfitertcpputbatch, which drops the socket refs and rewrites each slot with the socket cookie, then grows the batch. cursk/endsk ar...

CVE-2026-46320

A flaw was found in the Linux kernel's tap driver. This vulnerability occurs in the tapgetuserxdp function, where allocated memory pages are not properly freed when processing rejected network frames. Specifically, if a frame is shorter than the expected Ethernet header length or if memory...