GateKeeper

GateKeeper GateKeeper is a self-hosted SSH access gateway written in Go. It acts as a centralized control layer in front of SSH, providing access control, MFA enforcement, session recording, auditing, and policy enforcement --- all delivered as a single binary with an embedded web UI. No external...

mauidll

mauidll Extract the managed .NET assemblies out of a MAUI Android assembly store. .NET Android apps ship their managed code inside a shared library, usually libassemblies..blob.so older versions or libassembly-store.so. mauidll parses that file and writes every assembly it contains to disk as a...

CVE-2026-31431

CVE-2026-31431 — Escalada de Privilegios Local mediante AFALG 2026-04-29 — Publico este exploit un día después de compartirlo en el foroMyDigitalLife. No requiere Python; está escrito en C y compilado al menor tamaño posible usando: musl-gcc -static -Os -o exploit exploit.c -s Amenaza crítica. El...

CVE-2026-41551

Reproducción de CVE-2026-41551 Vulnerabilidad: recorrido de ruta relativa en los servicios fileserver / fileserver2 de Siemens ROS CVSS v3.1: 9.1 AV:N / AC:L / PR:N / UI:N / S:U / C:H / I:H / A:N Versiones afectadas: todas las versiones de ros-sharp name.substr10; // elimina "package://"...

pwnkit-go

Pwnkit-go Este es un exploit funcional para la vulnerabilidad pwnkit, CVE-2021-4034, escrito en Go Pruébalo: create a vulnerable vagrant machine $ make vm ... build the binary and scp it to the vagrant box $ make scp ssh onto the vagrant box $ make ssh The default user is "vagrant"...

EUVD-2026-95142

MariaDB Connector/Node.js is used to connect applications developed on Node.js to MariaDB and MySQL databases. Prior to 3.2.5, 3.3.4, 3.4.7, and 3.5.4, the GeoJSON Polygon and MultiPolygon binary encoders size a Buffer.allocUnsafe allocation from each ring's numeric length before confirming that...

CVE-2026-107383 MariaDB Connector/Node.js exposes uninitialized process memory through malformed GeoJSON parameters

MariaDB Connector/Node.js is used to connect applications developed on Node.js to MariaDB and MySQL databases. Prior to 3.2.5, 3.3.4, 3.4.7, and 3.5.4, the GeoJSON Polygon and MultiPolygon binary encoders size a Buffer.allocUnsafe allocation from each ring's numeric length before confirming that...

CVE-2026-107383

MariaDB Connector/Node.js is used to connect applications developed on Node.js to MariaDB and MySQL databases. Prior to 3.2.5, 3.3.4, 3.4.7, and 3.5.4, the GeoJSON Polygon and MultiPolygon binary encoders size a Buffer.allocUnsafe allocation from each ring's numeric length before confirming that...

CVE-2026-107383 MariaDB Connector/Node.js exposes uninitialized process memory through malformed GeoJSON parameters

MariaDB Connector/Node.js is used to connect applications developed on Node.js to MariaDB and MySQL databases. Prior to 3.2.5, 3.3.4, 3.4.7, and 3.5.4, the GeoJSON Polygon and MultiPolygon binary encoders size a Buffer.allocUnsafe allocation from each ring's numeric length before confirming that...

CVE-2026-107383

The MariaDB Connector/Node.js library is vulnerable to information disclosure in versions prior to 3.2.5, 3.3.4, 3.4.7, and 3.5.4 . The issue resides in the GeoJSON Polygon and MultiPolygon binary encoders , which size a Buffer.allocUnsafe() allocation based on a ring's numeric length before veri...

CVE-2026-6018-9-Local-Privilege-Escalation-Chain

CVE-2025-6018 + CVE-2025-6019: Local Privilege Escalation Chain Target OS: openSUSE Leap 15.x / SUSE Linux Enterprise 15.x Required access: Unprivileged local user with SSH access Result: Full root shell Overview This document details the manual exploitation of two chained local privilege...

CVE-2021-4034

CVE-2021-4034 This is a POC for the vulnerability found in polkit's pkexec binary which is used to run programs as another users. For in-depth study: https://access.redhat.com/security/vulnerabilities/RHSB-2022-001 Run gcc poc.c -o poc && ./poc...

Ashwesker-CVE-2026-21509

🛡️ CVE-2026-21509 — Vulnerabilidad de Día Cero en Microsoft Office Estado: Explotada activamente → Parche de emergencia publicado Gravedad: 🔴 Alta Tipo de Riesgo: Omisión de Funciones de Seguridad 🔍 ¿Qué es? CVE-2026-21509 es una vulnerabilidad grave en Microsoft Office que permite a los atacantes...

CVE-2026-6042-PoC

CVE-2026-6042: DoS por Complejidad Algorítmica en iconv de musl libc Los bucles de salto de huecos en el decodificador GB18030 de 4 bytes de iconv en musl permiten que una pequeña entrada manipulada consuma una cantidad desproporcionada de tiempo de CPU. Una carga útil adversarial de 40 KB puede...

CVE-2026-21858

CVE-2026-21858 + CVE-2025-68613 - Cadena completa en n8n Lectura arbitraria de archivos sin autenticación → Forja de token de administrador → Bypass de sandbox → RCE Cadena completa de RCE sin autenticación en n8n: 1. CVE-2026-21858 - Confusión de Content-Type → Lectura arbitraria de archivos 2...

CVE-2026-20180

Cisco ISE RCE: Análisis Avanzado de Explotación y Remediación 📋 Tabla de Contenidos 1. Resumen Ejecutivo 2. Análisis de Superficie de Ataque 3. Vectores de Explotación 4. Técnicas de Evasión Avanzada 5. Impacto Sistémico en Arquitecturas Zero Trust 6. Estrategia de Remediación 7. Investigación...

cli

The VulnCheck CLI vulncheck is access to the VulnCheck API on the command line. It brings index browsing, backup management, and vulnerability scanning to the terminal. Installation Provided install scripts You can easily install vulncheck using an install script. Choose the script and method tha...

GHSA-8R5X-FM3F-WHWJ Handlebars: JavaScript Injection via AST Type Confusion in compile (bypass of CVE-2026-33937)

Summary Handlebars.compile and Handlebars.precompile accept a pre-parsed AST as well as a template string. Handlebars 4.7.9 added validation for such ASTs. It only checks values on PathExpression, NumberLiteral and BooleanLiteral nodes, and the compiler still writes several other AST values into...

Handlebars: JavaScript Injection via AST Type Confusion in compile (bypass of CVE-2026-33937)

Summary Handlebars.compile and Handlebars.precompile accept a pre-parsed AST as well as a template string. Handlebars 4.7.9 added validation for such ASTs. It only checks values on PathExpression, NumberLiteral and BooleanLiteral nodes, and the compiler still writes several other AST values into...

Compiled-PoC-Binary-For-CVE-2023-28252

Binario PoC Compilado Para CVE-2023-28252 El repositorio contiene un binario precompilado que puede ejecutarse en una máquina Windows vulnerable a CVE-2023-28252 El binario precompilado es una versión ligeramente modificada del exploit PoC que se ve en el repositorio de fortra. El archivo puede...