Exploit for CVE-2022-21812

Intel HAXM Kernel Driver: Reverse Engineering & CVE-2022-21812...

winsos-poc

WinSOS This technique utilizes executables within the WinSxS folder, commonly trusted by Windows, to exploit the classic DLL Search Order Hijacking method. By leveraging these executables, threat actors can execute malicious code within Windows applications without requiring elevated privileges...

CIMCown

CIMCown CVE-2026-20200 Argument Injection in Cisco IMC with RCE Christoph Peil @ NSIDE ATTACK LOGIC 2026 CVE: CVE-2026-20200 CVSS v3.1 CISCO: 8.8 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS v3.1 NSIDE: 9.9 AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H Advisory: NSIDE-SA-2026-003 Blogpost:...

revng

Das rev.ng Binary-Analyse-Framework und Decompiler Willkommen beim rev.ng-Projekt! rev.ng ist ein Open-Source-Binary-Analyse-Framework, das auf LLVM und QEMU basiert. Es verfügt über einen vollwertigen Decompiler. Es wird von rev.ng Labs offen entwickelt. Erste Schritte Besuchen Sie die...

jeopardize

Introducción La herramienta Jeopardize está desarrollada para proporcionar capacidades básicas de inteligencia y respuesta contra amenazas de dominios de phishing al mínimo costo posible. Detecta candidatos a dominios de phishing registrados typosquatting, homógrafos, etc., los analiza y les asig...

gokart

GoKart - Análisis Estático de Seguridad para Go GoKart es una herramienta de análisis estático para Go que encuentra vulnerabilidades utilizando la forma SSA asignación única estática del código fuente Go. Es capaz de rastrear el origen de variables y argumentos de funciones para determinar si la...

anteater

Anteater - Marco de Verificación de Puerta CI/CD Descripción Anteater es un marco abierto para evitar la fusión no deseada de cadenas nominadas, nombres de archivo, binarios, funciones obsoletas, código/credenciales de entorno de staging, etc. Cualquier cosa que pueda especificarse con sintaxis d...

gladius

Gladius Modo fácil de Responder a Credenciales Autor: Cory Duplantis @ctfhacker / blog Artículo en el blog sobre Gladius asciicast Gladius proporciona un método automatizado para descifrar credenciales de diversas fuentes durante un compromiso. Actualmente desciframos hashes de Responder,...

bst

Binary String Toolkit Resumen El Binary String Toolkit o BST, para abreviar, es una utilidad bastante simple para convertir cadenas binarias a varios formatos adecuados para su inclusión en códigos fuente, como los utilizados para desarrollar exploits y Pruebas de Concepto en el campo de la...

lpe-toolkit

Kit de LPE Linux Kit d'escalade de privilèges multi-architecture avec 24 exploits amd64 pré-compilé ; autres architectures compilées via gcc à l'exécution. Prend en charge amd64, arm64, 386, mips, mipsle, mips64, et mips64le. Détecte la version du noyau, filtre les exploits corrigés, et essaie...

Source

Repositorio Fuente de LibreWolf Este repositorio contiene todos los parches y temas que componen LibreWolf, así como scripts y un Makefile para compilar LibreWolf. También está el repositorio de Configuración, que contiene las preferencias de LibreWolf. Resumen de LibreWolf graph LR FFSRCFirefox...

CLEANSTART-2026-AY85890 discrepancy between how Go and C/C++ comments were parsed allowed for code smuggling into the resulting cgo binary

Security vulnerability affects the victoria-metrics package. A discrepancy between how Go and C/C++ comments were parsed allowed for code smuggling into the resulting cgo binary...

Malicious code in pxnpm (npm)

pxnpm 7.0.0-beta.6, 7.0.0-beta.8 and 7.0.0 published 2026-10-06 by user nfjbill are a 10-file, 16 KB launcher for a native executable that is not contained in the package. The postinstall script bin/install.cjs calls ensureNative in dist/download.cjs, which downloads a 17-21 MB Brotli archive for...

curl: CVE-2026-107928: info leak uploading over WebSockets with GnuTLS

Summary: When curl is built with GnuTLS, a malicious WebSocket server can make curl -T wss://... send memory past curl's WebSocket send buffer. This is due to an out of bounds read in gtlssend, which doesn't handle if gnutlsrecordsend returns a number of bytes sent greater than the number of byte...

Malicious code in @brick-v2/icons (npm)

@brick-v2/icons is a dependency confusion package published to npm on 2026-10-09 by the account s4yhii, targeting the internal @galicia-toolkit- / @brick-v2 package namespaces with inflated versions e.g. 999.0.x. Early versions resolve ..dc.oob.s4yhii.com via DNS to beacon the victim's hostname...

Malicious code in @galicia-toolkit-nestjs-20/commons (npm)

@galicia-toolkit-nestjs-20/commons is a dependency confusion package published to npm on 2026-10-09 by the account s4yhii, targeting the internal @galicia-toolkit- / @brick-v2 package namespaces with inflated versions e.g. 999.0.x. Early versions resolve ..dc.oob.s4yhii.com via DNS to beacon the...

Malicious code in @galicia-toolkit-nestjs-20-lite/commons (npm)

@galicia-toolkit-nestjs-20-lite/commons is a dependency confusion package published to npm on 2026-10-09 by the account s4yhii, targeting the internal @galicia-toolkit- / @brick-v2 package namespaces with inflated versions e.g. 999.0.x. Early versions resolve ..dc.oob.s4yhii.com via DNS to beacon...

Malicious code in @galicia-toolkit-cheques-nc/front (npm)

@galicia-toolkit-cheques-nc/front is a dependency confusion package published to npm on 2026-10-09 by the account s4yhii, targeting the internal @galicia-toolkit- / @brick-v2 package namespaces with inflated versions e.g. 999.0.x. Early versions resolve ..dc.oob.s4yhii.com via DNS to beacon the...

Malicious code in @galicia-toolkit-nestjs-20/archetype (npm)

@galicia-toolkit-nestjs-20/archetype is a dependency confusion package published to npm on 2026-10-09 by the account s4yhii, targeting the internal @galicia-toolkit- / @brick-v2 package namespaces with inflated versions e.g. 999.0.x. Early versions resolve ..dc.oob.s4yhii.com via DNS to beacon th...

Malicious code in @galicia-toolkit-nestjs/swagger (npm)

@galicia-toolkit-nestjs/swagger is a dependency confusion package published to npm on 2026-10-09 by the account s4yhii, targeting the internal @galicia-toolkit- / @brick-v2 package namespaces with inflated versions e.g. 999.0.x. Early versions resolve ..dc.oob.s4yhii.com via DNS to beacon the...