CVE-2026-83540

When password or public key authentication is used with the Windows port of wolfSSHd, the Windows logon token acquired for one authenticated connection is not released before a token is acquired for a subsequent connection, resulting in user login poisoning between connections. A less privileged...

CVE-2026-81535

In wolfSSH through 1.5.0 built with --enable-fwd, DoChannelOpen in src/internal.c gates only direct-tcpip channel opens with the forwarding policy callback. forwarded-tcpip opens are admitted without an authorization check and are not capped in number, allowing a malicious SSH peer to make an...

CVE-2026-83742

Unsigned integer underflow in wstrncat in src/port.c in wolfSSL wolfSSH from v1.4.11 through v1.5.0 on non-Windows platforms allows an authenticated remote attacker to write one out-of-bounds null byte past the end of a stack buffer by sending a crafted SFTP path. wolfSSHRealPath in src/ssh.c...

CVE-2023-27372

CVE-2023-27372 SPIP anterior a 4.2.1 permite la ejecución remota de código a través de los valores de formulario en el área pública porque la serialización se gestiona de forma incorrecta. Las versiones corregidas son 3.2.18, 4.0.10, 4.1.8 y 4.2.1. Este PoC explota una inyección de código PHP en...

CVE-2026-16516

wolfSSH does not validate that the ECDSA curve identifier in a KEXDHREPLY host key blob matches the algorithm negotiated during key exchange. In ParseECCPubKey src/internal.c, the blob's algorithm string is used to derive the curve via NameToId/wcPrimeForId without checking against the negotiated...

otseca

开源安全审计工具，用于搜索和导出系统配置。 介绍 | 描述 | 要求 | 输出 | 参数 | 报告 | 工作原理 | 其他 介绍 主要目标 创建此工具的主要假设是 更轻松 且 更快速 地交付需在客户环境中执行的 命令集 。通过这样的扫描，我希望在后续的渗透测试和审计之前，获取关于系统组件最有用的信息。 适用人群 Otseca 有助于收集给定系统的许多重要信息。 它对以下人群非常有用： :ballotboxwithcheck: 系统管理员 :ballotboxwithcheck: 安全研究人员 :ballotboxwithcheck: 安全专业人员 :ballotboxwithcheck:...

otseca

Open source security auditing tool to search and dump system configuration. Introduction | Description | Requirements | Output | Parameters | Reports | How it works | Other Introduction The main goal The main assumption of creating this tool was easier and faster delivery of commands sets to be...

Log4j-RCE-Scanner

特性 • 要求 • 安装 • 使用 • 联系 Log4j 远程命令执行扫描器 使用此工具，您可以扫描多个地址上的 Apache Log4j 远程命令执行漏洞 CVE-2021-44228。 受影响版本 如果要使用域名进行扫描，还必须额外安装 subfinder、assetfinder 和 amass。 安装 1. git clone https://github.com/adilsoybali/Log4j-RCE-Scanner.git 2. cd Log4j-RCE-Scanner 3. chmod +x log4j-rce-scanner.sh 使用...

CiLocks

/ / / / / / / / / / / / /// / / // / // // / // , //////|//v2.1 CiLocks | Android/IOS 入侵 📱 破解锁屏界面、Metasploit 及更多 Android/IOS 入侵 请勿用于非法活动 更新可用 V2.1 🚀 新增工具 获取 Android Root 权限 SuperSU（不支持所有操作系统版本） 跳转到 ADB 工具包 Shell 截屏 复制所有相机照片 复制所有 WhatsApp 文件夹 复制所有数据存储 手动复制 自定义 备份数据 恢复数据 重置权限 重启 移除锁屏 Root 跳转到...

CVE-2026-64531

CVE-2026-64531 — OVSwrap Linux kernel Open vSwitch module local privilege escalation normal user → root PoC. Exploits the integer wraparound of the 16-bit nlalen field to escalate from a normal user all the way to root. Vulnerability Summary When the nested action stream generated by OVS exceeds...

vsock_poc

vsockpoc Investigando el error detrás de CVE-2021-26708 Este repositorio contiene un pequeño informe sobre CVE-2021-26708, y cómo este error puede convertirse en una primitiva de escritura Use After Free. El PoC aquí no es un exploit completo, sino solo mi andamiaje que usé al intentar investigar...

PCLink

PCLink Server The secure backbone for your personal PC remote control ecosystem. PCLink is a modern, web-first server designed for secure remote PC management and high-performance screen streaming. Featuring a high-performance FastAPI backend, a responsive Web UI, and an extensible plugin system...

ssh-mitm

SSH-MITM - ssh audits made simple An interactive SSH interception tool for authorized security audits. Intercept sessions, monitor live traffic, inject commands, and manipulate file transfers — all in real time. !Follow me on...

socialscan

socialscan socialscan offers accurate and fast checks for email address and username usage on online platforms. Given an email address or username, socialscan returns whether it is available, taken or invalid on online platforms. Features that differentiate socialscan from similar tools e.g...

exifLooter

Exif Looter Publicación del Blog » · Reportar error · Solicitar característica Tabla de contenidos 1. Primeros pasos Instalación 2. Uso Analizar una imagen específica Analizar un directorio específico Tubería con otras herramientas Eliminar metadatos de imágenes Obtener URL de Open Street Map 3...

CVE-2024-51567

Script de Explotación CVE-2024-51567 CVE-2024-51567 es un script de explotación de prueba de concepto PoC en Python para CVE-2024-51567 , una vulnerabilidad crítica de inyección de comandos que afecta a CyberPanel v2.3.6. Esta vulnerabilidad, encontrada en el endpoint upgrademysqlstatus, permite ...

minimal

132 imágenes de contenedor pequeñas y reforzadas. Gratuitas, con licencia MIT, firmadas y reconstruidas cada seis horas. Explorar el catálogo → Inicio rápido docker pull ghcr.io/rtvkiz/minimal-python:latest No se necesita cuenta. Cada imagen tiene un complemento :latest-dev con un shell y un...

cve-2023-5217-poc

CVE-2023-5217: Desbordamiento de Montón en Codificación VP8 de libvpx PoC CVE-2023-5217 es una vulnerabilidad de libvpx explotada in-the-wild que fue encontrada por Clément Lecigne del Grupo de Análisis de Amenazas de Google para estar atacando Chrome. Este repositorio muestra cómo desencadenar...

reaver-wps-fork-t6x

Overview Reaver implements a brute force attack against Wifi Protected Setup WPS registrar PINs in order to recover WPA/WPA2 passphrases , as described in Brute forcing Wi-Fi Protected Setup When poor design meets poor implementation. by Stefan Viehböck. Reaver has been designed to be a robust an...

derf

DeRF DeRF（检测回放框架）是一个“攻击即服务”框架，允许从 UI 模拟攻击技术并生成可复现的检测样本——无需最终用户安装软件、使用 CLI 或在目标环境中拥有凭据。 阅读发布公告 阅读完整文档 部署 DeRF 是一个用于针对 AWS 账户和 GCP 项目执行攻击并生成检测样本的框架。该框架通过 Terraform 部署到目标 AWS 账户和 GCP 项目。 更详细的部署说明请参见此处。 部署步骤 1. 完成前提条件 - 参见前提条件。 2. 完成系统要求 - 参见系统要求。 3. 将 Github 仓库克隆到本地系统。 git clone...