CVE-2024-6387

Comprobador de Vulnerabilidad CVE-2024-6387 de OpenSSH Este script en Python verifica si los servidores están ejecutando una versión vulnerable de OpenSSH susceptible a la vulnerabilidad CVE-2024-6387. Escanea las direcciones IP o rangos de red especificados en busca del banner de OpenSSH y lo...

collateral-damage

Daño Colateral Daño Colateral es un exploit de kernel para Xbox SystemOS que utiliza CVE-2024-30088. Está dirigido a consolas Xbox One y Xbox Series con versiones de kernel 25398.4478, 25398.4908 y 25398.4909. El punto de entrada inicial es a través de la aplicación UWP Game Script. Los payloads ...

ios.CVE-2026-84616-84607

AppleAVE2 CVE Research — iOS 27.0 !IMPORTANT This repository is research-assisted by AI agents !NOTE Open Research Contributions are welcome CVE-2026-84607 AVEVideoEncoder race → kernel privileges: the fix, located What this is iOS 27.0 advisory 149034, component AVEVideoEncoder : "A sandboxed ap...

CVE-2026-104045

A flaw was found in SSSD. A local user can trigger a Denial of Service DoS by exploiting a race condition in the autofs responder between asynchronous enumeration completion and map invalidation. By repeatedly sending concurrent map enumeration and invalidation requests, an attacker can cause...

http-mcp-bridge

HTTP MCP Bridge This project implements an HTTP server that acts as a bridge between HTTP/1.1 requests and a remote MCP server, using the mcp python library GitHub. The main purpose of this initiative is to be able to use HTTP security tools to test remote MCP servers using the remote transport...

cve-2024-6387-poc

cve-2024-6387-poc una condición de carrera en el manejador de señales del servidor de OpenSSH sshd 7etsuo Descripción Un exploit para CVE-2024-6387, dirigido a una condición de carrera en el manejador de señales del servidor de OpenSSH sshd en sistemas Linux basados en glibc. La vulnerabilidad...

EUVD-2026-94006

A flaw was found in SSSD. A local user can trigger a Denial of Service DoS by exploiting a race condition in the autofs responder between asynchronous enumeration completion and map invalidation. By repeatedly sending concurrent map enumeration and invalidation requests, an attacker can cause...

CVE-2026-104045

A race condition in the SSSD autofs responder allows a local user to trigger a Denial of Service (DoS) . By sending concurrent map enumeration and invalidation requests, an attacker can cause a memory leak , resulting in excessive memory consumption that may disrupt or crash the autofs service . ...

CVE-2024-30088

CVE-2024-30088 Bug: Bug is inside function AuthzBasepCopyoutInternalSecurityAttributes when kernel copies the AUTHZBASEPSECURITYATTRIBUTESINFORMATION of current token object to user mode, which has structure like this: //0x30 bytes sizeof struct AUTHZBASEPSECURITYATTRIBUTESINFORMATION ULONG...

CVE-2026-28992-IOHIDFamily-FastPathUserClient-Race-Conditions

CVE-2026-28992: IOHIDFamily FastPathUserClient Race Conditions CVE-2026-28992 | Author: Johnny Franks @0xjohnny Component: IOHIDFamily Impact: An attacker may be able to cause unexpected app termination Description: A memory corruption vulnerability was addressed with improved locking. —Apple...

CVE-2026-56906

In epfree of eventpoll.c, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-106426

Race condition in Fonts in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-106405

Race condition in CustomTabs in Google Chrome on on Android prior to 155.0.8059.39 allowed a local attacker to bypass web origin policy via a co-installed app. Chromium security severity: Medium...

CVE-2026-106412

Race condition in Core in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-106413

Race condition in Browser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106385

Race condition in Chromoting in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially bypass system access restrictions via crafted network traffic. Chromium security severity: Low...

CVE-2026-106377

Race condition in Fonts in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-106300

Race condition in CacheStorage in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106255

Race condition in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-106238

Race condition in Fonts in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...