EvilFOCA

Evil FOCA Requirements Windows XP or later. .NET Framework 4 or later. Winpcap library http://www.winpcap.org Introduction Evil Foca is a tool for security pentesters and auditors whose purpose it is to test security in IPv4 and IPv6 data networks. The tool is capable of carrying out various...

WarChild

War Child Warchild is a denial of service testing suite made for analysing the strength of your website against different kinds of denial of service attacks you will be facing which are mainly organised by crooks to cause damage to your website.. Alt text Installation For Installing the required...

DDoS-Ripper

DDoS-Ripper What is a DDoS Attack? A Distributable Denied-of-Service DDOS attack server that cuts off targets or surrounding infrastructure in a flood of Internet traffic DDoS attacks achieve effectiveness using multiple compromised computer systems as a source of attack traffic. Search engines m...

openssl: heap buffer overflow in CMS key unwrapping

A flaw was found in OpenSSL. A crafted CMS Cryptographic Message Syntax message can cause an 8-byte out-of-bounds heap write when it is decrypted with CMSdecrypt. This issue occurs because the CMS decryption process incorrectly sizes the key-unwrap output buffer when using the AES-WRAP-PAD unwrap...

openssl: compat-openssl: openssl: Information disclosure via DTLS handshake retransmission

A flaw was found in OpenSSL. The Datagram Transport Layer Security DTLS retransmission mechanism fails to properly handle handshake message writes that are suspended before completion. A remote attacker could exploit this vulnerability during handshake message retransmission, causing OpenSSL to...

openssl: compat-openssl: openssl: Information disclosure via DTLS handshake retransmission

A flaw was found in OpenSSL. The Datagram Transport Layer Security DTLS retransmission mechanism fails to properly handle handshake message writes that are suspended before completion. A remote attacker could exploit this vulnerability during handshake message retransmission, causing OpenSSL to...

androguard

Androguard Androguard: Reverse engineering and pentesting for Android applications Androguard 5 is a Python toolkit for Android reverse engineering: open an APK, inspect the manifest and DEX, disassemble or decompile code, hunt references and vulnerabilities, and optionally patch or analyze nativ...

CVE-2026-66086

A stack-based buffer overflow exists in the modem OTA stack due to improper validation of scheduling information within SIB1 messages . This vulnerability could allow an attacker to achieve remote code execution or cause a denial of service without requiring additional execution privileges. No sp...

EUVD-2026-97142

In the modem OTA stack, there is a possible stack-based buffer overflow due to improper validation of scheduling information in SIB1 messages. This could lead to remote code execution or denial of service with no additional execution privileges needed...

CVE-2026-87765

The kernel apsys DVFS driver is vulnerable to an out-of-bounds read or hardware register corruption . This issue stems from improper input validation of the frequency index. An attacker with local privileges could exploit this vulnerability to cause system instability or a denial of service . No ...

EUVD-2026-97140

In the kernel apsys DVFS driver, there is a possible out-of-bounds read or hardware register corruption due to improper input validation of the frequency index. This could lead to system instability or denial of service with local privileges...

The vulnerability of the control console of the MaxPatrol EDR detection and response system allows a perpetrator to trigger a service failure.

The vulnerability of the control console of the MaxPatrol EDR detection and response system is related to access control errors. Exploiting this vulnerability could allow a malicious actor to cause service failures...

CVE-2020-0796-PoC

CVE-2020-0796 PoC también conocido como CoronaBlue o SMBGhost Uso ./CVE-2020-0796.py servername Este script se conecta al host objetivo y comprime la solicitud de autenticación con un campo de offset incorrecto establecido en el encabezado de transformación, lo que provoca que el descompresor...

apachedos

Esta herramienta usa CVE-2016-8740 para bloquear servidores que ejecutan Apache HTTPD 2.4.17 - 2.4.23 con soporte HTTP2. Bloquea estos servidores forzándolos a asignar cantidades increíblemente grandes de RAM, haciendo que la computadora sea inutilizable. Se puede descargar aquí necesitarás...

CVE-2023-29929

CVE-2023-29929: DoS remoto "Instakill" en Kemp LoadMaster mediante paquete DNS Los dispositivos Kemp LoadMaster firmware 7.2.60 sufren una vulnerabilidad crítica de desbordamiento de búfer en los métodos isreverse y locatefqdn de la biblioteca libkemplink.so. La vulnerabilidad se origina por un...

CVE-2022-21907

CVE-2022-21907 Vulnerabilidad en la pila de protocolo HTTP que permite la ejecución remota de código y un posible bloqueo del sistema. Tabla de contenidos CVE-2022-21907 Descripción Entorno Configuración de la máquina víctima Configuración de la máquina atacante Exploit Prueba de concepto...

CVE-2024-38063-scanner

Resumen Este proyecto es un script de Python diseñado para identificar y explotar sistemas Windows vulnerables utilizando Shodan para el reconocimiento y Scapy para crear y enviar paquetes IPv6 maliciosos dirigidos a CVE-2024-38063. La herramienta automatiza el proceso de búsqueda de hosts...

cve-2022-21907

CVE-2022-21907 Aplicación Golang por 1vere$k CVE-2022-21907 - Double Free en el controlador http.sys. Resumen Esta es una aplicación Golang de subprocesos múltiples que permite hacer solicitudes a algunos objetivos simultáneamente. No es muy productiva con las solicitudes POST, pero proporciona...

CVE-2026-14266

CVE-2026-14266 — 7-Zip XZ Decoder Heap Buffer Overflow Critical Severity | CVSS: 8.8 High | CWE-122: Heap-based Buffer Overflow Affected: 7-Zip ≤ 26.01 | Patched: 7-Zip 26.02 2026-06-25 Discovered & Analyzed by: Li Yuxuan liyuxuan504-byte and team Executive Summary A heap buffer overflow exists i...

evilMP4

evilMP4 Explora CVE-2022-41741 con el repositorio Evil MP4. Ofrece PoCs educativos y documentación detallada sobre cómo asegurar nginx contra vulnerabilidades de archivos MP4. Solo para pruebas de seguridad legales y éticas. Este repositorio proporciona herramientas, documentación y ejemplos para...