wa-tunnel

wa-tunnel - TCP Tunneling through Whatsapp This is a Baileys based piece of code that lets you tunnel TCP data through two Whatsapp accounts. This can be usable in different situations, for example network carriers that give unlimited whatsapp data or airplanes where you also get unlimited social...

CVE-2026-90028

CVE-2026-90028 affects the Linux kernel USB Type-C driver for the hd3ss3220 controller. The root cause is that regulator_is_enabled() reports the aggregate regulator state rather than whether this particular consumer holds an enable reference. When another consumer enables VBUS first, the driver ...

RMASmoke

RMASmoke Una herramienta para deshabilitar Write-Protect usando una escritura oob en el TPM2 COMPILACIÓN Consulta BUILDING.MD;...

CVE-2026-31431

CVE-2026-31431 Copy Fail Checker Verifica si un host Linux es vulnerable a CVE-2026-31431 y aplica mitigación. Archivos checkcve202631431.yml - Playbook de Ansible para verificar y parchear revertcve202631431.yml - Playbook de Ansible para deshacer mitigación runcheck.sh - Script para ejecutar...

WinDefenderKiller

WinDefenderKiller DeshabilitaciónPermanenteDesdeRegistro Código en C++ para deshabilitar permanentemente Windows Defender mediante claves de registro ¡Solo compílalo y ejecútalo! Y cuando lo reinicie: BYOVDWindowsDefenderKiller Este módulo implementa una técnica BYOVD Bring Your Own Vulnerable...

fatal_core_dump

Misterio de Asesinato del Core Dump Fatal Repositorio para generar un sitio web de juego de misterio de asesinato con depuración de core dump. ESTE REPO CONTIENE SPOILERS DEL JUEGO!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! Puedes jugarlo aquí: https://www.robopenguins.com/fatalcoredump/ Para una entrada ...

paniclock

PanicLock es una utilidad de la barra de menús de macOS que desactiva instantáneamente Touch ID y bloquea la pantalla con un solo clic o cerrando la tapa de tu portátil. PanicLock llena un vacío que macOS deja abierto: no hay una forma integrada de desactivar Touch ID instantáneamente cuando es...

CVE-2026-73450

On affected Arista EOS platforms with MLAG Dual Primary Detection configured, an unauthenticated attacker with access to the heartbeat network segment can send crafted UDP packets to corrupt the dual-primary state. If the MLAG primary switch fails while these packets are present, the secondary sw...

EUVD-2026-80083

On affected platforms running Arista EOS with MLAG Dual Primary Detection configured, an unauthenticated attacker with access to the Dual Primary Detection network segment can send specially crafted packets to interfere with the dual-primary state. If the MLAG primary switch fails while these...

ghost-hoock

ghost-hoock A minimal fork of GhostLock that keeps only one primitive : turning off SELinux via CVE-2026-43499 futex PI UAF. ghost-hoock running on Samsung A17 -green Table of contents What is this How it works What was kept from the original What was removed Building Running Requirements...

Squid Proxy - HTTP Authentication Credentials Disclosure

Squid versions prior to 7.2 fail to redact HTTP authentication credentials in error page responses. The Authorization header value is embedded in plain text inside the mailto: diagnostic block when Squid generates an error page e.g. ERRDNSFAIL. id: CVE-2025-62168 info: name: Squid Proxy - HTTP...

Disable-Spooler-Service-PrintNightmare-CVE-2021-34527

Disable-Spooler-Service-PrintNightmare-CVE-2021-34527 Script batch simple para deshabilitar el servicio de Microsoft Print Spooler del sistema Ejecutar 1. Abra el Símbolo del sistema con privilegios elevados; se requieren privilegios de administrador para deshabilitar el servicio. 2. Ejecute el...

LightsOut

LightsOut LightsOut generará un DLL ofuscado que deshabilitará AMSI y ETW mientras intenta evadir el AV. Esto se logra aleatorizando todas las funciones de WinAPI utilizadas, codificando cadenas con XOR y utilizando comprobaciones básicas de sandbox. Mingw-w64 se utiliza para compilar el código C...

DSE-Patcher

DSE-Patcher https://www.codeproject.com/Articles/5348168/Disable-Driver-Signature-Enforcement-with-DSE-Patc...

CSRF-breach

Security breach project - Cross Site Request Forgery Dolibarr 7.0.0 está afectado por: Cross Site Request Forgery CSRF. El impacto es: permite que HTML malicioso cambie la contraseña del usuario, deshabilite usuarios y deshabilite el cifrado de contraseñas. El componente es: Función de cambio de...

CVE-2026-31321

PoC Defender está en ejecución Método 1 - Ocultar la carpeta relacionada con Windows Defender Antes del reinicio Después del reinicio, Defender ha desaparecido Método 2 - Bloquear la carpeta relacionada con Windows Defender Después del reinicio...

ghostlock-selinux-disabler

GhostLock Desactivador de SELinux Extracción de solo escritura 1 de JoinChang/ghostlock-oneplus para CVE-2026-43499. Desactiva SELinux enforcing en kernels OnePlus compatibles y vulnerables con un gestor de arranque bloqueado, y no hace nada más: sin sobrescritura de credenciales, sin shell root,...

EUVD-2026-77758

ESPHome Device Builder Dashboard is a dashboard for the ESPHome home management software. Prior to version 1.0.12, the dashboard reads its authentication credentials from $ESPHOMEUSERNAME and $ESPHOMEPASSWORD. Earlier versions, and the legacy esphome dashboard, read the bare $USERNAME and $PASSWO...

CVE-2026-57127

PraisonAI (multi-agent LLM framework on PyPI) prior to 4.6.58 contains a fail-open authentication bypass in praisonai/recipe/serve.py. When an operator sets auth: api-key or auth: jwt in the recipe YAML but fails to provide the corresponding secret (via YAML field or PRAISONAI_API_KEY / PRAISONAI...

CVE-2026-57127 praisonai: recipe serve auth middleware silently disables itself when no secret is set

PraisonAI is a multi-agent teams system. Prior to 4.6.58, recipe serve installs APIKeyAuthMiddleware or JWTAuthMiddleware when an operator selects api-key or JWT authentication, but each middleware forwards requests when PRAISONAIAPIKEY or PRAISONAIJWTSECRET and the corresponding recipe value are...