4529 matches found
Overflow-Demo-CVE-2017-11882
Overflow-Demo-CVE-2017-11882 Demo simple de desbordamiento mediante cadena de texto strcpy, similar al exp de CVE-2017-11882. Compilación Compilar con Visual Studio 2017 2019 también funciona; 2015 no funciona. Configuración del Proyecto root@kitploit: Project setting: c/c++ Optimization...
Umbra
Este es el repositorio para la distribución del navegador Umbra. El código fuente de Umbra no se encuentra aquí, construimos Umbra con un script llamado fern.js. Nuestro sistema de compilación se puede encontrar aquí: https://github.com/openconstruct/user-agent-desktop Umbra es un navegador de...
CVE-2021-21551
CVE-2021-21551 Un PoC que explota el controlador dbutil23 de Dell. Obtendrá ejecución de código en un sistema que tenga HVCI deshabilitado, como se muestra a continuación: Salida: El artículo sobre este código se puede encontrar aquí: https://ch3rn0byl.com/2021/05/a-dell-cve-2021-21551/...
CVE-2021-22911-rust
CVE-2021-22911 Un proof of concept en Rust para esta CVE. Se utiliza como parte de https://tryhackme.com/room/rocket, un CTF boot to root en la plataforma de aprendizaje TryHackMe. Para usarlo, actualiza las constantes en main.rs y ejecútalo, y debería funcionar directamente. Requiere que tengas ...
CVE-2026-42945-NGINX-Rift-Toolkit
CVE-2026-42945 Kit de herramientas para la vulnerabilidad Rift de Nginx Kit de herramientas integral para escanear, parchar y probar CVE-2026-42945, una vulnerabilidad crítica de ejecución remota de código en nginx Tabla de Contenidos Resumen Detalles de CVE Características Componentes del kit...
relayer
Relayer - SMB Relay Attack Script. Relayer is an SMB relay Attack Script that automates all the necessary steps to scan for systems with SMB signing disabled and relaying authentication request to these systems with the objective of gaining a shell. Great when performing Penetration testing...
The Plus Addons for Elementor Page Builder < 4.1.7 - Authentication Bypass
The Plus Addons for Elementor plugin before version 4.1.7 allowed attackers to bypass authentication, gain admin access, and create accounts with elevated roles, even when registration was disabled and the Login widget was inactive. id: CVE-2021-24175 info: name: The Plus Addons for Elementor Pag...
macstealer
MacStealer: Wi-Fi Client Isolation Bypass 1. Introduction This repo contains MacStealer. It can test Wi-Fi networks for client isolation bypasses CVE-2022-47522. Our attack can intercept steal traffic toward other clients at the MAC layer, even if clients are prevented from communicating with eac...
ibmsecurity
IBM Sample Code Este repositorio contiene código Python para gestionar IBM Security Appliances mediante sus respectivas API REST. El appliance ISAM es el que tiene el código más maduro. El código para el appliance ISDS está en desarrollo. El código para el appliance ISVG es nuevo probado solo con...
InfectPE
Using this tool you can inject x-code/shellcode into PE file. InjectPE works only with 32-bit executable files. Why you need InjectPE? You can test your security products. Use in a phishing campaign. Learn how PE injection works. ...and so on. In the project, there is hardcoded x-code of...
CVE-2024-8381
CVE-2024-8381 Un error de confusión de tipos en el intérprete SpiderMonkey. Este repositorio contiene análisis en formato Markdown y diapositivas, incluyendo la causa raíz, el PoC y el exploit. Desafortunadamente, debido a la naturaleza de este error, el exploit solo es aplicable cuando ASLR está...
CVE-2026-13157
CVE-2026-13157 Theme Demo Import = 1.1.3 — Carga Arbitraria de Archivos y Ejecución Remota de Código -E5A500?style=for-the-badge&logo=security&logoColor=white 📖 Descripción General del Aviso CVE-2026-13157 es una vulnerabilidad autenticada de carga arbitraria de archivos que afecta al plugin de...
CVE-2026-89598
In the Linux kernel, the following vulnerability has been resolved: fbdev: ssd1307fb: defer I2C transfers from damage callbacks The fbdev damage callbacks may run from fbcon while printk has disabled preemption. They currently update the display synchronously, which enters the sleeping I2C transf...
EUVD-2026-75758
IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to a denial of service where a specific functionality on a Db2 server can be disabled by a privileged user under certain conditions...
PT-2026-90314
In the Linux kernel, the following vulnerability has been resolved: fbdev: ssd1307fb: defer I2C transfers from damage callbacks The fbdev damage callbacks may run from fbcon while printk has disabled preemption. They currently update the display synchronously, which enters the sleeping I2C transf...
EUVD-2026-76190
An insecure default configuration in the embedded Happytime RTSP server within the Sofia IPC daemon in Xiongmai IP Camera XM530 firmware HMT.CM2005-v220608.1837 and earlier ships with authentication disabled, allowing remote unauthenticated attackers to access live H.264 video and G.711 audio fee...
CVE-2026-87958
IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to a denial of service where a specific functionality on a Db2 server can be disabled by a privileged user under certain conditions...
CVE-2026-87958
IBM Db2 versions 11.5.0 through 11.5.9 and 12.1.0 through 12.1.5 are vulnerable to a denial of service condition in which a specific server functionality can be disabled by a privileged user under certain conditions. The CVSS v3.1 score is 8.1 (HIGH) with high impact on both integrity and availab...
NPM: n8n: Disabled OIDC SSO Endpoints Remain Active and Issue Valid Sessions
NPM: n8n: Disabled OIDC SSO Endpoints Remain Active and Issue Valid Sessions vulnerability discovered by ? in WordPress Npm n8n versions 1.123.76...