CVE-2023-25136

OpenSSH CVE-2023-25136 Pre-Auth Double Free – Writeup and POC What is OpenSSH? OpenSSH is a popular tool used for secure communication and remote access. It was developed as a free, open-source implementation of the Secure Shell SSH communications protocol and is widely used for various...

CVE-2020-8515

CVE-2020-8515 Draytek CVE-2020-8515 PoC que tenía dando vueltas. Curiosamente, el comando inyectado se ejecuta dos veces, ver aquí: $ ./draytek.py draytek.local executing command: cat /etc/passwd + vulnerable! executing command: uname -a Linux Vigor3900 2.6.33.5 1 Wed Mar 28 00:49:28 CST 2018...

CVE-2022-36234

Descripción de CVE-2022-36234 Se descubrió que la confirmación 29bc615f0d9910eb2f59aa8dff1f54f0e3af4496 del Servidor TCP SimpleNetwork contiene una vulnerabilidad de doble liberación double free que se explota mediante paquetes TCP manipulados. Provocar la doble liberación permitirá a los cliente...

CVE-2026-23918

CVE-2026-23918: DoS por Doble Liberación en Apache HTTP/2 CVE-2026-23918 | Servidor HTTP Apache 2.4.66 | CWE-415: Doble Liberación | CVSS 8.8 | Corregido en 2.4.67 Una vulnerabilidad de doble liberación en modhttp2 h2mplx.c permite a atacantes remotos provocar una denegación de servicio caída del...

CVE-2025-62215_Windows_Kernel_PE

CVE-2025-62215 Exploit PoC Original code credit: https://github.com/dexterm300 🧨 Description This repository contains a proof-of-concept exploit for CVE-2025-62215 , a race condition vulnerability in the Windows kernel that can be triggered via concurrent manipulation of kernel object handles...

cve-2020-14882

CVE-2020-14882 Affected versions: 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0, 14.1.1.0.0 POC: http://IP:7001/console/images/%252E%252E%252Fconsole.portal?nfpb=false&pageLabel=&handle=com.tangosol.coherence.mvel2.sh.ShellSession"java.lang.Runtime.getRuntime.exec'calc.exe';"; image: EXP: python...

Damn_Vulnerable_C_Program

Note: file name has been changed from imgRead.c to dvcp.c, if you are watching videos, you will see imgRead.c but in github repo you will see dvcp.c, please use correct filename. Damn Vulnerable C ProgramDVCP My YouTube Channel: https://www.youtube.com/user/MrHardik05/featured?viewas=subscriber...

CVE-2026-25243

CVE-2026-25243 — Redis RESTORE zipmap double-free → remote code execution TL;DR. A malformed DUMP payload passed to RESTORE triggers a heap double-free in Redis's legacy hash-zipmap loader. Under default jemalloc the double-free is silent the server keeps running, which turns it into a controllab...

CVE-2023-25136_POC

CVE-2023-25136 POC POC de una vulnerabilidad de doble liberación antes de la autenticación que afecta a OpenSSH 9.1 a 9.2 Bibliotecas necesarias Asegúrese de tener instaladas las siguientes dependencias: Python 3 obvio termcolor argparse fabric También puede instalar estas bibliotecas directament...

CVE-2026-23918

CVE-2026-23918 Double-free in Apache httpd modhttp2 stream cleanup leading to pre-auth RCE. Affected: httpd 2.4.66 with modhttp2 and multi-threaded MPM event/worker. Fixed in: 2.4.67. Found and reported by Bartlomiej Dmitruk striga.ai and Stanislaw Strzalkowski isec.pl. Writeup:...

CVE-2023-25136

POC de OpenSSH Pre-Auth Double Free CVE-2023-25136 Este repositorio contiene un script de Prueba de Concepto POC para comprobar la vulnerabilidad OpenSSH Pre-Auth Double Free CVE-2023-25136 utilizando la librería Paramiko en Python. Requisitos previos Antes de ejecutar este script POC, debes...

CVE-2023-25136

CVE-2023-25136 Escaneo masivo y exploit de la vulnerabilidad OpenSSH 9.1 Descripción El servidor OpenSSH sshd 9.1 introdujo una vulnerabilidad de doble liberación durante el manejo de options.kexalgorithms. Esto se corrigió en OpenSSH 9.2. La doble liberación puede ser aprovechada por un atacante...

redis-poc

Redis Authenticated RCE stream NACK double free, TDigest & TopK module bugs Non-destructive RCE exploits for Redis 6.2.22, 7.4.9, 8.6.4 via the stream consumer-group shared-NACK double free a patch bypass of CVE-2026-25243, 8.8.0 via a TDigest heap-overflow in bundled RedisBloom, and 8.8.1 via a...

libsignal

Overview libsignal contains platform-agnostic APIs used by the official Signal clients and servers, exposed as a Java, Swift, or TypeScript library. The underlying implementations are written in Rust: libsignal-protocol: Implements the Signal protocol, including the Double Ratchet algorithm. A...

EUVD-2026-91853

Showdown through 2.1.0 contains a cross-site scripting vulnerability in the makehtml link and image subparsers, which fail to escape double quotes in destination URLs placed into href and src attributes. Attackers can craft markdown links or images containing a double quote followed by onerror or...

CVE-2021-26084

CVE-2021-26084 Introduction This write-up provides an overview of CVE-2021-26084 - Confluence Server Webwork OGNL injection 1 that would allow an authenticated user to execute arbitrary code on a Confluence Server or Data Center instance. TL;DR Confluence Server / Data Center makes use of Webwork...

drmemory

Dr. Memory: el depurador de memoria Acerca de Dr. Memory Dr. Memory es una herramienta de monitoreo de memoria capaz de identificar errores de programación relacionados con la memoria, como accesos a memoria no inicializada, accesos a memoria no direccionable incluyendo fuera de las unidades de...

CVE-2020-14882

CVE-2020-14882 desplegando un memory shell de Behinder Como es bien sabido, CVE-2020-14882 es una vulnerabilidad no autenticada que permite a un atacante ejecutar código arbitrario en el WebLogic Server afectado. En los PoC públicos, el acceso se logra mediante la omisión de caracteres ilegales y...

CVE-2026-19794

CVE-2026-19794 WP-Stats = 2.56 - Unauthenticated Stored Cross-Site Scripting Plugin URL https://wordpress.org/plugins/wp-stats/ Description Unauthenticated reflected XSS in the statsauthor GET parameter of statspage. The sanitization filter striptags is applied before urldecode, allowing an...

op4

op4 — Secure Terminal Messenger Op4 is a terminal-based encrypted messaging application written in Rust. It provides end-to-end encrypted private messaging with post-quantum cryptography, routed entirely through the Tor network so that neither the content of your messages nor your IP address is...