CVE-2026-31413-BPF-Container-Escape

CVE-2026-31413: Un Byte en el Verificador BPF para Escape de Contenedor Encontré un bug de solidez en el verificador BPF de Linux: un + 1 en una llamada pushstack que hace que el verificador omita una instrucción ALU en una ruta bifurcada. Para BPFOR, esto significa que el verificador rastrea dst...

solarwinds-sunburst-cve-2020-10148

🔍 أبحاث الثغرات الأمنية مجموعة منتقاة من التقارير المتعمقة عن الثغرات الأمنية تغطي الحوادث الأمنية الواقعية في النظم البيئية للبرمجيات. يتضمن كل إدخال تحليلاً تقنياً كاملاً، وإثبات المفهوم، وقائمة مؤشرات الاختراق IOCs، وإرشادات المعالجة. الغرض: مرجع تعليمي ومحفظة. جميع أكواد إثبات المفهوم PoC مخص...

ME2-Writeup

Ingeniería Inversa del USB del ME2 con una Pistola de Calor y un Cuchillo Antecedentes En 2024, bjiru subió un video sobre el dispositivo portátil ME2, un juguete producido alrededor de 2008 que contaba con la capacidad de usar USB para sincronizar puntos y gemas entre tu dispositivo y un mundo e...

ditto

ditto Powershell Obfuscator Ditto is a Powershell and JavaScript obfuscator base on tree-sitter-powershell and tree-sitter-javascript. Command Line Usage Basic Command Structure ditto-cli options CLI Arguments & Options Short Option| Long Option| Description ---|---|--- -h| --help| Display help...

CVE-2026-63382

A flaw was found in libevent. The evhttp parser in libevent's http.c component inconsistently handles HTTP Transfer-Encoding headers and chunked framing. This inconsistency allows an unauthenticated remote attacker to desynchronize request boundaries when libevent is used behind a proxy. Successf...

xortool

xortool.py A tool to do some xor analysis: guess the key length based on count of equal chars guess the key base on knowledge of most frequent char Notice: xortool is now only running on Python 3. The old Python 2 version is accessible at the py2 branch. The pip package has been updated...

EpSiLoNPoInT-

!/usr/bin/env python3 """ TSAR-EXEC v7.1 + EpSiLoNPoInTFuCK v5.1 - README.md Complet et Prêt à Copier-Coller CVE-2026-23550 | Framework d'Exploitation Massive Modular DS Auth Bypass Auteur: EpSiLoNPoInT | Version: 7.1-GOD | Android 24h Coding | 08/02/2026 """...

exploit_playground

About This is where I will post analysis of Public Exploits, or some of my 1day exploits. Public exploit analysis Personally I think the best way to learn a public exploit is by understanding it line-by-line until I can understand the exploit to the fullest. I will post some of these...

SAMLRaider

SAML Raider - SAML2 Burp Extension Description SAML Raider is a Burp Suite extension for testing SAML infrastructures. It contains two core functionalities: Manipulating SAML Messages and manage X.509 certificates. This software was created by Roland Bischofberger and Emanuel Duss during a bachel...

presentation-clickers

Presentation Clickers Tenía ganas de hacer un poco de ingeniería inversa de RF, así que pedí algunos clickers de presentación y me divertí un poco. Esto es un fork de nrf-research-firmware que escribí hace unos años en Bastille. He añadido soporte para algunos transceptores/protocolos nuevos, e...

marshalsec

Java Unmarshaller Security - Turning your data into code execution If you came here for Log4Shell/CVE-2021-44228, you may want to read about the exploitation vectors and affected Java runtime versions: https://mbechler.github.io/2021/12/10/PSALog4ShellJNDIInjection/ Paper It's been more than two...

CVE-2026-55858

A flaw was found in MariaDB Connector/J, a component used to connect Java applications to MariaDB and MySQL databases. The connector incorrectly assumes a UTF-8 character set for communication, even if the database server changes its client character set to a non-UTF-8 value during a session. Thi...

L4sh

Log4Shell RCE Exploit fully independent exploit does not require any 3rd party binaries. The exploit spraying the payload to all possible logged HTTP Headers such as X-Forwarding , Server-IP , User-Agent Usage root@kitploit: python main.py -i lhost -u http://target:targetport -c "commandtoexecute...

WinBypass

Contournement de l'UAC Windows | Élévation de privilèges Détournement du gestionnaire de fichiers Slui LPE - Windows 8-10 SluiHijackBypass.ps1 Contournement de l'UAC via FodHelper - Windows 10 FodhelperBypass.ps1 Contournement de l'UAC via Event Viewer - Windows 7 EventVwrBypass.ps1 Module...

CVE-2026-35250

CVE-2026-35250 my firstever cve is a 2.3 Integer Overflow on DevVGAVBVA can cause DoS from privileged guest AI-assisted finding and PoC is completely written by AI Problem is at src/VBox/Devices/Graphics/DevVGAVBVA.cpp:740-743 ASSERTGUESTMSGRETURN where dimensions check uses || OR instead of &&...

Liferay-CE-Portal-Java-Deserialization

Liferay-CE-Portal-Java-Deserialization This repo contains PoC for the remote code execution vulnerability of Liferay CE Portal! Payloads I already shared payloads in repo. You must find the right syntax by brute-force method.Payloads I share are for time-based proof of concept sleep 10. The...

Exploit for CVE-2026-82329

artifactory.py ╔═══════════════════════════════════...

Exploit for Out-of-bounds Read in Apple Ipados

CVE-2026-65349 — getattrlist OOB Write in vfsattrpackinter...

credential-attacks-toolkit — Updated!

CredAttack — Credential Attacks Toolkit ⚠️ LEGAL NOTICE — Authorised security testing ONLY. Using this tool against systems you do not own or have explicit written permission to test is illegal under the Computer Fraud and Abuse Act US, Computer Misuse Act UK, and equivalent laws worldwide. See...

apkprobe

APKprobe APK decompiler and secrets scanner for Android security research. Automatically extract API keys , endpoints , tokens , and other leaked credentials from Android applications. Works with .apk, .xapk, .dex, .jar, .class, .smali, .zip, .aar, .arsc, .aab files. Perfect for apk2url extractio...