p0wny-shell

p0wny@shell: -- Shell PHP de un solo archivo p0wny@shell: es un shell PHP muy básico de un solo archivo. Puede usarse para ejecutar rápidamente comandos en un servidor al hacer pentesting a una aplicación PHP. Úsalo con precaución: este script representa un riesgo de seguridad para el servidor...

EUVD-2026-44645

PraisonAI: SkillTools Executes Scripts Without Path Containment Validation...

idasec

idasec IDA plugin for reverse-engineering and dynamic interactions with the Binsec platform Disclaimer IDAsec is prototype tool under development, some features are likely buggy and should be used with care. Features Decoding an instruction in DBA IR Loading execution traces generated by Pinsec...

EUVD-2026-42900

PraisonAI: Unsafe Dynamic Module Loading Leads to Arbitrary Code Execution via tools.py in AgentFlow...

ZeroPoint

ZeroPoint.ps1 ⚠ Una utilidad defensiva de PowerShell para detectar y mitigar la explotación de la vulnerabilidad de día cero CVE-2025-53770 en Microsoft SharePoint Server. 🔍 Qué hace Este script de PowerShell está diseñado para: Detectar indicadores de compromiso, como webshells .aspx sospechosas...

CVE-2018-7602

CVE-2018-7602 Existe una vulnerabilidad de ejecución remota de código en múltiples subsistemas de Drupal 7.x y 8.x. Esto potencialmente permite a los atacantes explotar múltiples vectores de ataque en un sitio Drupal, lo que podría resultar en el compromiso del sitio. Esta vulnerabilidad está...

shodscript

ShodScript Automatiza la ejecución de exploits y PoC contra resultados de búsqueda de Shodan. Consulta Shodan, filtra objetivos y ejecuta tus scripts contra cada coincidencia, de forma concurrente, con salida estructurada y exportación. Por qué Tienes un script PoC que recibe una IP y un puerto...

CVE-2023-4220

RCE para Chamilo LMS CVE-2023-4220 utilizando una Web Shell Este proyecto automatiza la explotación de la vulnerabilidad de ejecución remota de código CVE-2023-4220 encontrada en Chamilo LMS. Utilizando una web shell, la herramienta facilita la explotación automatizada de la vulnerabilidad para...

Apache-spark-CVE-2022-33891

Apache-spark-CVE-2022-33891 Apache Spark RCE - CVE-2022-33891 PoC Síguenos Vulnmachines Platform YouTube Twitter Facebook LinkedIn...

kernel: netfilter: flowtable: publish GC-visible tuple last

A flaw was found in the netfilter flowtable component of the Linux kernel. This vulnerability occurs due to a timing issue where the system's garbage collection can free a network flow while it is still being set up. This can lead to a 'use-after-free' condition, where the system attempts to acce...

kernel: gfs2: Fix slab-use-after-free in qd_put

A flaw was found in the Linux kernel's GFS2 file system. During filesystem shutdown, quota data objects were freed without being properly removed from the Least Recently Used LRU list. This oversight could lead to a use-after-free vulnerability, where the system attempts to access memory that has...

kernel: nvme: add missing SRCU grace period in error path

A flaw was found in the NVMe Non-Volatile Memory Express driver of the Linux kernel. The nvmeallocns function's error handling path fails to wait for all SRCU Sleepable Read-Copy Update readers to complete before freeing a namespace structure. This oversight allows a concurrent reader to access a...

kernel: netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state

A flaw was found in the Linux kernel's netfilter subsystem. When a network namespace is dismantled, the packet logging component frees memory without waiting for ongoing logging operations to complete, resulting in a use-after-free condition. A local attacker could exploit this flaw during networ...

kernel: Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths

A flaw was found in the Linux kernel's Bluetooth hciuart component. Lifecycle management issues, including Use-After-Free UAF and race conditions, were identified during the closing and initialization paths. These issues can lead to the dereferencing of freed memory, potentially causing system...

kernel: netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp()

A flaw was found in the Linux kernel's netfilter Session Initiation Protocol SIP connection tracking module nfconntracksip. A remote attacker could send specially crafted SIP messages that cause an integer overflow during Network Address Translation NAT rewrite delta calculations. This overflow...

kernel: vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu()

A flaw was found in the Linux kernel's Virtual Extensible LAN VXLAN module. This vulnerability occurs because a cached IP header pointer is improperly reused after a Path Maximum Transmission Unit PMTU check. When the packet's head is modified during the PMTU check, the old cached IP header point...

kernel: ipvs: clear IPv4 options after rebasing tunnel ICMP errors

A flaw was found in the Linux kernel's IP Virtual Server IPVS component. When processing Internet Control Message Protocol ICMP errors for tunneled packets, the system can incorrectly use a stale IPv4 option offset. A remote attacker could exploit this by sending a specially crafted ICMP packet,...

CVE-2020-6418

CVE-2020-6418 El CVE-2020-6418 trata sobre la confusión de tipos en V8 de Google Chrome. Las versiones afectadas fueron anteriores a 80.0.3987.122. La vulnerabilidad se logra mediante un atacante remoto que accede al shell de un dispositivo objetivo a través de una página HTML manipulada...

CVE_2022_38181_Gazelle

Exploit para CVE-2022-38181 para ejecutar en FireTV 3rd gen Cube Este es un fork del POC para Pixel 6 del investigador de seguridad Man Yue Mo para CVE202238181. Lea su detallado análisis de la vulnerabilidad aquí. Se han realizado cambios para tener en cuenta el espacio de usuario de 32 bits de...

uc_browser_poc_CVE-2022-1364

UCBrowserExploit.js Introduction All content below refers to the UC Browser exploit explored in this article posted by Interrupt Labs. Getting Started This exploit relates to previous versions of the UC Browser that include the RCE bug of CVE-2022-1364. This bug was patched in the UC browser in...