inject-assembly

inject-assembly - Execute .NET in an Existing Process This tool is an alternative to traditional fork and run execution for Cobalt Strike. The loader can be injected into any process, including the current Beacon. Long-running assemblies will continue to run and send output back to the Beacon,...

botb

Break out the Box BOtB BOtB is a container analysis and exploitation tool designed to be used by pentesters and engineers while also being CI/CD friendly with common CI/CD technologies. What does it do? BOtB is a CLI tool which allows you to: Exploit common container vulnerabilities Perform commo...

Sooty

Overview Sooty is a tool developed with the task of aiding SOC analysts with automating part of their workflow. One of the goals of Sooty is to perform as many of the routine checks as possible, allowing the analyst more time to spend on deeper analysis within the same time-frame. Details for man...

CVE-2026-46333

🚀 CVE-2026-46333 - ssh-keysign-pwn High-quality Proof of Concept for the Linux kernel race condition vulnerability A clean and reliable proof-of-concept exploit for CVE-2026-46333 — Local information disclosure via race condition in the Linux kernel's process exit path. 🖼️ Screenshot Successfully...

CVE-2026-129113

The JSON::XS Perl module (versions 4.0_00 before 4.05) contains a vulnerability where the incremental parser corrupts the incremental buffer length during an incr_skip operation following a top-level number. Specifically, the parser maintains an offset into undecoded bytes; when the buffer is emp...

PT-2026-147404

Name of the Vulnerable Software and Affected Versions JSON::XS versions 4.0 00 through 4.04 Description An issue exists where the incremental buffer length is corrupted by chopping past its end in the incr skip function after a top-level number. The incremental parser treats sequences of digits,...

balcony-jailbreaking

Jailbreaks across model depth How does early exit change a language model's vulnerability to jailbreaks? We study GCG attacks on Balcony-LLaMA2-7B and Balcony-LLaMA3-8B at layers 15, 18, 21, and full depth 32, using HarmBench and AdvBench. TAO is a planned extension with experimental code. The...

CVE-2019-5010

CVE-2019-5010 Author: Jonathan M. Wilbur Copyright Year: 2019 License: MIT License How to use 1. Install all dependencies by running npm install. 2. Compile the project using npm run build. 3. Run node ./dist/index.js to create the evil certificate in ./dist/cve-2019-5010-cert.pem. 4. Bring up th...

exitmap

This repository is unmaintained. Refer toThe Tor Project's fork. Overview Exitmap is a fast and modular Python-based scanner for Tor exit relays. Exitmap modules implement tasks that are run over a subset of all exit relays. If you have a background in functional programming, think of exitmap as ...

httpd: Apache HTTP Server: Denial of Service in mod_proxy_ftp via attacker-controlled FTP server

A flaw was found in the modproxyftp module of the Apache HTTP Server. A remote attacker, by controlling a backend File Transfer Protocol FTP server, can trigger an infinite loop. This vulnerability, categorized as a Loop with Unreachable Exit Condition, leads to a Denial of Service DoS for the...

Linux Distros Unpatched Vulnerability : CVE-2026-102823

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Russh is a Rust SSH client and server library. Prior to 0.63.1, clientreadauthenticated in russh/src/client/encrypted.rs forwards CHANNELDATA,...

Linux Kernel DoS

The kernel vulnerability in the Linux operating system is related to the execution of a loop with an unreachable exit condition. Exploitation of this vulnerability may allow an attacker to cause a denial of service...

Linux Kernel DoS

The kernel vulnerability in the Linux operating system is related to the execution of a loop with an unreachable exit condition. Exploitation of this vulnerability enables a remote attacker to cause a denial of service by using a specially crafted NTFS image...

Linux Kernel DoS

The kernel vulnerability in the Linux operating system is related to the execution of a loop with an unreachable exit condition. Exploitation of this vulnerability may allow an attacker to cause a denial of service...

bind: bind9: Unexpected exit with NSEC and NSEC3 both present

If a provably insecure domain is covered by both an NSEC and NSEC3 record at the parent, and there exist an RRSIG for only one of these types, then BIND may exit unexpectedly with an assertion while validating this proof...

Linux Kernel DoS

The kernel vulnerability in the Linux operating system is related to the execution of a loop with an unreachable exit condition. Exploitation of this vulnerability may allow an attacker to cause a denial of service...

Linux Kernel DoS

The kernel vulnerability in the Linux operating system is related to the execution of a loop with an unreachable exit condition. Exploitation of this vulnerability may allow a remote attacker to cause a denial of service...

CVE-2026-99255

In the Linux kernel, the following vulnerability has been resolved: iouring/io-wq: don't hide a link from cancellations A task that exits cancels its tracked requests and waits until they are gone. iouringcancelgeneric looks everywhere a request can be, and goes to sleep if it found nothing to...

PT-2026-136091

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the io uring/io-wq component where a linked request can become temporarily invisible during the cancellation process when a task exits. Specifically, within th...

Linux Kernel DoS

The kernel vulnerability in the Linux operating system is related to the execution of a loop with an unreachable exit condition. Exploitation of this vulnerability may allow an attacker to cause a denial of service...