CVE-2026-97420 bpf: NUL-terminate replaced sysctl value

In the Linux kernel, the following vulnerability has been resolved: bpf: NUL-terminate replaced sysctl value When writing to sysctls, procsyscallhandler guarantees that the buffer passed to proc handlers is NUL-terminated. If bpfsysctlsetnewvalue replaces the pending sysctl value, it can hand a...

CVE-2026-71518

CVE-2026-71518 — Bypass de Autorización sin Autenticación en Typemill Las variantes de URL con rutas equivalentes omiten la descarga de medios restringidos por rol La restricción se basa en la ruta de solicitud sin procesar; el archivo se lee desde la ruta resuelta por el sistema operativo — amba...

CVE-2026-65400

CVE-2026-65400 Donar Apoya el mantenimiento de este proyecto con PayPal o escaneando el código QR a continuación. ⚡ Uso Simple Usa este proyecto únicamente en entornos seguros y autorizados, como: Máquinas virtuales locales Contenedores Docker Entornos de laboratorio aislados Entornos de pruebas ...

CVE-2024-21413-Microsoft-Outlook-Remote-Code-Execution-Vulnerability-PoC

💻 CVE-2024-21413-Microsoft-Outlook-Remote-Code-Execution-Vulnerability-PoC 🧩 Overview This project reproduces the MonikerLink behavior CVE-2024-21413 in a fully isolated TryHackMe environment to show how certain hyperlink formats can cause Outlook to process a link in a way that leaks...

bitcoin-security

bitcoin-security Un estudio educativo sobre de dónde viene realmente la seguridad de las claves de Bitcoin — y de dónde no. Construido en torno a la derivación real BIP39/BIP32, con dos experimentos que se sitúan en extremos opuestos de la misma idea: Experiment| Search space| Feasible?| What it...

EUVD-2026-86199

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. From 2.5.0 until 2.5.1, the /homepage/proxy endpoint accepts an authenticated user's url query parameter and passes it to http.get or https.get without destination restrictions. In...

CVE-2026-79764

The web-based server management platform Termix versions 2.5.0 through 2.5.1 is vulnerable to an authenticated Server-Side Request Forgery (SSRF) . The /homepage/proxy endpoint accepts a user-provided URL and passes it to http.get or https.get without a destination allowlist. Specifically, the sr...

CVE-2026-79764 Termix: Authenticated SSRF via `/homepage/proxy` — No Destination Allowlist

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. From 2.5.0 until 2.5.1, the /homepage/proxy endpoint accepts an authenticated user's url query parameter and passes it to http.get or https.get without destination restrictions. In...

CVE-2026-79764 Termix: Authenticated SSRF via `/homepage/proxy` — No Destination Allowlist

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. From 2.5.0 until 2.5.1, the /homepage/proxy endpoint accepts an authenticated user's url query parameter and passes it to http.get or https.get without destination restrictions. In...

CVE-2026-79764 Termix: Authenticated SSRF via `/homepage/proxy` — No Destination Allowlist

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. From 2.5.0 until 2.5.1, the /homepage/proxy endpoint accepts an authenticated user's url query parameter and passes it to http.get or https.get without destination restrictions. In...

Aggressor-Aggregator

Aggressor Aggregator Descripción Un script auxiliar para consolidar repositorios de Aggressor Script y Beacon Object File BOF en un único CNA para Cobalt Strike. Diseñado para la automatización en entornos de red team CTF con configuración/destrucción frecuente de clientes de operador. Este scrip...

0xGUARD

📄 Características Remapeo de módulos Filtrado de subprocesos Ocultamiento de módulos Comprobación de memoria Comprobación de integridad Anti-Inyección de DLL Anti-Depuración Política de procesos Ofuscación de cadenas literales Compatibilidad con Themida/VMProtect ✔️ Dependencias Windows 711 Visual...

CVE-2026-93794

The Linux kernel contains a vulnerability in the smb/client component where punching a hole after a large buffered write can result in the range being incorrectly reported as data. This occurs because a dirty folio spanning the punched range can be written back after the punch, refilling the hole...

EUVD-2026-86181

In the Linux kernel, the following vulnerability has been resolved: smb/client: flush dirty data before punching a hole Punching a hole after a large buffered write may leave the range reported as data. Reproduce it with: xfsio -f \ -c "pwrite -b 3m -S 0x61 0 3m" \ -c "fpunch 1m 1m" \ -c "seek -h...

CVE-2026-93794

In the Linux kernel, the following vulnerability has been resolved: smb/client: flush dirty data before punching a hole Punching a hole after a large buffered write may leave the range reported as data. Reproduce it with: xfsio -f \ -c "pwrite -b 3m -S 0x61 0 3m" \ -c "fpunch 1m 1m" \ -c "seek -h...

CVE-2026-93794 smb/client: flush dirty data before punching a hole

In the Linux kernel, the following vulnerability has been resolved: smb/client: flush dirty data before punching a hole Punching a hole after a large buffered write may leave the range reported as data. Reproduce it with: xfsio -f \ -c "pwrite -b 3m -S 0x61 0 3m" \ -c "fpunch 1m 1m" \ -c "seek -h...

CVE-2026-93794 smb/client: flush dirty data before punching a hole

In the Linux kernel, the following vulnerability has been resolved: smb/client: flush dirty data before punching a hole Punching a hole after a large buffered write may leave the range reported as data. Reproduce it with: xfsio -f \ -c "pwrite -b 3m -S 0x61 0 3m" \ -c "fpunch 1m 1m" \ -c "seek -h...

analyze-Exploit-CVE-2023-22518-Confluence

Exploit-CVE-2023-22518 CVE-2023-22518 en Confluence CVE-2023-22518 : Esta vulnerabilidad se describe como “vulnerabilidad de autorización incorrecta en la base de datos y el servidor de Confluence”. El fallo afecta a las versiones On-premises de los productos de Atlassian. CONFIGURACIÓN Configura...

tryhackme-monikerlink-writeup

TryHackMe: Moniker Link — Walkthrough del CVE-2024-21413 Un walkthrough completo de la sala "Moniker Link" de TryHackMe: explotar CVE-2024-21413, una vulnerabilidad de Microsoft Outlook de 2024, para robar el hash NTLMv2 de la víctima en el momento en que hace clic en un enlace de un correo de...

CVE-2026-17566

CVE-2026-17566 — pgAdmin 4 Import/Export Data RCE PoC PoC de ejecución remota de código en la herramienta Import/Export Data de pgAdmin 4. Aprovecha la divergencia semántica del escape de barra invertida entre el verificador de paréntesis isqueryparensbalanced y psql para inyectar \copy ... TO...