vsock_poc

vsockpoc Investigando el error detrás de CVE-2021-26708 Este repositorio contiene un pequeño informe sobre CVE-2021-26708, y cómo este error puede convertirse en una primitiva de escritura Use After Free. El PoC aquí no es un exploit completo, sino solo mi andamiaje que usé al intentar investigar...

CVE-2022-32832

CVE-2022-32832 Proof-of-concept and write-up for the CVE-2022-32832 vulnerability patched in iOS 15.6 CVE-2022-32832 is a vulnerability in the AppleAPFSUserClient::methodDeltaCreateFinalize external method selector 49. Here is the decompilation pre-patch: int64 cdecl...

wifi-pineapple-cloner-builds

Wifi Pineapple Cloner: Compilaciones Durante mucho tiempo he notado que hay personas que roban la autoría de este proyecto que comenzó en 2018. También hay personas que van más allá y están vendiendo los dispositivos listos para usar... Así que para evitar que alguien sea estafado pagando por alg...

CVE-2026-98246

A flaw was found in the Linux kernel's Bluetooth subsystem. A race condition during Bluetooth device closure allows codec list cleanup to proceed without appropriate locking while a concurrent socket option query is reading codec entries. A local user can exploit this vulnerability to trigger a...

fapro

FaPro Simulador gratuito, multiplataforma y de un solo archivo para múltiples protocolos de red Readme en chino Descripción FaPro es una herramienta de servidor de protocolos falsos que permite iniciar o detener fácilmente múltiples servicios de red. El objetivo es admitir tantos protocolos como...

CVE-2024-50968

CVE-2024-50968 Description A business logic vulnerability exists in the Add to Cart function of itsourcecode Agri-Trading Online Shopping System 1.0, which allows remote attackers to manipulate the quant parameter when adding a product to the cart. By setting the quantity value to -0, an attacker...

CVE-2026-98245

A flaw was found in the Linux kernel's Btrfs file system. A local user could exploit this vulnerability to cause a Denial of Service DoS or potentially escalate privileges. The issue occurs due to missing synchronization during device replacement operations, where a concurrent transaction commit...

CVE-2026-98244

A flaw was found in the Linux kernel's Btrfs file system. When an error occurs while rebuilding the free space tree, the kernel fails to properly reset an internal state flag on failure paths. A local user could exploit this condition during filesystem operations, leaving the flag set on an activ...

CVE-2026-98243

A flaw was found in the Linux kernel's dma-buf subsystem. When querying driver or timeline names on synchronization fences, the kernel fails to properly verify the fence signaling state before accessing operational handlers. This flaw can lead to a use-after-free condition where previously releas...

CVE-2025-30397---Windows-Server-2025-JScript-RCE-Use-After-Free-

CVE-2025-30397---Windows-Server-2025-JScript-RCE-Use-After-Free Remote Code Execution via Use-After-Free in JScript.dll CVE-2025-30397 🧠 Description This repository contains a proof-of-concept PoC exploit for a Use-After-Free vulnerability in the JScript engine jscript.dll affecting Windows Serve...

CVE-2026-98309

A flaw was found in the Linux kernel. A use-after-free vulnerability exists in the VideoCore IV vc4 display driver where background polling tasks are not properly finalized when the driver is unbound. A local user could exploit this flaw by unbinding the device or unloading the driver module,...

CVE-2026-108538

A security vulnerability has been detected in GPAC up to 26.07.0. The impacted element is the function gfmxv of the file utils/osthread.c of the component MP4Box. Such manipulation leads to use after free. The attack can be launched remotely. The exploit has been disclosed publicly and may be use...

CVE-2026-108539

A vulnerability was detected in GPAC up to 26.07.0. This affects the function gffqpop of the file filtercore/filterqueue.c of the component MP4Box. Performing a manipulation results in use after free. The attack may be initiated remotely. The exploit is now public and may be used. The vendor was...

CVE-2026-108539

A vulnerability was detected in GPAC up to 26.07.0. This affects the function gffqpop of the file filtercore/filterqueue.c of the component MP4Box. Performing a manipulation results in use after free. The attack may be initiated remotely. The exploit is now public and may be used. The vendor was...

CVE-2026-108538

A security vulnerability has been detected in GPAC up to 26.07.0. The impacted element is the function gfmxv of the file utils/osthread.c of the component MP4Box. Such manipulation leads to use after free. The attack can be launched remotely. The exploit has been disclosed publicly and may be use...

EUVD-2026-96732

A vulnerability was detected in GPAC up to 26.07.0. This affects the function gffqpop of the file filtercore/filterqueue.c of the component MP4Box. Performing a manipulation results in use after free. The attack may be initiated remotely. The exploit is now public and may be used. The vendor was...

CVE-2026-108539

A use after free vulnerability exists in GPAC up to version 26.07.0 . The flaw is located within the MP4Box component, specifically affecting the gf_fq_pop function in the filter_core/filter_queue.c file. An attacker may initiate this attack remotely via specific manipulation. Public exploits for...

CVE-2026-108539 GPAC MP4Box filter_queue.c gf_fq_pop use after free

A vulnerability was detected in GPAC up to 26.07.0. This affects the function gffqpop of the file filtercore/filterqueue.c of the component MP4Box. Performing a manipulation results in use after free. The attack may be initiated remotely. The exploit is now public and may be used. The vendor was...

powerglot

Powerglot Powerglot codifica varios tipos de scripts usando políglotas, por ejemplo, scripts ofensivos de PowerShell. No se necesita un cargador para ejecutar el payload. En ejercicios de red team o tareas ofensivas, el enmascaramiento de payloads suele realizarse mediante esteganografía,...

apache_audit_cve-2026-23918

cve-2026-23918 Defensive audit tools for CVE-2026-23918 Apache HTTPD HTTP/2 double-free RCE and four related CVEs disclosed in the May 4, 2026 Apache Software Foundation security advisory. CVE| Severity| Component| Impact| Affected ---|---|---|---|--- CVE-2026-23918| High CVSS 8.8| HTTP/2| Double...