CVE-2022-30190

CVE-2022-30190 This Repository Talks about the Follina MSDT from Defender Perspective Index About Timeline Understanding the Exploit List of IOCs Detection Strategy Testing and Researching Mitigation Plans References About The bug is a Microsoft Windows Support Diagnostic Tool MSDT remote code...

RemoteKeyStrokes

RemoteKeyStrokes A script to automate keystrokes through an active remote desktop session that assists offensive operators in combination with living off the land techniques. All credits goes to nopernik for making it possible so I took it upon myself to improve it. I wanted something that helps...

pcfg_cracker

PCFG = Probabilistic Context Free Grammar PCFG = Pretty Cool Fuzzy Guesser En resumen: Una colección de herramientas para investigar cómo los humanos generan contraseñas. Se pueden usar para descifrar hashes de contraseñas, pero también para crear contraseñas sintéticas honeywords o ayudar a...

pcfg_cracker

PCFG = Probabilistic Context Free Grammar PCFG = Pretty Cool Fuzzy Guesser In short: A collection of tools to perform research into how humans generate passwords. These can be used to crack password hashes, but also create synthetic passwords honeywords, or help develop better password strength...

p0wny-shell

p0wny@shell: -- Single-file PHP Shell p0wny@shell: is a very basic, single-file, PHP shell. It can be used to quickly execute commands on a server when pentesting a PHP application. Use it with caution: this script represents a security risk for the server. Features: Command history using arrow...

exploit-CVE-2016-6515

OpenSSH remote DOS Before 7.3 OpenSSH does not limit password lengths for password authentication, which allows remote attackers to cause a denial of service crypt CPU consumption via a long string. This bug resides in auth-passwd.c in authpassword function. Attackers can exploit this issue to...

declarative-policy

DeclarativePolicy: Una biblioteca de autorización declarativa Esta biblioteca proporciona un DSL para escribir políticas de autorización. Se puede utilizar para separar la lógica de los permisos y se ha utilizado a gran escala en producción en GitLab.com. El autor original de esta biblioteca es...

iocx

IOCX Extracción de IOC determinista y sin riesgo para pipelines de seguridad modernos Extracción estática de IOC de un archivo PE usando la CLI de IOCX Proyecto Oficial IOCX Este es el motor IOCX original para la extracción estática determinista de IOC y el análisis de PE. Cualquier otro...

CVE-2026-98147

A flaw was found in the Linux kernel printk subsystem. A local user could trigger a Denial of Service DoS by causing an unexpected system crash if the kernel is configured to panic on warnings. This issue occurs because the kernel inappropriately triggers a warning check when background print...

CVE-2026-97509

A flaw was found in the Linux kernel's Thunderbolt subsystem. A local attacker could exploit this issue to cause a Denial of Service DoS or potentially execute arbitrary code. The vulnerability occurs because the driver fails to maintain a reference to the parent domain device during the lifetime...

CVE-2026-93829

A flaw was found in the Linux kernel. A race condition exists in the Server Message Block SMB client during background worker thread creation, allowing a newly spawned thread to access connection session data before it has been completely initialized. A local user initiating an SMB connection can...

CVE-2026-98152

A flaw was found in the Linux kernel's NVMe Non-Volatile Memory Express over Fabrics RDMA Remote Direct Memory Access target subsystem. When pending disconnecting queues exceed the backlog threshold, the connection handler fails to release newly allocated queue structures and associated network...

CVE-2026-98151

A flaw was found in the Linux kernel's BPF Berkeley Packet Filter verifier. A local user can trigger a Denial of Service DoS or kernel verification failure by loading a specially crafted BPF program containing speculative pointer arithmetic. This issue occurs because register subregister bounds a...

CVE-2026-98149

A flaw was found in the Linux kernel's BPF Berkeley Packet Filter subsystem. When updating per-CPU maps on systems configured with non-contiguous CPU identifiers, the kernel incorrectly calculates memory offsets using logical processor IDs instead of dense buffer positions. A local user can explo...

CVE-2026-93451

A flaw was found in snappy-java. A buffer overflow vulnerability exists in the Snappy.uncompressArray methods. This flaw occurs because the methods incorrectly calculate the output array size, passing an undivided length to native code. A remote attacker, by providing specially crafted compressed...

CVE-2026-100723

A flaw was found in vm2. When an application permits the sandbox to access built-in Node.js modules such as the zlib compression library, returned data buffers fail to maintain memory isolation from the host system. An attacker executing untrusted code within the sandbox can inspect and alter the...

CVE-2026-88815

A flaw was found in perl-DBI. When casting numeric values to the SQLNUMERIC type using the sqltypecast function, the component incorrectly handles numeric values as strings without converting them first. An attacker capable of supplying numeric input to an affected application can trigger an...

CVE-2026-88816

A flaw was found in perl-DBI. An attacker or user capable of supplying a numeric value to the FetchHashKeyName attribute can cause a Denial of Service DoS. The fetchrowhashref function attempts to use the attribute value as a string pointer without stringifying it first, leading to an invalid...

CVE-2026-85644

A flaw was found in perl-XS-Parse-Keyword. This vulnerability allows an attacker to cause a Denial of Service DoS or potentially execute arbitrary code by supplying crafted input to an affected application. The issue occurs because the module improperly validates arguments for list-associative...

CVE-2026-87114

A flaw was found in kube-compare. When processing a 'container://' reference path, the tool incorrectly executes an untrusted container image's entrypoint instead of merely extracting data from a stopped container. This allows a remote attacker to achieve arbitrary code execution on the operator'...