nocturne

nocturne Nombrado en honor a uno de mis juegos favoritos, "nocturne" es un virtualizador de código PE x86-64 bin2bin y un reescritor de binarios. Características Puente de Llamada Nativo 30+ Manejadores de VM Ofuscación de código basura incorporada Estado de VM por invocación seguro para hilos Us...

EUVD-2026-76949

A vulnerability was found in Fengoffice Feng Office up to 3.11.13.11. Affected is the function updatesystemmoduleorder/updatedimensionorder of the file application/controllers/MoreController.class.php of the component Reorder Handlers. Performing a manipulation of the argument modules/dims result...

CVE-2026-90496

A SQL injection vulnerability exists in Fengoffice Feng Office versions up to 3.11.13.11 , affecting the update_system_module_order/update_dimension_order functions in the file application/controllers/MoreController.class.php (component: Reorder Handlers ). An authenticated attacker (high privile...

idb

Idb idb is a tool to simplify some common tasks for iOS pentesting and research. Originally there was a command line version of the tool, but it is no longer under development so you should get the GUI version. idb has a new homepage athttp://www.idbtool.com All documentation and news are posted...

ShellCodeEmulator

Herramienta de emulación de shellcode de Windows basada en unicorn framework. ShellcodeEmulator emula shellcode de Windows con la ayuda de volcados de memoria de procesos de windbg. Puede proporcionar shellcode para analizar con cualquier imagen de volcado de proceso de Windows. La herramienta...

lightbulb-framework

LightBulb LightBulb is an open source python framework for auditing web application firewalls and filters. Synopsis The framework consists of two main algorithms: GOFA : An active learning algorithm that infers symbolic representations of automata in the standard membership/equivalence query mode...

SmmExploit

SmmExploit Este es un informe y un exploit de CVE-2021-26943, la vulnerabilidad de escalada de privilegios local de kernel a SMM en el BIOS versión 303 del ASUS UX360CA. El problema se solucionó en la versión 304. Descripción del problema Resumen El BIOS versión 303 del UX360CA tiene 3 módulos...

SkeletonKey

CVE-2026-6765 · FormAutofill test-only handlers reachable outside automation Reporter credited by Mozilla in MFSA 2026-30 : Abdulaziz Alasaiqah. This directory holds a real reproduction harness for the vulnerability. It is meant to be run against a locally downloaded vulnerable Firefox build. It...

CVE-2023-28354

CVE-2023-28354 Descripción de la vulnerabilidad Se ha identificado una vulnerabilidad en Opsview Monitor Agent 6.8 que permite a un atacante remoto no autenticado ejecutar comandos arbitrarios. Un atacante no autenticado puede explotar esta vulnerabilidad en Windows suministrando una secuencia de...

EUVD-2026-76743

The application's role-authorization lookup defaults to granting access when a request handler's name is not present in its table of role requirements, rather than defaulting to deny. Any request handler that is not explicitly registered in this table is reachable by any authenticated user...

CVE-2026-80996

A flaw was found in the Linux kernel's L2TP Layer 2 Tunneling Protocol networking component. Specifically, the netlink handlers responsible for creating and modifying L2TP tunnels and sessions may fail to propagate multicast notification errors. This can lead to calling applications retrying...

AZL-100832 CVE-2026-80996 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: net: l2tp: do not propagate multicast notification errors The tunnel create, tunnel modify, session create, and session modify netlink handlers send multicast notifications through helpers that can fail while allocating or encodi...

EUVD-2026-76319

In the Linux kernel, the following vulnerability has been resolved: net: l2tp: do not propagate multicast notification errors The tunnel create, tunnel modify, session create, and session modify netlink handlers send multicast notifications through helpers that can fail while allocating or encodi...

CVE-2026-80996 net: l2tp: do not propagate multicast notification errors

In the Linux kernel, the following vulnerability has been resolved: net: l2tp: do not propagate multicast notification errors The tunnel create, tunnel modify, session create, and session modify netlink handlers send multicast notifications through helpers that can fail while allocating or encodi...

vmp2

Introduction This repository is a collection of legacy tools for working with VMProtect 2 -protected binaries. These tools enable unpacking, analysis, and experimental devirtualization of software protected with VMProtect 2. At the core of this collection is vmprofiler , a utility library that...

CVE-2026-88289 GV-LPC2011/LPC2211 - Multiple Pre-Authentication Stack Buffer Overflows in VLSVR Request Handlers

GeoVision GV-LPC2211 V1.14 260903 fails to validate attacker-controlled variable-length fields before copying them into fixed-size stack buffers in multiple VLSVR request handlers, allowing an unauthenticated remote attacker to crash the VLSVR service...

CVE-2026-29781

Architectural vulnerability in the Sliver C2 server allows for Reverse-C2 Weaponization. By extracting credentials from a captured implant, a defender can weaponize the C2 relationship to trigger a remote Infrastructure Kill-Switch. This exploitation targets a systemic lack of nil-pointer...

CVE-2026-86203

PocketMine-MP versions before 5.39.2 fail to validate entity despawn state when processing attack packets from clients. Attackers can exploit a race condition by attacking a disconnecting player to trigger multiple death handlers, causing inventory items and experience to drop multiple times for...

CVE-2026-86203

PocketMine-MP versions before 5.39.2 contain an item duplication vulnerability caused by a failure to validate entity despawn state when processing attack packets from clients. A race condition allows an attacker to attack a disconnecting player, triggering multiple death handlers that cause inve...

CVE-2025-13401-XSS-Stored

Prueba de Concepto: XSS Almacenado en Autoptimize para imágenes encontradas en el contenido cuando la optimización de imágenes o la precarga está habilitada. En la versión 3.1.13, la función utiliza un enfoque de "lista negra" mediante pregreplace para eliminar atributos específicos como title,...