BRC4-BOF-Artillery

Generic Questo repository include una raccolta di BOF generici che ho scritto nel corso del tempo. Questo repository si concentra esclusivamente sul porting e sull'esecuzione, senza modificare il codice sorgente originale per la stabilità. Sebbene in futuro possa condurre ulteriori test, non è...

CVE-2026-64563

A flaw was found in the Linux kernel. This vulnerability, known as a use-after-free, occurs in the rhashtable component when the system improperly handles hash table restarts. An attacker could potentially exploit this by causing the system to access memory that has already been released, which m...

BIT-KEYCLOAK-2026-15571 Flaw in the legacy client-initiated account-linking endpoint of Keycloak

A flaw was found in the legacy client-initiated account-linking endpoint of Keycloak, a widely used open-source identity and access management solution. The mechanism used to protect the account-linking process from unauthorized requests relies on a hash that can be predicted by a malicious OIDC...

CVE-2026-77134

The extension fails to require the dedicated admin confirmation token when processing an admin-approval request, so a regular user confirmation hash, obtainable by any visitor through the public resend-confirmation action, is sufficient to self-approve a pending account awaiting admin approval...

CVE-2026-77127

The extension fails to restrict a backend AJAX endpoint for inline editing to fields the current user is permitted to see or edit. An authenticated, low-privileged backend user can supply arbitrary table, field and record parameters, and trigger an error response that discloses the current databa...

EUVD-2026-65348

The extension fails to restrict a backend AJAX endpoint for inline editing to fields the current user is permitted to see or edit. An authenticated, low-privileged backend user can supply arbitrary table, field and record parameters, and trigger an error response that discloses the current databa...

CVE-2026-77134

CVE-2026-77134 is a Broken Access Control vulnerability in the TYPO3 extension femanager . The extension fails to require the dedicated admin confirmation token when processing an admin-approval request. Instead, a regular user confirmation hash—obtainable by any visitor through the public resend...

WordPress Hash Form plugin <= 1.4.1 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Supakiad S. m3ez in WordPress Plugin Hash Form versions = 1.4.1...

CVE-2024-43451-POC

Descrição Nome : CVE-2024-43451 Pontuação CVSSv3 : 6.5 Versões Afetadas : Todas as versões do Microsoft Windows anteriores ao Patch de Novembro de 2024 CVE-2024-43451 é uma vulnerabilidade de dia zero no Microsoft Windows que permite que atacantes capturem hashes de senha NTLMv2 com interação...

forensicscanner

This repository does not have a README...

smbexec

root@kitploit: smbexec A rapid psexec style attack with samba tools Original Concept and Script by Brav0Hax & PureHate Ported to ruby and modified by Smilingraccoon and Zeknox Codename - Machiavellian Written because we got sick of Metasploit PSExec getting popped Special thanks to Carnal0wnage...

CVE-2026-74662

A flaw was found in the Linux kernel's internet fragmentation inet: frags code. A race condition exists where the fragment queue timer can be activated before the queue is properly registered. This premature timer activation can lead to an inconsistent state, resulting in a stale hash node. This...

K000163001: NLnet Labs Unbound vulnerability CVE-2026-42923

Security Advisory Description NLnet Labs Unbound up to and including version 1.25.0 has a vulnerability in the DNSSEC validator where the code path to consult the negative cache for DS records does not take into account the limit on NSEC3 hash calculations introduced in 1.19.1. This leads to...

CVE-2026-53525

A flaw was found in WeeChat, a free chat client. The relay authentication mechanism uses a non-constant-time comparison when verifying password hashes. This vulnerability allows a remote attacker to exploit subtle timing differences during the authentication process. By analyzing these timing...

CVE-2026-68768

A flaw was found in hashcat. A vulnerability exists where the software attempts to write more data than its allocated memory can hold, specifically in the function responsible for writing output files. This can happen when processing a specially crafted hash file containing an excessively long...

CVE-2026-78280

Unauthenticated Cross Site Request Forgery CSRF in Hash Form = 1.4.0 versions...

EUVD-2026-64787

Unauthenticated Cross Site Request Forgery CSRF in Hash Form = 1.4.0 versions...

CVE-2026-78280

CVE-2026-78280 is an unauthenticated Cross-Site Request Forgery (CSRF) vulnerability in the WordPress Hash Form plugin , affecting versions 1.4.0 and earlier . The flaw was discovered by sanghyeok Kim and reported via Patchstack. Per the CVSS 3.1 vector, an attacker with network access and low co...

CVE-2026-78280 WordPress Hash Form plugin <= 1.4.0 - Cross Site Request Forgery (CSRF) vulnerability

Unauthenticated Cross Site Request Forgery CSRF in Hash Form = 1.4.0 versions...

Astra Linux – Vulnerability in libxml2

A issue was discovered in libxml2 before version 2.10.3. Certain invalid XML entity definitions can corrupt a hash table key, potentially leading to subsequent logical errors. In one case, a double-free can occur...