CVE-2024-21626

CVE-2024-21626 Exploit Working Directory docker run -w /proc/self/fd/8 --name cve-2024-21626 --rm -it debian:bookworm Important is to put -w /proc/self/fd/8\ Access the host filesystem using cat ../../../../../../../../../etc/passwd inside the container Exploit Symlink 1. docker run --name...

CVE-2022-30190

CVE-2022-30190 Usage Windows only Create docx file: $ PoC.py docx your-host-ip Run server directly: $ PoC.py host...

phantomprint

PHANTOMPRINT Passive Hybrid ANalysis Tool for Os-agnostic Multiprotocol PRofiling & INTelligence Fingerprint hosts on your network without sending a single packet. PHANTOMPRINT correlates multiple passive signals TCP/IP stack, TLS/JA4, DHCP Option 55, HTTP/2 HPACK, DNS behavior to identify...

CVE-2025-0324-axis-vapix-privesc

CVE-2025-0324 — Root Cause Analysis A client-controlledHost header as a root-group backdoor in the AXIS OS VAPIX Device Configuration framework. %20%2F%208.8%20High%20\NVD-b3261e TL;DR Axis Communications disclosed CVE-2025-0324 on 2025-06-02 as a critical CVSS 9.4 privilege-escalation flaw in th...

Zeek-Endpoint-Enrichment

Zeek-Endpoint-Enrichment Enrich Zeek logs with host information To enrich all logs with an id field, use the tag ".-all". To enrich all logs with an id field, and the Known Entities, use the tag ".-known-all". To only enrich the conn.log, use the tag ".-conn". To only enrich the conn.log, and the...

the-bastion

🔒 The Bastion Resumen Los bastiones son un clúster de máquinas utilizadas como punto de entrada único por los equipos operativos como administradores de sistemas, desarrolladores, administradores de bases de datos, ... para conectarse de forma segura a dispositivos servidores, máquinas virtuales,...

webanalyze

webanalyze Esta es una adaptación de Wappalyzer en Go. Esta herramienta está diseñada para ser eficiente y permite probar listas enormes de hosts. !NOTE Debido a que Wappalyzer eliminó el acceso público a sus definiciones de aplicaciones, webanalyze actualmente carga las definiciones desde enthec...

kernel-debug-lab-for-virtual-box

How to set up a VirtualBox lab to debug Kernel Driver with Windbg We consider here that on Computer A windbg is already installed and on Computer B Visual Studio, the SDK and WDK are installed. 1. Open the Host network Manager to create or set up a new Virtual Box Host-Only Ethernet adapter 2...

CVE-2026-19935 Use-after-free of an L2CAP CoC channel object in the Zephyr Bluetooth host: RX work item is not cancelled on channel teardown

The Bluetooth LE host queues received L2CAP connection-oriented channel CoC data for deferred processing through a struct kwork embedded in the channel object lechan-rxwork, handler l2caprxprocess whenever the channel uses a dynamic PSM 0x0080-0x00FF. Channel teardown in l2capchandestroy in...

CVE-2026-19935 Use-after-free of an L2CAP CoC channel object in the Zephyr Bluetooth host: RX work item is not cancelled on channel teardown

The Bluetooth LE host queues received L2CAP connection-oriented channel CoC data for deferred processing through a struct kwork embedded in the channel object lechan-rxwork, handler l2caprxprocess whenever the channel uses a dynamic PSM 0x0080-0x00FF. Channel teardown in l2capchandestroy in...

CVE-2026-19935

The Zephyr Bluetooth host is vulnerable to a use-after-free flaw in the L2CAP connection-oriented channel (CoC) object. When using a dynamic PSM (0x0080-0x00FF), the system queues received data for deferred processing via a k_work item. However, during channel teardown in l2cap_chan_destroy(), th...

uncover

Descubre rápidamente hosts expuestos en internet usando múltiples motores de búsqueda. Características • Instalación • Uso • Configuración • Ejecutar Uncover • Unirse a Discord uncover es un wrapper en Go que utiliza APIs de motores de búsqueda conocidos para descubrir rápidamente hosts expuestos...

ossec-hids

Información sobre OSSEC OSSEC es una plataforma completa para monitorear y controlar tus sistemas. Combina todos los aspectos de HIDS detección de intrusiones basada en host, monitoreo de registros y SIM/SIEM en una solución simple, potente y de código abierto. Visita nuestro sitio web para obten...

Malicious code in nested-lib (npm)

Source: amazon-inspector 0a0b849de5330a4a4984a855f83ce1638b17e459d359312319ff35dc0e02f928 The package declares scripts.postinstall = "node beacon.cjs" and index.js also invokes require'./beacon.cjs'.fire at module load. beacon.cjs POSTs a JSON payload containing os.hostname, dirname, process.cwd,...

Malicious code in another-very-long-name (npm)

Source: amazon-inspector eea9e3cf3d973c07d09048435d4ddc496574ce222d650c228b1400d866ea3ccf [email protected] ships a beacon.cjs that is invoked both from the declared postinstall lifecycle script and from the module's require-time entry index.js. On execution it collects host identifier...

Malicious code in @coopeuch/core (npm)

Source: amazon-inspector 35a2aead44a4adb850635cf457613400d143b9e4f047767b111058b881cfbb3f On npm install, postinstall.js automatically executes and collects a detailed host and environment report — hostname, username, uid/gid, home directory, platform/arch/release, CPU and memory, DNS servers,...

Malicious code in @s4yhiitestpoc/r3-https (npm)

Source: amazon-inspector b2638f8970897121676d5dc3ed7c002ab9d9ccc3e400283e165297a95e3c1423 On npm install, postinstall.js automatically collects host identity hostname, username, uid/gid, homedir, platform, release, enumerates network interfaces addresses, MACs, CIDRs, reads DNS servers and intern...

Malicious code in @s4yhiitestpoc/scan-https-d (npm)

Source: amazon-inspector 1a1dd63de3f5e380c573cd6bcf885c9d0c7a5c503959dfde1a6c8b963a6ddaea On npm install, postinstall.js collects installer host identity — os.hostname, os.userInfo.username, home directory, cwd, non-internal network interface addresses, DNS servers, and platform/arch/release — an...

CVE-2026-108905

pH7Builder pH7 Social Dating CMS before 18.6.0 contains a hard-coded API key vulnerability in Tool.class.php that allows unauthenticated attackers to bypass API access checks by spoofing the Host header. Attackers can send Host: localhost with privateapikey=dev772277 and the default allowed URL t...

EUVD-2026-97068

pH7Builder pH7 Social Dating CMS before 18.6.0 contains a hard-coded API key vulnerability in Tool.class.php that allows unauthenticated attackers to bypass API access checks by spoofing the Host header. Attackers can send Host: localhost with privateapikey=dev772277 and the default allowed URL t...