gftrace

gftrace A command line Windows API tracing tool for Golang binaries. Note: This tool is a PoC and a work-in-progress prototype so please treat it as such. Feedbacks are always welcome! How it works? Although Golang programs contains a lot of nuances regarding the way they are built and their...

wavecrack

Wavecrack Description A user-friendly Web interface to share an hashcat cracking box among multiple users with some pre-defined options. Screenshots The homepage Adding an hash to crack Seeing the results and some stats Outline This Web application can be used to launch asynchronous password crac...

Datart v1.0.0-rc.3 - Remote Code Execution

Datart v1.0.0-rc.3 contains a vulnerability that allows remote attackers to execute arbitrary code via INIT connection parameters. id: CVE-2025-56819 info: name: Datart v1.0.0-rc.3 - Remote Code Execution author: Redmomn severity: critical description: | Datart v1.0.0-rc.3 contains a vulnerabilit...

SealSecurityAssignment

SealSecurityAssignment 研究漏洞 CVE-2023-26136 漏洞研究：CVE-2023-26136 描述： tough-cookie 包在 4.1.3 之前的所有版本存在原型污染漏洞，原因是在使用 CookieJar 的 rejectPublicSuffixes=false 模式时对 Cookie 处理不当。该问题源于对象初始化方式。 https://nvd.nist.gov/vuln/detail/CVE-2023-26136 引言： 什么是原型污染？ JavaScript...

CVE-2025-15467

CVE-2025-15467：OpenSSL CMS AuthEnvelopedData堆栈缓冲区溢出 概述 CVE-2025-15467 是OpenSSL的CMS（加密消息语法）解析代码中的一个严重堆栈缓冲区溢出漏洞。该漏洞存在于evpciphergetasn1aeadparams函数中，当处理CMS AuthEnvelopedData结构中的AES-GCM初始化向量（IV）时触发。...

Dirty-Pipe-Exploits

CVE-2022-0847 Exploits Dirty Pipe ¿Qué es? Divulgada el 7 de marzo de 2022 por Max Kellerman2, la CVE-2022-0847 es una vulnerabilidad en el kernel de Linux versiones entre la 5.8 y 5.16.11 que permite a los atacantes sobrescribir archivos de solo lectura o inmutables y aumentar sus privilegios en...

elfloader

Summary elfloader is a super simple loader for ELF files that generates a flat in-memory representation of the ELF. Pair this with Rust and now you can write your shellcode in a proper, safe, high-level language. Any target that LLVM can target can be used, including custom target specifications...

raven

Raven - Advanced Cyber Threat Map Simplified, customizable and responsive. It uses D3.js with TOPO JSON, has 247 countries, 100,000 cities, and can be used in an isolated environment without external lookups!. Structure Offline - Demo Firefox, Chrome or Safari Live - Regression 500 attacks at onc...

cve-2019-1108

CVE-2019-1108 漏洞利用 root@kitploit: CVE-2019-1108 Remote Desktop Protocol Client Information Disclosure Vulnerability Published: 07/09/2019 | Last Updated : 11/19/2019 MITRE CVE-2019-1108 An information disclosure vulnerability exists when the Windows RDP client improperly discloses the contents of...

CVE-2020-2551

CVE-2020-2551 该项目的搭建脚本在10.3.6版本经过测试，12版本未测试。 环境 kali+weblogic10.3.6+jdk6u25 保证部署weblogic的机器内存至少1.5G，因为脚本中参数指定的-x1024m。 使用方法 部署weblogic本地调试环境 进入到对应版本目录，详情查阅对应READEME。 尝试登陆 访问http://ip:7001/console，初次访问的时候有初始化过程！ 默认用户名密码：weblogic/admin@123 payload generate...

Linux Distros Unpatched Vulnerability : CVE-2026-89599

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fbdev: omapfb: panel-dsi-cm: initialize lock before registering display dsicmprobe registers the display before initializing ddata-lock. Once...

Linux Distros Unpatched Vulnerability : CVE-2026-80953

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - i3c: master: adi: initialize the lock before enabling interrupts adii3cmasterprobe requests the IRQ and unmasks REGIRQPENDINGCMDR before the controller's IBI...

CVE-2026-89594

A flaw was found in the Linux kernel's OMAP SSI driver. The driver uses a synthetic HSI controller device that does not properly initialize its Direct Memory Access DMA mask. This oversight can lead to the driver crashing or triggering warnings when attempting DMA mapping operations, potentially...

DEBIAN-CVE-2026-89668

In the Linux kernel, the following vulnerability has been resolved: nfsd: move nfsddebugfsinit after nfsd4initslabs in initnfsd nfsddebugfsinit runs before nfsd4initslabs in initnfsd. If the slab allocation fails, the bare "return retval" bypasses nfsddebugfsexit, leaving orphan debugfs files wit...

DEBIAN-CVE-2026-81016

In the Linux kernel, the following vulnerability has been resolved: platform/x86/amd/pmc: Propagate SMU errors and validate S2D address amdstbs2dinit discards the return value of several S2D SMU commands. When the SMU refuses a command e.g. "SMU cmd failed. err: 0xff" the failure is only noticed...

CVE-2026-81016

In the Linux kernel, the following vulnerability has been resolved: platform/x86/amd/pmc: Propagate SMU errors and validate S2D address amdstbs2dinit discards the return value of several S2D SMU commands. When the SMU refuses a command e.g. "SMU cmd failed. err: 0xff" the failure is only noticed...

DEBIAN-CVE-2026-80967

In the Linux kernel, the following vulnerability has been resolved: ALSA: pcxhr: initialize mutexes before requesting threaded IRQ pcxhrprobe requests pcxhrthreadedirq before initializing mgr-lock, even though the threaded handler takes that mutex. Initialize the manager locks before...

CVE-2026-80956

In the Linux kernel, the following vulnerability has been resolved: dm-pcache: only hand out initialized cache segments getcachesegment scans the segment map up to cache-nsegs, the physical device segment count, but cachesegsinit only initializes the first cacheinfo-nsegs segments. A crafted imag...

CVE-2026-89668 nfsd: move nfsd_debugfs_init() after nfsd4_init_slabs() in init_nfsd()

In the Linux kernel, the following vulnerability has been resolved: nfsd: move nfsddebugfsinit after nfsd4initslabs in initnfsd nfsddebugfsinit runs before nfsd4initslabs in initnfsd. If the slab allocation fails, the bare "return retval" bypasses nfsddebugfsexit, leaving orphan debugfs files wit...

CVE-2026-89618

CVE-2026-89618 affects the Linux kernel 's eventfs (event filesystem) subsystem. The root cause is that init_ei() does not initialize the eventfs_inode list heads (ei->children and ei->list). When eventfs_create_dir() fails due to memory pressure , it calls free_ei() before the lists are in...