SetupHijack

SetupHijack Resumen SetupHijack es una herramienta de investigación de seguridad que explota condiciones de carrera y gestión insegura de archivos en procesos de instalación y actualización de Windows. Se dirige a escenarios donde instaladores o actualizadores privilegiados colocan archivos en...

esp_wifi_repeater

espwifirepeater Un router NAT WiFi totalmente funcional y ahora también un repetidor WiFi, también conocido como puente L2 NUEVO 2026: 10 años después de la primera versión, por fin se ha convertido en lo que siempre pretendió ser:un verdadero repetidor WiFi. Para no romper ninguna documentación ...

CVE-2026-98117

In the Linux kernel, the following vulnerability has been resolved: cachefiles: Fix potential UAF/KASAN warning Currently, tracecachefilescoherency is being passed a pointer to a be64 lain over the coherency data in struct cachefilesxattr so that it can display the first 8 bytes. However, the dat...

CVE-2026-98069

In the Linux kernel, the following vulnerability has been resolved: net/rds: acquire the fastpath locks in rdsconnshutdown rdsconnshutdown quiesces the transmit and receive-refill paths by waiting for RDSINXMIT and RDSRECVREFILL to be sampled clear, and then runs the transport shutdown and...

CVE-2026-98015

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: E-Switch: fix use-after-free in mlx5eswitchtermtblput In mlx5eswitchtermtblput, the zero-ref cleanup check reads tt-refcount after termtblmutex has been released. Two concurrent callers on the same mlx5termtblhandle rac...

CVE-2026-97965

In the Linux kernel, the following vulnerability has been resolved: vxlan: initialize md in vxlanxmitone If a VXLAN device is configured with both VXLANFCOLLECTMETADATA and VXLANFGBP, and a packet is transmitted through it using an external iptunnelinfo that lacks the IPTUNNELVXLANOPTBIT flag, md...

CVE-2026-97946

In the Linux kernel, the following vulnerability has been resolved: x86/amdnode: Fix PCI device reference counting in amdsmninit The local "root" pointer is a temporary variable used during the device search. Therefore, refcount related to the search iterators should be cleaned up after the searc...

CVE-2026-97921

In the Linux kernel, the following vulnerability has been resolved: tracing: Free histogram the field rejected for a bad modifier Writing a hist trigger whose value or variable carries a modifier that is not allowed there leaks the fields that were built for it. createvalfield takes the field fro...

CVE-2026-97920

In the Linux kernel, the following vulnerability has been resolved: tracing: Keep the entry count when the histogram stats allocation fails printentries uses nentries both as the number of sort entries and as its own return value, so the -ENOMEM it stores when the stats allocation fails overwrite...

CVE-2026-97922

In the Linux kernel, the following vulnerability has been resolved: tracing: Free histogram var refs regardless of how often they are referenced Using the same variable three or more times in one hist trigger leaks the variable reference and its strings when the trigger is removed. commit...

CVE-2026-97228

Rapid7 Bulk Export MCP versions 0.2.5 through 0.6.1 suffer from a GraphQL query injection issue in the export-status component getexportstatus in src/exportmanager.py, whereby the exportid value — an unvalidated MCP tool argument reaching the function via the checkrapid7exportstatus and...

CVE-2026-97526

In the Linux kernel, the following vulnerability has been resolved: s390/pai: Support CPU hotplug for PMU PAI The command 'perf stat -e paicrypto/CRYPTOALL/ -- ' crashes the kernel when CPUs are hotplug added during that run. Root cause is the missing allocation of per-CPU data structures for tha...

blogpost_cve-2018-19987-analysis

Análisis de CVE-2018-19987 inyección de comandos del sistema operativo en D-Link ¡Hola a todos! En esta breve entrada de blog desglosaré un análisis rápido que realicé para comprender mejor los detalles detrás de CVE-2018-19987. Al principio fui tras este CVE porque pensé que no había información...

cypherhound

CypherHound A Python3 terminal application that contains Neo4j cyphers for BloodHound data sets with a script to automate importing them into BloodHound CE. Output Samples Terminal HTML Report HTML Report continued Why? BloodHound is a staple tool for every penetration tester. However, there are...

CVE-2022-21661-Demo

Este repositorio demuestra una vulnerabilidad en WordPress 5.8.2, en la cual la ausencia de saneamiento en class-wp-tax-query.php puede, en situaciones muy específicas, permitir a los atacantes realizar inyección SQL. Tenga en cuenta que la explotación exitosa requiere que los desarrolladores...

WMIHACKER

WMIHACKER无需445端口 免责声明：本项目涉及的技术仅供安全学习与研究防御用途，禁止非法使用！ 免杀横向移动命令执行测试工具无需445端口 介绍：免杀横向渗透远程命令执行，常见的WMIEXEC、PSEXEC执行命令是创建服务或调用Win32Process.create执行命令，这些方式都已经被杀软100%拦截，通过改造出WMIHACKER免杀横向移动测试工具。无需445端口 主要功能：1、命令执行；2、文件上传；3、文件下载；4、PTH使用 使用 合并Issue 1里PTH的使用方法： root@kitploit: 第54-58行代码： if user = "-" And pas...

web-traffic-generator

web-traffic-generator A quick and dirty HTTP/S "organic" traffic generator. About Just a simple poorly written Python script that aimlessly "browses" the internet by starting at pre-defined ROOTURLS and randomly "clicking" links on pages until the pre-defined MAXDEPTH is met. I created this as a...

HellHall

HellsHall - Otra forma de obtener syscalls limpios HellsHall es una combinación de HellsGate y syscalls indirectos. Cómo funciona Primero, HellsHall comprueba si la dirección del syscall está hookeada e intenta recuperar el número de syscall comprobando la presencia de los siguientes bytes: 0x4C,...

CVE-mitre

CVE-Mitre Exposición Común de Vulnerabilidades Descargar un solo CVE La variable es solo un ejemplo ; puedes crear tu propio script SVN para descargar una sola carpeta = CVE = Saludos @nu11secur1ty $CVE = CVE-2020-13935 root@kitploit: svn checkout...

swift-nio-ssh

SwiftNIO SSH Este proyecto contiene soporte SSH utilizando SwiftNIO. ¿Qué es SwiftNIO SSH? SwiftNIO SSH es una implementación programática de SSH: es decir, es una colección de APIs que permiten a los programadores implementar extremos que hablan SSH. Críticamente, esto significa que se parece má...