MAL-015

MAL-015: Escape de Aislamiento 2 en Ansible Tower Las instalaciones de Ansible Tower en ciertas configuraciones de Rhel 7/8 son potencialmente vulnerables a los escapes de “Job Isolation” que permiten a un atacante escalar al usuario “awx” desde fuera del entorno aislado. Los siguientes...

MAL-002

MAL-002: Forzar el reinicio del sistema mediante MSIs de Windows instalados Una vez que un software se instala correctamente en el sistema, uno o más archivos MSI de confianza aparecerán en la carpeta “C:\Windows\Installer” y pueden permitir a un usuario de bajo privilegio realizar acciones de...

meshtastic-cve-2025-52464-poc

Prueba de concepto de Meshtastic CVE-2025-52464 Descripción general Este proyecto es una prueba de concepto exclusivamente de software que demuestra CVE-2025-52464 , una vulnerabilidad que afecta a las versiones 2.5.0 a 2.6.10 del firmware de Meshtastic. La implementación reproduce el...

btlejuice

BtleJuice Framework Introduction BtleJuice is a complete framework to perform Man-in-the-Middle attacks on Bluetooth Smart devices also known as Bluetooth Low Energy. It is composed of: an interception core an interception proxy a dedicated web interface Python and Node.js bindings How to install...

HoneyPy

HoneyPy 🍯 A low interaction honeypot with the capability to be more of a medium interaction honeypot. Project status: No longer in active development. Repository will remain for anyone wanting to use or contribute to HoneyPy. I recommend using the honeydb-agent instead:...

BloodfangC2

Bloodfang es un implant moderno con código independiente de posición que compila a sistemas Windows de 64 y 32 bits. El shellcode del implant compilado ocupa unos 6 KB kilobytes. Su ejecución en memoria tiene una huella muy reducida. Créditos para:...

Linux Distros Unpatched Vulnerability : CVE-2026-89087

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The cstruct package before 6.3.0 for OCaml mishandles indexes. CVE-2026-89087 Note that Nessus relies on the presence of the package as reported by the vendor...

CVE-2026-5173

🦊 CVE-2026-5173: PoC de Ejecución No Autorizada de Métodos en GitLab WebSocket 🛠️ Resumen CVE-2026-5173 permite a un atacante autenticado con bajos privilegios invocar métodos backend restringidos a través del endpoint WebSocket /-/cable de GitLab, específicamente mediante GraphqlChannel. Esto...

WMIcmd

El problema Al realizar investigaciones de bajo impacto y otras actividades similares, es posible que desees minimizar lo que se escribe en el disco / lo evidente. Esta herramienta nos permite ejecutar comandos a través de WMI y obtener información que de otro modo no está disponible a través de...

CVE-2026-9327

CVE-2026-9327 affects IBM WebSphere Application Server versions 9.0 (9.0.0.0–9.0.5.28) and 8.5 (8.5.0.0–8.5.5.30). The vulnerability is an improper privilege management flaw (CWE-269) that allows an authenticated user with a low-privilege administrative role to modify security configuration, pote...

Kernel-Arbitrary-Read-Vulnerability-Superfetch-EOP

Kernel-Arbitrary-Read-Vulnerability-Superfetch-EOP Vulnerabilidad de lectura arbitraria del kernel + EOP de Superfetch basado en reacher de https://starlabs.sg/blog/2022/06-trying-to-exploit-a-windows-kernel-arbitrary-read-vulnerability/ . El exploit debe ejecutarse desde integridad baja...

CVE-2025-69821-Beat-XP-Vega-Smartwatch-Security-Assessment

CVE-2025-69821 : Beat-XP-Vega-Smartwatch-Security-Assessment A security assessment of the Beat XP VEGA Smartwatch Firmware RB303ATV006229 focused on Bluetooth Low Energy BLE connectivity revealed a design and implementation weakness that enables a nearby BLE central device to establish and retain...

sweyntooth_bluetooth_low_energy_attacks

SweynTooth - Desatando el caos sobre Bluetooth Low Energy Este repositorio es parte del resultado de una investigación delASSET Research Group. SweynTooth comprende una familia de 18 vulnerabilidades en diferentes kits de desarrollo de software SDK de Bluetooth Low Energy BLE de seis grandes...

privilege-escalation-breach

Security breach project - Privilege escalation The vulnerability is in Oracle Solaris, a product of Oracle Systems component: XScreenSaver. The supported version that is affected is 11. It's an easily exploitable vulnerability which allows low privileged attackers with logon to the infrastructure...

CVE-2026-81051

Dell ThinOS 10, versions prior to 260510.2616, contain a Security Version Number Mutable to Older Versions vulnerability. A low privileged attacker with physical access could potentially exploit this vulnerability, leading to Protection mechanism bypass...

CVE-2026-79987 Low-privilege RCE through element-search eager loading

A remote, authenticated, non-admin Craft CMS Control Panel user with only the accessCp permission can execute operating system commands as the PHP web worker...

CVE-2026-79987 Low-privilege RCE through element-search eager loading

A remote, authenticated, non-admin Craft CMS Control Panel user with only the accessCp permission can execute operating system commands as the PHP web worker...

CVE-2026-79987

CVE-2026-79987 is a low-privilege remote code execution vulnerability in Craft CMS , exploitable by a remote, authenticated, non-admin Control Panel user holding only the accessCp permission. The root cause involves element-search eager loading , allowing the attacker to execute operating system ...

CVE-2026-88959

Anchor CMS through 0.12.7 contains a privilege escalation vulnerability caused by missing role-based access control (RBAC) on admin user-management endpoints. Any authenticated user with editor or user roles can send POST requests directly to the admin/users/add or admin/users/edit endpoints to c...

CVE-2026-4129 Improper Access Controls in NI SystemLink

There is an improper access control vulnerability in NI SystemLink that may allow an authenticated user with limited privileges to access host operating system files and directories that should be restricted. This vulnerability affects NI SystemLink and NI SystemLink Server 2026 Q3 and prior...