libheif-cve-2026-50142

CVE-2026-50142 — libheif Unbounded heap allocation in HEIF sequence parser stsz fixed-size mode Severity: High CVSS 7.5 Advisory: GHSA-jvmp-j3cw-84mh Fixed: commit a6caa38 by @farindk Time to fix: 1 hour Summary A 1,477-byte crafted HEIF file triggers 7 GB unchecked heap allocation in Chunk::Chun...

smuggler

/ | | | | \ | | | | |/ |/ | || |/ | | | || | | | || | | /||||/ \ |\ || | @defparam Smuggler An HTTP Request Smuggling / Desync testing tool written in Python 3 Acknowledgements A special thanks to James Kettle for his research and methods into HTTP desyncs And a special thanks to Ben Sadeghipour...

Search-That-Hash

➡️ Discord ⬅️ El sistema de descifrado de hashes más rápido pip3 install search-that-hash && sth 🤔 Resumen ¿Cansado de ir a cada sitio web para descifrar tu hash? Search-That-Hash automatiza este proceso en menos de 2 segundos. Search-That-Hash busca en los sitios de cracking de hashes más...

CVE-2026-38766

CVE-2026-38766 An issue in Unistal Systems Pvt. Ltd. Protegent 360 v2.0.0.4 allows a local attacker to escalate privileges via a kernel mode driver...

CVE-2024-38041

CVE-2024-38041 Punteros del kernel copiados al búfer del modo de usuario de salida con ioctl 0x22A014 en el controlador appid.sys...

r0ak

r0ak r0ak es una utilidad de línea de comandos de Windows que permite leer, escribir y ejecutar código en modo kernel con algunas limitaciones desde el símbolo del sistema, sin necesidad de nada más que privilegios de Administrador. Primer vistazo r0ak v1.0.0 -- Ring 0 Army Knife...

ntlmv1-multi

NTLMv1 Multiherramienta Esta herramienta revierte hashes NTLMv1 a NTLM o, más específicamente, formatea las respuestas al desafío NTLMv1 en un formato que puede crackearse con el modo 14000 de hashcat. Cálculo de CT3 Si especificas --ct3, calculará los últimos 4 dígitos del NTLM por ti; si...

internalblue

Broadcom chips are used in approximately a billion of devices, such as all iPhones , MacBooks , the Samsung Galaxy S series, the older Google Nexus series, older Thinkpads , Raspberry Pis , various IoT devices, and more. In 2016, Cypress acquired the IoT division of Broadcom. Since then, firmware...

weape

wEAPe 无线EAP提取器脚本（Weape） ============================================ 自动提取EAP 802.1x用户名 由Daniel Compton在Info-Assure Ltd开发 https://github.com/commonexploits/weape.git 安装 git clone https://github.com/commonexploits/weape.git 使用方法 ./weape.sh 功能 将无线网卡设置为监听模式 列出所有接入点（AP） 关联你希望连接的AP 从使用EAP的任意连接中提取域用户名...

acheron

Acerca de Acheron es una librería inspirada en SysWhisper3/FreshyCalls/RecycledGate, con la mayor parte de la funcionalidad implementada en ensamblador de Go. El paquete acheron se puede usar para añadir capacidades de syscall indirecta a tus herramientas ofensivas en Golang, para eludir AV/EDR q...

f5-waf-enforce-sig-CVE-2021-44228

f5-waf-enforce-sigs-CVE-2021-44228 This enforces signatures for CVE-2021-44228 across all policies on a BIG-IP ASM device Overview This script enforces all signatures present in the list below related to CVE-2021-44228 across all policies in blocking mode in the Adv. WAF/ASM. sigs = '200104768',...

CVE-2026-98330

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: get the wiphy out of a dying network namespace When a network namespace is destroyed, cfg80211pernetexit moves any wiphy back to the initial namespace, and just warns if that fails. But moving an interface can fai...

chromepass

Chromepass - Hacking Chrome Saved Passwords and Cookies View Demo · Report Bug · Request Feature Table of Contents About the Project AV Detection Getting started Prerequisites Installation Usage Email Errors, Bugs and Feature Requests Learn More License Demo About The project Chromepass is a...

CVE-2024-4577

CVE-2024-4577 PoC Exploit Description This repository contains a proof-of-concept PoC exploit for CVE-2024-4577, a critical vulnerability affecting all versions of PHP running on Windows. The vulnerability allows attackers to execute arbitrary code remotely. The flaw also impacts the XAMPP...

EUVD-2026-93315

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: get the wiphy out of a dying network namespace When a network namespace is destroyed, cfg80211pernetexit moves any wiphy back to the initial namespace, and just warns if that fails. But moving an interface can fai...

CVE-2026-98330 wifi: cfg80211: get the wiphy out of a dying network namespace

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: get the wiphy out of a dying network namespace When a network namespace is destroyed, cfg80211pernetexit moves any wiphy back to the initial namespace, and just warns if that fails. But moving an interface can fai...

CVE-2026-98330

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: get the wiphy out of a dying network namespace When a network namespace is destroyed, cfg80211pernetexit moves any wiphy back to the initial namespace, and just warns if that fails. But moving an interface can fai...

CVE-2026-98272

The Linux kernel contains a buffer overflow vulnerability in the mvpp2 driver during page_pool allocation . The issue occurs because the mvpp2_change_mtu() function may call mvpp2_bm_switch_buffers() without verifying if the number of pools (nrxqs * 2) exceeds the MVPP2_BM_MAX_POOLS limit of 8. T...

whoc

whoc A container image that extracts the underlying container runtime and sends it to a remote server. Poke at the underlying container runtime of your favorite CSP container platform! WhoC at Defcon 29 Cloud Village Azurescape - whoc-powered research, the first cross-account container takeover i...

CVE-2026-98232

In the Linux kernel, the following vulnerability has been resolved: scsi: core: Validate MODE SENSE lengths in scsicdlenable scsicdlenable uses length fields returned by MODE SENSE to locate the ATA feature mode page in a 64-byte stack buffer. A target can report a total length shorter than its...