f32

La f32 es una placa de desarrollo ESP32 ultracompacta diseñada para montarse directamente detrás de un conector USB-C. La PCB mide solo 9.85 mm x 8.45 mm. Está alimentada por el microcontrolador ESP32-C3FH4 y fue creada principalmente para investigación y como una especie de prueba de estrés para...

lxd_root

Escalada de privilegios en Linux mediante LXD Descripción general Los miembros del grupo local lxd en sistemas Linux tienen numerosas vías para escalar sus privilegios a root. Este repositorio contiene ejemplos de exploits locales totalmente automatizados. Puedes encontrar una explicación detalla...

Disk-Arbitrator

Introducción Disk Arbitrator es una utilidad forense para Mac OS X diseñada para ayudar al usuario a garantizar que se sigan los procedimientos forenses correctos durante la creación de imágenes de un dispositivo de disco. Disk Arbitrator es esencialmente una interfaz de usuario para el framework...

sharesniffer

sharesniffer sharesniffer is a network analysis tool for finding open and closed file shares on your local network. It includes auto-network discovery and auto-mounting of any open cifs and nfs shares. How to use Example to find all hosts on any local network with open/closed nfs/smb shares: pyth...

CVE-2015-1769

CVE-2015-1769 PoC para CVE-2015-1769 Archivo VHD para reproducir CVE-2015-1769. El VHD no contiene una carga útil real, solo notepad.exe. Al montar, inspeccione el registro del sistema para ver el error bloqueado informado si el parche más reciente está instalado. El script por lotes muestra cómo...

CVE-2026-97485

A flaw was found in the Linux kernel's Optimized MPEG File System OMFS driver. The driver does not properly handle failures when configuring block sizes during file system mounting. A local attacker with the ability to mount a crafted file system image could exploit this flaw to trigger a kernel...

CVE-2025-9074-PoC

Docker API RCE sin autenticación CVE-2025-9074 Una vulnerabilidad crítica CVE-2025-9074 en Docker Desktop permite que contenedores Linux que se ejecutan localmente se conecten a la API del motor Docker a través de la subred predeterminada 192.168.65.7:2375. El problema persiste independientemente...

lehack-2026-challenge

Reto LeHack 2026 Un reto de 3 niveles que demuestra el impacto del montaje directo de disco. Resumen del reto Nivel| Objetivo| Técnica ---|---|--- 1| Acceder al disco sin cifrar| Establecer la línea de comandos de arranque a init=/bin/bash en grub 2| Romper el LUKS de vault1| Extraer la cabecera ...

CVE-2026-96282

A malicious Flatpak extension can probe the host filesystem to determine what files and directories exist at arbitrary paths, and host directory listings can be disclosed to sandboxed applications using the extension. Additionally, unvalidated extension metadata can cause extension content to be...

CVE-2025-9074-Poc

RCE no autenticado en la API de Docker CVE-2025-9074 Una vulnerabilidad crítica CVE-2025-9074 en Docker Desktop permite que contenedores Linux en ejecución local se conecten a la API del motor de Docker a través de la subred predeterminada 192.168.65.7:2375. El problema persiste independientement...

SUSE CVE-2026-97485

In the Linux kernel, the following vulnerability has been resolved: omfs: handle setblocksize failures omfs uses bufferheads, which don't handle block size PAGESIZE well. Without this, mounting we will hit the BUGONoffset = foliosizefolio; in foliosetbh on the first breadgfp call...

DEBIAN-CVE-2026-97490

In the Linux kernel, the following vulnerability has been resolved: affs: handle setblocksize failures affs uses bufferheads, which don't handle block size PAGESIZE well. Without this, mounting we will hit the BUGONoffset = foliosizefolio; in foliosetbh on the first breadgfp call...

PT-2026-98105

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The hpfs file system fails to properly handle set blocksize failures. This occurs because hpfs utilizes buffer heads, which do not effectively manage block sizes larger than PAGE SIZE...

CVE-2026-84588

A memory corruption issue was addressed by removing the vulnerable code. This issue is fixed in macOS Golden Gate 27. Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory...

EUVD-2026-77918

A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory...

CVE-2026-84510

A heap buffer overflow vulnerability exists in iOS , iPadOS , and macOS systems. The issue is caused by insufficient bounds checking and can be triggered by mounting a maliciously crafted volume , potentially leading to unexpected system termination . This vulnerability has been addressed in the ...

CVE-2026-28934

A buffer overflow vulnerability exists in macOS because of insufficient bounds checking. An attacker could exploit this by tricking a user into mounting a malicious disk image , which may result in unexpected system termination . This issue has been addressed in macOS Golden Gate 27 , macOS Sequo...

Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: ext4: Fixed a warning in mbfindextent. Syzbot identified the following issues: EXT4-fs: Warning: Mounting with data=journal disables delayed allocation, dioreadnolock, ODIRECT, and fastcommit support! EXT4-fs loop0: orphan...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: fs/ntfs3: Validates the BOOT recordsize field. When the NTFS BOOT recordsize field is less than 0, it represents a shift value. However, there is no sanity check on the shift result, and the sbi-recordbits calculation using...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: USB: gadgetfs: Fix race between mounting and unmounting The syzbot fuzzer and Gerald Lee have identified a use-after-free bug in the gadgetfs driver. This bug involves processes concurrently mounting and unmounting the gadgetf...