CVE-2025-47812-poC

CVE-2025-47812-poC Simple exploit for Wing FTP Server RCE CVE-2025-47812 to run commands and get a reverse shell. For educational use only. Vulnerability Details This security vulnerability was publicly disclosed and detailed by RCESecurity...

win-exec-calc-shellcode

win-exec-calc-shellcode Small null-free shellcode that execute calc.exe. Runs on x86 and x64 versions of Windows 5.0-6.3 2000, XP, 2003, 2008, 7, 8, 8.1, all service packs. Sizes build 306 platform | size | stack align | function wrapper | func+save regs | func+stack | func+stack+regs...

CVE-2026-98798

A flaw was found in the Linux kernel's Broadcom GENET network driver. A privileged local user could trigger a Denial of Service DoS by configuring receive coalescing settings on a network interface that has not yet been opened. This flaw leads to a null pointer dereference that can crash the kern...

CVE-2026-98796

A flaw was found in the Linux kernel's MediaTek Ethernet driver. This vulnerability allows a local user with network administration privileges to cause a Denial of Service DoS through a kernel crash. Due to an ordering issue during device initialization, the network interface is registered and...

ioctlance

IOCTLance Description Presented at CODE BLUE 2023, this project titled Enhanced Vulnerability Hunting in WDM Drivers with Symbolic Execution and Taint Analysis introduces IOCTLance, a tool that enhances its capacity to detect various vulnerability types in Windows Driver Model WDM drivers. In a...

CVE-2026-98791

A flaw was found in the Linux kernel's Mellanox network driver mlx5e. A local user can exploit this vulnerability to cause a denial of service DoS through a system crash. During the teardown of an AFXDP eXpress Data Path transmit queue, outstanding descriptors requesting a transmit timestamp are...

CVE-2026-98795

A flaw was found in the Linux kernel's Microchip Sparx5 network driver. When operating on devices where Precision Time Protocol PTP initialization is skipped, the driver does not check if PTP was initialized before executing its deinitialization routines. A local privileged user could trigger thi...

CVE-2026-98854

A flaw was found in the Linux kernel's Device Tree overlay subsystem. When applying an overlay fails during identifier allocation, the error cleanup routine incorrectly treats negative error codes as valid identifiers. A local user could trigger this vulnerability during resource allocation...

enum4linux-ng

enum4linux-ng A next generation version of enum4linux enum4linux-ng.py is a rewrite of Mark Lowe's former Portcullis Labs now Cisco CX Security Labs enum4linux.pl, a tool for enumerating information from Windows and Samba systems, aimed for security professionals and CTF players. The tool is main...

testanull-CVE-2021-22005.py

This repository does not have a README...

ridenum

RIDENUM - A simple open source method for performing null session brute forces Copyright 2018 TrustedSec Written by: David Kennedy ReL1K Twitter: @HackingDave and @TrustedSec Website: https://www.trustedsec.com . . . . . | \ | | | \ | || \ | | | | | | | / | | | | | | | .--. | | | | | | | | | | |...

CVE-2026-99087

The Linux kernel contains a vulnerability in the dm-integrity component where a NULL pointer dereference occurs during dm_integrity_resume. This issue is triggered when a device has the SB_FLAG_DIRTY_BITMAP flag set and is activated in 'R' mode , causing the function to incorrectly attempt to rea...

CVE-2026-99087 dm-integrity: fix NULL pointer dereference when the 'R' flag is used

In the Linux kernel, the following vulnerability has been resolved: dm-integrity: fix NULL pointer dereference when the 'R' flag is used If the dm-integrity device has the SBFLAGDIRTYBITMAP flag set and the user activates the device in the 'R' mode, a crash in dmintegrityresume happens because th...

EUVD-2026-108938

In the Linux kernel, the following vulnerability has been resolved: dm-integrity: fix NULL pointer dereference when the 'R' flag is used If the dm-integrity device has the SBFLAGDIRTYBITMAP flag set and the user activates the device in the 'R' mode, a crash in dmintegrityresume happens because th...

redteam-research

Red Team Research Collection of PoC and offensive techniques used by the BlackArrow Red Team License All the code included in this project is licensed under the terms of the MIT license...

CVE-2026-99074

The Linux kernel contains a vulnerability where a null-pointer dereference can occur during the PMTU (Path MTU) walk process. The root cause is a race condition: while RCU protects the lifetime of nexthop groups, it does not ensure that fib_info_num_path() and fib_info_nhc() observe the same grou...

EUVD-2026-108740

In the Linux kernel, the following vulnerability has been resolved: ipv4: stop PMTU walk when nexthop group shrinks Commit 7d3f3b4367f3 "net: ipv4: Cache pmtu for all packet paths if multipath enabled" made iprtupdatepmtu update every path. For nexthop objects, fibinfonumpath and fibinfonhc...

CVE-2026-99073

The Linux kernel contains a vulnerability where an IPv4 Forwarding Information Base (FIB) dump could lead to a null pointer dereference. The issue occurs because fib_dump_info_fnhe() uses a loop bound that may become invalid if an RTM_NEWNEXTHOP operation replaces a nexthop group with fewer paths...

CVE-2026-99072

A vulnerability exists in the Linux kernel networking stack related to ipv4 route notifications. The issue occurs because fib_nlmsg_size() performs an RCU-only call where fib_info_nhc() independently reloads nh->nh_grp. If RTM_NEWNEXTHOP replaces a group with fewer paths between these two oper...

EUVD-2026-108738

In the Linux kernel, the following vulnerability has been resolved: ipv4: stop route notification sizing when nexthop group shrinks Commit 680aea08e78c "net: ipv4: Emit notification when fib hardware flags are changed" added an RCU-only fibnlmsgsize call for asynchronous hardware flag...