OSINT-with-LLM

POC : OSINT con LLM Este repositorio demuestra el reconocimiento de dominios, IPs y correos electrónicos con informes de seguridad impulsados por LLM.. Descripción general El proyecto está dividido en dos componentes principales : 1. Módulos de Reconocimiento 2. Análisis y elaboración de informes...

objdump-Out-Of-Bounds-write

GNU Binutils objdump — OOB Write → FSOP → Ejecución de código arbitrario Objetivo: GNU Binutils todas las versiones hasta HEAD — objdump Entorno: Debian 13 Trixie, glibc 2.41, x8664 Impacto: Ejecución de código arbitrario Vector: Archivo ELF manipulado procesado por objdump -g ASLR: Evitado delta...

CVE-2026-78321

The HTTP media server on multiple DJI drone models (including Neo, Flip, Air 3, Avata 2, Mavic 3, Mini 2–5 Pro, and others) lacks sufficient limits on incoming connections and request rates. An attacker with access to the drone's internal network can exhaust the server's connection pool by repeat...

CVE-2026-78321 DJI Drone HTTP Media Server Denial of Service via Connection Pool Exhaustion

The HTTP media server on DJI drones does not enforce sufficient limits on incoming connections or request rates. An attacker with access to the drone's internal network can exhaust the server's connection pool by repeatedly requesting a stored media file, preventing the server from handling...

EUVD-2026-64756

The HTTP media server on DJI drones does not enforce sufficient limits on incoming connections or request rates. An attacker with access to the drone's internal network can exhaust the server's connection pool by repeatedly requesting a stored media file, preventing the server from handling...

SNEK_Equinox

SNEK Equinox 我要感谢 Nightmare-Eclipse 从项目 UnDefend 中获得的灵感（非个人层面）—— https://web.archive.org/web/20260521145157/https://github.com/Nightmare-Eclipse/UnDefend: 有趣的是，我找到了一种方法，可以向 EDR 的 Web 控制台谎报 Defender 正在运行且已更新至最新版本，即使实际上并非如此。我曾考虑发布代码，但仔细想想，这会造成太大的破坏，所以目前还是先藏起来吧。 - Nightmare-Eclipse...

CVE-2026-78306 DJI Drone Bluetooth Interface Unauthenticated DUML Command Execution

DJI drones expose an unauthenticated DUML command interface over Bluetooth that allows an attacker within Bluetooth range to modify Wi-Fi configuration parameters, including the SSID, PSK, MAC address, regulatory country code, and wireless channel. An attacker can overwrite the Wi-Fi PSK with a...

EUVD-2026-64752

DJI drones expose an unauthenticated DUML command interface over Bluetooth that allows an attacker within Bluetooth range to modify Wi-Fi configuration parameters, including the SSID, PSK, MAC address, regulatory country code, and wireless channel. An attacker can overwrite the Wi-Fi PSK with a...

CVE-2026-78306

DJI drones expose an unauthenticated DUML command interface over Bluetooth , allowing an attacker within Bluetooth range to modify Wi-Fi configuration parameters (SSID, PSK, MAC, regulatory country code, channel). By overwriting the Wi-Fi PSK with a known value, an attacker can connect to the dro...

DSCourier

DSCourier 描述 DSCourier 是一个概念验证，使用 WinGet Configuration COM API 通过微软签名的二进制文件应用 DSC 配置。一篇单独的博客文章对该技术进行了全面的技术深入分析。 DSCourier 主要是作为一个研究主题构建的，应被视为概念验证，而非一个完善的完整工具。其大部分价值来自于操作者自行修改、扩展和实验，包括创建自己的配置文件。本研究项目出于好奇和乐趣而创建，不应被恶意使用。 该技术已绕过多个企业级 EDR 解决方案。 博客文章 dylansec.com/DSCourier 构建与发布 Releases 目录包含编译后的...

CVE-2026-53587

A flaw was found in libgit2. A fixed-size string comparison in the setdata function within transports/smartpkt.c does not adequately verify the size of a network packet buffer. A remote attacker, operating a malicious Git server, can send a specially crafted packet-line capability buffer. This ca...

CVE-2026-31337

creationtimestamp| type| source ---|---|--- 2026-08-24 08:00:03+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/99429 2026-08-24 21:00:05+00:00| seen| Telegram/0Lzh2WjQOWsuTydOWekHZzZKDiwWQ3jcpMbWJHlr9UUA 2026-08-25 00:00:08+00:00| published-proof-of-concept|...

CVE-2025-44810

creationtimestamp| type| source ---|---|--- 2026-08-24 08:00:03+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/99427 2026-08-24 21:00:05+00:00| seen| Telegram/0Lzh2WjQOWsuTydOWekHZzZKDiwWQ3jcpMbWJHlr9UUA 2026-08-25 00:00:08+00:00| published-proof-of-concept|...

CVE-2026-09881

creationtimestamp| type| source ---|---|--- 2026-08-24 08:00:03+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/99431 2026-08-24 21:00:05+00:00| seen| Telegram/0Lzh2WjQOWsuTydOWekHZzZKDiwWQ3jcpMbWJHlr9UUA 2026-08-25 00:00:08+00:00| published-proof-of-concept|...

Important: Red Hat Security Advisory: fence-agents security update

An update for fence-agents is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scorin...

pyasn1: pyasn1: Denial of Service via crafted ASN.1 REAL values

A remote attacker can exploit this by providing specially crafted BER/CER/DER-encoded ASN.1 data with a large exponent in the REAL value. When the application subsequently prints, logs, compares, or performs arithmetic on the decoded value, this can cause excessive CPU and memory consumption,...

Important: Red Hat Security Advisory: fence-agents security update

An update for fence-agents is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common...

pyasn1: pyasn1: Denial of Service via crafted ASN.1 REAL values

A remote attacker can exploit this by providing specially crafted BER/CER/DER-encoded ASN.1 data with a large exponent in the REAL value. When the application subsequently prints, logs, compares, or performs arithmetic on the decoded value, this can cause excessive CPU and memory consumption,...

Important: Red Hat Security Advisory: fence-agents security update

An update for fence-agents is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is availabl...

pyasn1: pyasn1: Denial of Service via crafted ASN.1 REAL values

A remote attacker can exploit this by providing specially crafted BER/CER/DER-encoded ASN.1 data with a large exponent in the REAL value. When the application subsequently prints, logs, compares, or performs arithmetic on the decoded value, this can cause excessive CPU and memory consumption,...