LibAFL

LibAFL, the fuzzer library Advanced Fuzzing Library - Slot your own fuzzers together and extend their features using Rust. LibAFL is a collection of reusable pieces of fuzzers, written in Rust, it gives you many of the benefits of an off-the-shelf fuzzer, while being completely customizable. Some...

smbexec

smbexec A rapid psexec style attack with samba tools Original Concept and Script by Brav0Hax & PureHate Ported to ruby and modified by Smilingraccoon and Zeknox Codename - Machiavellian Written because we got sick of Metasploit PSExec getting popped Special thanks to Carnal0wnage who's blog...

LibTP_Gadget

LibTPGadget Esta es una generalización de https://github.com/AlmondOffSec/LibTPLoadLib para hacer proxy de APIs con un número arbitrario 11 como máximo, pero suficiente de argumentos. Se proporciona como una librería compartida de Crystal Palace. API compatible con el LibTP de @rasta-mouse para...

pth-toolkit

pth-toolkit Una versión modificada de la colección de herramientas passing-the-hash https://code.google.com/p/passing-the-hash/ diseñada para ser portátil y funcionar directamente sin configuración previa, incluso en los sistemas más 'desnudos' La rama master está compilada para amd64; el objetiv...

arpy

Arpy Arpy is an easy-to-use ARP spoofing MiTM tool for Mac. It provides 3 targeted functions: Packet Sniffing Visited Domains Visited Domains with Gource Each function will be explained below. Tested OS to date Darwin 14.3.0 Darwin Kernel Version 14.3.0 Mac OS X Requirements Python 2.7 Gource Sca...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: crypto: lib/mpi – avoid null pointer dereference in mpicmpui During NVMeTCP authentication, a controller can trigger a kernel oops by specifying the 8192-bit Diffie Hellman group and passing a correctly sized, but zeroed Diffie...

CVE-2026-80694

A flaw was found in the Linux kernel's mtkethsoc Ethernet driver. The mtkpollcontroller function incorrectly passed a netdevice pointer instead of an mtketh structure to mtkhandleirqrx. This incorrect parameter passing can lead to a system crash when ndopollcontroller is called with...

CVE-2026-80694

In the Linux kernel, the following vulnerability has been resolved: net: ethernet: mtkethsoc: pass eth to mtkhandleirqrx in pollcontroller mtkhandleirqrx expects a struct mtketh matching the requestirq cookie, but mtkpollcontroller incorrectly passed the netdevice . Calling ndopollcontroller with...

The vulnerabilities of the functions msm_iommu_pagetable_prealloc_allocate() and msm_iommu_pagetable_prealloc_cleanup() in the driver module drivers/gpu/drm/msm/msm_iommu.c of the Direct Rendering Infrastructure (DRI) kernel driver of the Linux operating system allow a attacker to cause a service failure.

The vulnerabilities of the functions msmiommupagetablepreallocallocate and msmiommupagetableprealloccleanup in the driver module drivers/gpu/drm/msm/msmiommu.c of the Direct Rendering Infrastructure DRI kernel of the Linux operating system are related to the passing of pointers. Exploiting these...

The vulnerability of the msm_drv_shutdown() function in the drivers/gpu/drm/msm/msm_drv.c file of the Direct Rendering Infrastructure (DRI) driver module of the Linux operating system allows a malicious actor to cause a service failure.

The vulnerability of the msmdrvshutdown function in the drivers/gpu/drm/msm/msmdrv.c file of the Direct Rendering Infrastructure DRI driver module of the Linux operating system is related to the passing of pointers. Exploiting this vulnerability could allow an attacker to cause a service failure...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: Platform/x86: Intel: punitipc: fixed memory corruption. This issue is addressed by ensuring that the address of the pointer “&punitipcdev” is passed correctly when the intent was to pass the pointer itself “punitipcdev” without t...

PT-2026-46991

Name of the Vulnerable Software and Affected Versions mcp-server-kubernetes versions prior to 3.7.0 Description The kubectl generic tool in mcp-server-kubernetes passes user-supplied flags and arguments directly to kubectl without an allowlist, enabling a privilege escalation attack. An attacker...

CVE-2025-33255

NVIDIA TRT-LLM for any platform contains a vulnerability in MPI server, where an attacker could cause an unsafe deserialization. A successful exploit of this vulnerability might lead to code execution, denial of service, data tampering, and information disclosure...

EUVD-2025-209903

NVIDIA TRT-LLM for any platform contains a vulnerability in MPI server, where an attacker could cause an unsafe deserialization. A successful exploit of this vulnerability might lead to code execution, denial of service, data tampering, and information disclosure...

NVIDIA TRT-LLM 代码问题漏洞

NVIDIA TRT-LM is a high-performance inference framework developed by NVIDIA Corporation for optimizing the inference acceleration and deployment of large language models. NVIDIA TRT-LM has code-related vulnerabilities, which stem from insecure deserialization in the MPI server. These...

PT-2026-42087

Name of the Vulnerable Software and Affected Versions NVIDIA TRT-LLM affected versions not specified Description A flaw in the MPI server allows an attacker to trigger unsafe deserialization. This process, which involves converting data from a stream back into an object, can be manipulated to...

PT-2026-40628

Buffer Overflow vulnerability in Ardupiot Copter Latest commit 92693e023793133e49a035daf37c14433e484778 allows a local attacker to cause a denial of service via the AP MSP::loop, AP MSP, AP MSP.cpp components...

CVE-2026-43473

In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Add NULL checks when resetting request and reply queues The driver encountered a crash during resource cleanup when the reply and request queues were NULL due to freed memory. This issue occurred when the creation o...

CVE-2026-43058

A flaw was found in the Linux kernel's vidtv media component. This issue arises from functions incorrectly passing data structures by value, which can lead to MemorySanitizer MSAN reporting uninitialized value warnings. Such warnings indicate a risk of memory corruption or undefined behavior, whi...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-006654)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-006654 advisory. In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix call timer start racing with call destruction The rxrpccall struct has a timer used to...