OESA-2026-3867 ruby security update

Ruby is a fast and easy interpreted scripting language for object-oriented programming. It has many functions for processing text Files and perform system management tasks such as Perl. Security Fixes: An issue was discovered in the resolv gem before 0.7.2 for Ruby. Resolv::DNS::MessageEncoder...

OESA-2026-3830 openssl security update

OpenSSL is a robust, commercial-grade, and full-featured toolkit for the Transport Layer Security TLS and Secure Sockets Layer SSL protocols. Security Fixes: Issue summary: In a server or client configuration with RFC7250 Raw Public Keys RPKs enabled, and only the private key with no associated...

OESA-2026-3763 busybox security update

The Swiss Army Knife of Embedded Linux Security Fixes: A vulnerability has been found in BusyBox up to 1.30.1. This vulnerability affects unknown code of the file networking/wget.c of the component FEATUREWGETTIMEOUT Handler. Such manipulation of the argument -T leads to null pointer dereference...

CVE-2026-90576

GPAC (up to commit f1219cde) contains a null pointer dereference in the function gf_node_list_add_child within scenegraph/base_scenegraph.c of the MP4Box component. A local attacker with low privileges can trigger a denial-of-service condition with no impact on confidentiality or integrity (CVSS ...

CVE-2026-90573

GPAC MP4Box is vulnerable to a null pointer dereference in the function gf_sg_mfurl_del within the file scenegraph/vrml_tools.c . The vulnerability affects GPAC builds up to commit f1219cde and requires local access with low privileges to trigger. The impact is limited to a partial loss of availa...

EUVD-2026-77054

A vulnerability was identified in GPAC up to f1219cde. The impacted element is the function gfsgmfurldel of the file scenegraph/vrmltools.c of the component MP4Box. The manipulation leads to null pointer dereference. Local access is required to approach this attack. The exploit is publicly...

pe-bear

PE-bear PE-bear is a multiplatform reversing tool for PE files. Its objective is to deliver fast and flexible “first view” for malware analysts, stable and capable to handle malformed PE files...

CVE-2026-90782

S2OPC through 1.7.3 contains a null pointer dereference in msgsubscriptionpublishbsallocnotificationmessageitems where a failed allocation for DataChangeNotification is overwritten by a successful allocation for EventNotificationList. Attackers can trigger heap allocation failures on sessions wit...

CVE-2009-2692

CVE-2009-2692 Linux Null pointer dereference This is just the compiled binary of the code available in https://www.exploit-db.com/exploits/9545/ Compiled for education purposes It was compiled under CentOS 4.8...

CVE-2026-90782 S2OPC through 1.7.3 NULL Pointer Dereference in alloc_notification_message_items()

S2OPC through 1.7.3 contains a null pointer dereference in msgsubscriptionpublishbsallocnotificationmessageitems where a failed allocation for DataChangeNotification is overwritten by a successful allocation for EventNotificationList. Attackers can trigger heap allocation failures on sessions wit...

CVE-2026-90782

S2OPC through 1.7.3 contains a null pointer dereference in the function msg_subscription_publish_bs__alloc_notification_message_items(). The root cause is that a failed heap allocation for a DataChangeNotification is overwritten by a subsequent successful allocation for an EventNotificationList ,...

EUVD-2026-77009

S2OPC through 1.7.3 contains a null pointer dereference in msgsubscriptionpublishbsallocnotificationmessageitems where a failed allocation for DataChangeNotification is overwritten by a successful allocation for EventNotificationList. Attackers can trigger heap allocation failures on sessions wit...

php_hack

Esta herramienta explota una vulnerabilidad llamada CVE-2019-11043, una instancia de aritmética de punteros insegura, para obtener acceso a servidores PHP mal configurados. Se puede descargar aquí necesitarás ejecutarlo desde la línea de comandos Uso: phphack target IP target port...

CVE-2015-8543_for_SLE12SP1

root@kitploit: $cat /etc/-release PRETTYNAME="SUSE Linux Enterprise Server 12 SP1" root@kitploit: $id uid=1000jeremysp1 gid=100users groups=100users root@kitploit: $sudo sh disablesecurity.sh $gcc exp.c -o exp 2/dev/null $../nsjail/nsjail -Mo --user 0 --group 0 --keepcaps --chroot / -- /bin/sh -i...

CVE-2026-46215-EXPLOIT

CVE-2026-46215 Exploit para Linux 7.0 c0d3 por : Antonius w1sdom / ev1lut10n / sw0rdm4n - bluedragonsec.com https://github.com/bluedragonsecurity Este exploit funciona en un entorno limitado, ¡¡¡revisa algunos requisitos a continuación!!! ¿QUÉ DEMONIOS ES ESTO? Este es un exploit para...

exploit-CVE-2016-7434

Exploit DoS de ntpd CVE-2016-7434 Ntpd sufre una desreferencia de puntero nulo que es posible provocar para hacer fallar la aplicación. Según NTP.org, «Si ntpd está configurado para permitir solicitudes de consulta mrulist desde un servidor que envía un paquete malicioso manipulado, ntpd fallará ...

CVE-2025-50165-x64-Exploit

CVE-2025-50165 Componente de Gráficos de Windows RCE x64 Ejecución remota de código crítica mediante JPEG malicioso – Windows 11 24H2 sin parche CVSS 9.8 – Sin privilegios, sin interacción requerida root@kitploit: CVE-2025-50165 - windowscodecs.dll untrusted pointer dereference Discovered by...

ComfyEngine

ComfyEngine Qt-based memory scanner / watchlist playground inspired by Cheat Engine but built natively for Linux and tuned for my workflow: clean docks, pointer graphs, fast patching, and zero fear of losing context when you bounce between scanner, scripts, and notes. ComfyEngine gives you a clea...

CVE-2023-3338-DECPwn

DECPwn Practicando diferentes técnicas de explotación del kernel de Linux con mi vulnerabilidad DECnet y el mapeo de página nula habilitado. Escenarios Todo deshabilitado : qemu-system-x8664 -append "nosmap nosmep nopti nokaslr" La ejecución de código se redirige a la función output en el espacio...

IOFireWireFamily-null-deref

IOFireWireFamily-null-deref IOFireWireFamily-null-deref es un exploit de prueba de concepto para CVE-2017-2388, una desreferencia de puntero NULL en IOFireWireUserClient que se corrigió en macOS Sierra 10.12.4. Esta vulnerabilidad puede provocar una denegación de servicio en dispositivos con puer...