CVE-2026-91828

The OMGF | GDPR/DSGVO Compliant, Faster Google Fonts. Easy. WordPress plugin (versions before 6.3.11 ) is vulnerable to an unauthenticated Denial of Service (DoS) . The flaw exists because the plugin fails to require authentication or a valid nonce for an action that triggers a slow server-side l...

trident

trident The Trident project is an automated password spraying tool developed to meet the following requirements: the ability to be deployed on several cloud platforms/execution providers the ability to schedule spraying campaigns in accordance with a target’s account lockout policy the ability to...

trident

trident Trident 项目是一个自动化密码喷射工具，旨在满足以下需求： 能够在多个云平台/执行提供商上部署 能够根据目标的帐户锁定策略安排喷射活动 能够增加身份验证请求来源的 IP 池，以提升操作安全性 能够快速扩展功能以支持新遇到的身份验证平台 目录 trident 目录 架构 部署 安装 使用 配置 活动 结果 架构 该图使用 Diagrams 生成。 Go gopher 由 Renee French 设计， 并采用 CC BY 3.0 许可协议。 部署 部署 trident 需要 Google Cloud 项目、一个域名（用于编排器 API），以及针对该域名的...

Remote-DLL-Injection-with-Timer-based-Shellcode-Execution

Inyección Remota de DLL con Ejecución de Shellcode Basada en Temporizador Documentación actualizada por el error anterior en el título de inyección de procesos! ⚠ Solo para Investigación Educativa Este repositorio contiene investigación de seguridad con fines educativos y solo para uso autorizado...

EUVD-2026-91076

A flaw was found in 389-ds-base. An unauthenticated remote attacker can send a complete LDAP operation followed by the first bytes of an incomplete LDAPMessage on the same connection, causing the server to hand that connection to a second worker thread before the first worker's result is flushed...

CVE-2021-32537

CVE-2021-32537: RTKVHD64 中的越界访问导致池损坏。 这是我于2021年4月初报告给瑞昱半导体的一个漏洞。受影响的驱动程序名为RTKVHD64.sys，似乎存在于多种主流硬件中（测试了以下硬件配置，但可能还有更多存在漏洞）： Microsoft Surface Laptop, Microsoft Surface Book, Microsoft Surface Pro, 联想 Thinkpad, Dell XPS 13. 瑞昱半导体告知我该漏洞已修复，修复程序通过 Windows...

PT-2026-104091

The OMGF | GDPR/DSGVO Compliant, Faster Google Fonts. Easy. WordPress plugin before 6.3.11 does not require authentication or a valid nonce on an action that issues a slow server-side loopback request, allowing unauthenticated attackers to exhaust the site's PHP worker pool and make the entire si...

PT-2026-104403

Name of the Vulnerable Software and Affected Versions Tinypool versions prior to 2.1.2 Description Tinypool reads the filename from a caller-supplied options object in the pool.runtask, options function without verifying if the property is an own property of the object. This allows a polluted...

CVE-2026-86344

A flaw was found in 389-ds-base. An unauthenticated remote attacker can send a complete LDAP operation followed by the first bytes of an incomplete LDAPMessage on the same connection, causing the server to hand that connection to a second worker thread before the first worker's result is flushed...

CVE-2026-86344

A flaw was found in 389-ds-base. An unauthenticated remote attacker can send a complete LDAP operation followed by the first bytes of an incomplete LDAPMessage on the same connection, causing the server to hand that connection to a second worker thread before the first worker's result is flushed...

DEBIAN-CVE-2026-86344

A flaw was found in 389-ds-base. An unauthenticated remote attacker can send a complete LDAP operation followed by the first bytes of an incomplete LDAPMessage on the same connection, causing the server to hand that connection to a second worker thread before the first worker's result is flushed...

CVE-2026-86344

A flaw in 389-ds-base allows an unauthenticated remote attacker to perform a denial of service (DoS) attack. By sending a complete LDAP operation followed by the first bytes of an incomplete LDAPMessage on a single connection, the attacker can force the server to hand that connection to a second ...

CVE-2026-86344 389-ds-base: 389-ds-base: unauthenticated worker-thread-pool exhaustion via completed-operation-then-incomplete-pdu connection requeue

A flaw was found in 389-ds-base. An unauthenticated remote attacker can send a complete LDAP operation followed by the first bytes of an incomplete LDAPMessage on the same connection, causing the server to hand that connection to a second worker thread before the first worker's result is flushed...

CVE-2026-86344

A flaw was found in 389-ds-base. An unauthenticated remote attacker can send a complete LDAP operation followed by the first bytes of an incomplete LDAPMessage on the same connection, causing the server to hand that connection to a second worker thread before the first worker's result is flushed...

EternalBlue-Exploit-Demonstration

Demostración del Exploit EternalBlue MS17-010 Laboratorio de ciberseguridad que demuestra la explotación de CVE-2017-0144 EternalBlue usando Metasploit contra un sistema Windows 7 vulnerable, obteniendo acceso a nivel de SYSTEM a través de Meterpreter. Este proyecto también simula un ataque de...

EternalBlue-Exploit-Demonstration-MS17-010

Demostración del Exploit EternalBlue MS17-010 Laboratorio de ciberseguridad que demuestra la explotación de CVE-2017-0144 EternalBlue usando Metasploit contra un sistema Windows 7 vulnerable, obteniendo acceso a nivel SYSTEM a través de Meterpreter. Este proyecto también simula un ataque de...

Windows-Kernel-Exploitation

1. Explotación de Desbordamiento del Non-Paged Pool con Named Pipes Técnicas basadas en named pipes para la explotación de desbordamientos de pool, demostradas en CVE-2020-17087 y un desbordamiento off-by-one 2. Abuso de Metadatos del Asignador VS del Segment Heap Técnicas para convertir una...

AnyIO process-pool workers can block indefinitely on undrained stderr

ImpactAnyIO starts process-pool workers with stderr connected to a pipe but never drains that pipe. The worker redirects stdin and stdout to /dev/null to protect its protocol, but does not redirect stderr even though the documentation says all three standard streams are redirected. Worker code th...

PYSEC-2026-4024 AnyIO process-pool workers can block indefinitely on undrained stderr

Impact AnyIO starts process-pool workers with stderr connected to a pipe but never drains that pipe. The worker redirects stdin and stdout to /dev/null to protect its protocol, but does not redirect stderr even though the documentation says all three standard streams are redirected. Worker code...

CVE-2026-24306

Escalada de Privilegios en Azure Front Door – PoC CVE-2026-24306 Solo para uso autorizado en red team / investigación. El autor no se hace responsable del mal uso. La vulnerabilidad permite: Inyección arbitraria de reglas de enrutamiento Modificación del grupo de orígenes / backend pool Adjuntar ...