KillChain

KillChain ?? Aviso legal: Este proyecto está destinado estrictamente a fines educativos y de investigación en seguridad. El autor no es responsable de ningún uso indebido, daño o actividad ilegal causada por esta herramienta. Úsela únicamente en entornos de laboratorio aislados con permiso...

CVE-2025-60349

CVE-2025-60349: Terminación Arbitraria de Procesos en Pxscan Se descubrió un problema en Prevx v3.0.5.220 que permite a los atacantes provocar una denegación de servicio enviando el código IOCTL 0x22E044 al controlador pxscan.sys. Cualquier proceso listado bajo la clave de registro...

CVE-2026-3796

CVE-2026-3796 En QAX Virus Removal, versión del 2025-10-22 y anteriores, el controlador afectado QKSecureIOImp.sys depende de la imagen del proceso llamador para determinar si se le permite comunicarse con el controlador mini filter. Los atacantes podrían suplantar la imagen de un proceso llamado...

Linux Distros Unpatched Vulnerability : CVE-2026-92869

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An out-of-bounds write vulnerability exists in Pgpool-II, which may allow an authenticated attacker to cause abnormal process termination. CVE-2026-92869 Note...

webkitgtk: Processing maliciously crafted web content may lead to an unexpected process termination

A flaw was found in WebKitGTK. Processing malicious web content can cause a use-after-free issue due to improper memory management and result in an unexpected process termination...

webkitgtk: Processing maliciously crafted web content may lead to an unexpected process termination

A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process termination due to improper state management...

CVE-2026-102984

Astro is a web framework for content-driven websites. Prior to 11.1.3, the @astrojs/node adapter builds a request URL from the Host header, and a malformed port can make that URL invalid. The recovery path reuses the same malformed host and throws an uncaught TypeError: Invalid URL before routing...

EUVD-2026-89970

Astro is a web framework for content-driven websites. Prior to 11.1.3, the @astrojs/node adapter builds a request URL from the Host header, and a malformed port can make that URL invalid. The recovery path reuses the same malformed host and throws an uncaught TypeError: Invalid URL before routing...

CVE-2026-92954

A flaw was found in vm2. An attacker capable of running untrusted code within the sandbox can trigger a Denial of Service DoS by causing the host application process to terminate. This vulnerability exists because asynchronous operations Promises returned from the host environment are not properl...

DEBIAN-CVE-2026-92870

A stack-based buffer overflow vulnerability exists in Pgpool-II, which may allow an unauthenticated attacker to cause abnormal process termination...

DEBIAN-CVE-2026-92869

An out-of-bounds write vulnerability exists in Pgpool-II, which may allow an authenticated attacker to cause abnormal process termination...

EUVD-2026-89660

A stack-based buffer overflow vulnerability exists in Pgpool-II, which may allow an unauthenticated attacker to cause abnormal process termination...

CVE-2026-92870

A stack-based buffer overflow vulnerability exists in Pgpool-II, which may allow an unauthenticated attacker to cause abnormal process termination...

CVE-2026-92869

An out-of-bounds write vulnerability exists in Pgpool-II, which may allow an authenticated attacker to cause abnormal process termination...

EUVD-2026-89659

An out-of-bounds write vulnerability exists in Pgpool-II, which may allow an authenticated attacker to cause abnormal process termination...

CVE-2026-92869

An out-of-bounds write vulnerability exists in Pgpool-II . This flaw may allow an authenticated attacker to cause abnormal process termination . No specific versions, root causes, or remediation steps are provided in the available documents. No exploit information is available.

undici vulnerable to Denial of Service via WebSocketStream unclean close

Impact undici's WebSocketStream crashes the client process when a WebSocket connection is closed abruptly without a close handshake. On such an unclean close, the internal socket-close handler calls abort on the writable stream even when the application holds a writer lock. Per the WHATWG Streams...

CVE-2026-36130

PoC Añade la carpeta al bloqueo Antes del reinicio, el proceso de Defender sigue en ejecución Después del reinicio, el proceso de Defender MsMpEng.exe ha desaparecido...

BYOVD-CVE-2023-52271-POC

Aviso legal: Este repositorio contiene código que se proporciona estrictamente solo con fines educativos y de investigación. NO utilice este código en sistemas que no le pertenezcan o para los que no tenga permiso explícito de pruebas. Cualquier uso indebido de este código puede violar leyes...

CVE-2025-61155

CVE-2025-61155: Terminación Arbitraria de Procesos en GameDriverX64.sys https://github.com/user-attachments/assets/baf76601-94de-49a6-b4fd-e72f63112fab Resumen Este repositorio contiene el aviso de seguridad y el PoC para CVE-2025-61155. El controlador anti-trampas GameDriverX64.sys permite a...