CVE-2017-16995

Descripción de la vulnerabilidad Ubuntu es un sistema operativo GNU/Linux de código abierto centrado en aplicaciones de escritorio, basado en Debian GNU/Linux. Recientemente, un hacker de sombrero blanco reveló que la última versión de Ubuntu Ubuntu 16.04 tiene una vulnerabilidad de escalada de...

CVE-2025-41244

💻 Step-by-Step Technical Process Compile the Program bash Compile the C code into an executable gcc -o /tmp/httpd /tmp/CVE-2025-41244.c Make it executable chmod +x /tmp/httpd Test the Version Functionality bash Test the -v flag should print version and exit /tmp/httpd -v Test the -V flag should...

CVE-2019-0708

CVE-2019-0708 CVE-2019-0708 Sorry Everyone. This is our team's testing program, not click bait. If you think we have others purpose, reconsider yourself. If you want to busfame, I don't care. Thanks @testanull, sorry for my English. I don't understand what people want in this repo?...

oss-bounty-program

ProjectDiscovery OSS Bounty Program Purpose The ProjectDiscovery OSS Bounty Program exists to democratize security by rewarding meaningful contributions from the global community. Our tools are used by researchers, defenders, and builders worldwide. This program ensures that anyone, anywhere, can...

CVE-2022-30525

CVE-2022-30525 Zyxel Firewall Remote Command Injection A python based exploit for CVE-2022-30525 Vulnerability Summary NIST A OS command injection vulnerability in the CGI program of Zyxel USG FLEX 100W firmware versions 5.00 up to and including 5.21 Patch 1, USG FLEX 200 firmware versions 5.00 u...

pwnkit

CVE-2021-4034 Introduction This is an exploit for the CVE-2021-4034 vulnerability, aka pwnkit, which was discovered by Qualys. Usage Compilation $ make or $ gcc -o pwnkit.so -fPIC -shared pwnkit.c -Wl,-e,main Testing $ make test or $ ./pwnkit.so...

cve-2019-9193

CVE-2019-9193 • CVE-2019-9193 Vulnerability PostgreSQL has a vulnerability that allows arbitrary code execution within the DB's operating system via the “COPY TO / FROM PROGRAM” feature. The attack vector involves users who are “SuperUser” or belong to the “pgexecuteserverprogram” group...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: bpf: The reuseport cBPF prog is freed after the RCU grace period. Eulgyu Kim reported the issue below with a reproduction example. The reproduction example sets up a UDP reuseport group with a cBPF prog and replaces it with a new...

bug-bounty-standards

What is This Repository? This repository is a list of situations that occur in bug bounty programs and how they should be handled. Many of these are currently handled on a case-by-case basis, which leads to a lot of uncertainty and frustration from hackers, program owners and platforms. The goal ...

EUVD-2026-87314

GNU libextractor before 1.16 loads plugins from an untrusted search path specified by the LIBEXTRACTORPREFIX environment variable without proper privilege checks. A local attacker can exploit this by setting LIBEXTRACTORPREFIX to a directory containing a malicious plugin that executes arbitrary...

DEBIAN-CVE-2026-91840

A flaw was found in NetworkManager-vpnc. This vulnerability allows a local unprivileged user to escalate privileges to root. By injecting a newline character into the VPN username field, an attacker can manipulate the vpnc configuration to execute an arbitrary program with root privileges when th...

usbkill

« usbkill » is an anti-forensic kill-switch that waits for a change on your USB ports and then immediately shuts down your computer. To run: sudo python usbkill.py or sudo python3 usbkill.py Related project; same idea, but implemented as a Linux driver: https://github.com/NateBrune/silk-guardian...

awesome-mba

This repo includes links relevant to Mixed Boolean-Arithmetic MBA obfuscation. PRs are welcome. Note that some resources here are not strictly related to MBA, though all are relevant in some way. Papers Information Hiding in Software with Mixed Boolean-Arithmetic Transforms Obfuscation with Mixed...

CVE-2026-98075

In the Linux kernel, the following vulnerability has been resolved: bpf: reject BPFPSEUDOFUNC reference to the main program fixups.c:jitsubprogs rewrites BPFPSEUDOFUNC loads to contain real function addresses. This function is invoked from bpfjitsubprogs only when env-subprogcnt 1. Meaning that f...

3007Project

3007Project setuid program used to update player's score. Read score file content, search and update score base on given player ID, if no player ID is found, then new ID and score is added to file. Program should not crash unexpectedly and should exit gracefully with errors handled. Check for...

CVE-2020-0022

CVE-2020-0022 Many thanks to Insinuator for their amazing blog post and code! Results All the steps mentioned in the insinuator post have been completed, and more. These are a lot of steps to put in a README.md file, so feel free to check out the post from Insinuator mentioned above. The exploit ...

flare-qdb

FireEye Labs Query-Oriented Debugger flare-qdb is a command-line and scriptable Python-based tool for evaluating and manipulating native program state. It uses Vivisect to set a breakpoint on each queried instruction and executes Python code when hit. flare-qdb frees the analyst to take a nonline...

deobf-Arxan-Deob-C

Arxan-Deob-C Simple C program to quickly deobfuscate windows executables protected with Arxan. It's a little messy at the moment... Be warned : I will be cleaning it up...

Important: Red Hat Security Advisory: sudo security update

An update for sudo is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

CVE-2026-96273

Ghidra before 12.1.4 fails to validate the TYPECOL byte in OptionsDB.createUnregisteredOption, causing an ArrayIndexOutOfBoundsException that leaves domain objects permanently locked. Attackers can craft a malicious program database file that, when imported, causes the application to stall and...