masm32-kernel-programming

masm32-kernel-programming Repo de Dreg para sus propias necesidades Programación de kernel con masm32, drivers, tutoriales, ejemplos y herramientas créditos a Four-F Instrucciones descarga/clona este repo ejecuta masm32v11rinstall.exe haz clic en la imagen de instalación earth instala masm32 en C...

bst

Binary String Toolkit Summary The Binary String Toolkit or BST for short is a rather simple utility to convert binary strings to various formats suitable for inclusions in source codes, such as those used to develop exploits and Proof of Concepts in the security field. Features Convert and dump...

Custom-ROP-Chain

This is the final PoC exploit code as part of the Custom ROP Chain blog post...

GoF5-CVE-2020-5902

GoF5-CVE-2020-5902 Utilidad Open-Source para validar la vulnerabilidad crítica en F5 BIG-IP Traffic Management User Interface TMUI CVE-2020-5902 hecha en Golang. Demo Windows...

Snow Crash

Snow Crash Este proyecto es una introducción a la seguridad informática. Snow Crash te ayudará a descubrir la seguridad en varios subdominios, con un enfoque orientado al desarrollador. Te familiarizarás con varios lenguajes ASM, Perl, Php, etc., desarrollarás cierta lógica para entender programa...

CVE-2023-4220-Exploit

CVE-2023-4220-Exploit LMS Chamilo 1.11.24 CVE-2023-4220 Exploit Exploit usado para CVE-2023-4220 aprovecha el error de programacion del LMS Chamillo el cual nos permite subir un fichero al servidor sin ningun tipo de restriccion. Este Exploit fue escrito para nuestra maquinita Easy permX de HTB,...

cybersecurity-interview-questions

Preguntas de entrevistas de ingeniería Bienvenido al mundo de las preguntas de entrevistas de ingeniería en ciberseguridad: Una colección de increíbles frameworks, librerías, tutoriales de aprendizaje, vídeos, webcasts, recursos técnicos y cosas interesantes sobre entrevistas para Ingeniería de...

ROS-20260921-73-0113

The vulnerability of the Close function in the Go programming language is related to the operation of writing data outside the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures...

The vulnerability in the web interface for managing Tenda AC7 router micro-programming software allows a hacker to inject any HTML or JavaScript code they desire.

The vulnerability in the web interface for managing Tenda AC7 router micro-programming software exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to inject arbitrary HTML or JavaScript code remotely...

[SECURITY] Fedora 43 Update: erlang-26.2.5.21-7.fc43

Erlang is a general-purpose programming language and runtime environment. Erlang has built-in support for concurrency, distribution and fault tolerance. Erlang is used in several large telecommunication systems from Ericsson...

CVE-2026-13107

IBM Business Automation Workflow containers and traditional may use programming model artifacts that are vulnerable to XML Entity Injection attacks by default...

EUVD-2026-78082

IBM Business Automation Workflow containers and traditional may use programming model artifacts that are vulnerable to XML Entity Injection attacks by default...

CVE-2026-13107

IBM Business Automation Workflow (containers and traditional) versions 24.0.0-IF009, 24.0.1-IF008, 25.0.0-IF005, and 26.0.0-IF001 may use programming model artifacts in Advanced custom applications that are vulnerable to XML External Entity (XXE) injection by default (CWE-611). A remote authentic...

CVE-2026-13107 Multiple secuirty vulnerabilies addressed with IBM Business Automation Workflow August 2026

IBM Business Automation Workflow containers and traditional may use programming model artifacts that are vulnerable to XML Entity Injection attacks by default...

CVE-2026-13107 Multiple secuirty vulnerabilies addressed with IBM Business Automation Workflow August 2026

IBM Business Automation Workflow containers and traditional may use programming model artifacts that are vulnerable to XML Entity Injection attacks by default...

Astra Linux – Vulnerability in Golang-1.15

In Go, encoding/xml in versions before 1.15.9 and 1.16.x before 1.16.1 may lead to an infinite loop if a custom TokenReader used for xml.NewTokenDecoder returns EOF midway through an element. This issue can occur in the Decode, DecodeElement, or Skip methods...

Astra Linux – Vulnerability in RustC

In the standard library of Rust before version 1.49.0, the String::retain function has a panic security issue. It allows the creation of a non-UTF-8 Rust string when the provided closure panics. This bug could lead to a memory safety violation if other string APIs assume that UTF-8 encoding is us...

[SECURITY] Fedora 43 Update: elixir-1.19.6-2.fc43

Elixir is a programming language built on top of the Erlang VM. As Erlang, it is a functional language built to support distributed, fault-tolerant, non-stop applications with hot code swapping...

[SECURITY] Fedora 45 Update: elixir-1.20.4-1.fc45

Elixir is a programming language built on top of the Erlang VM. As Erlang, it is a functional language built to support distributed, fault-tolerant, non-stop applications with hot code swapping...

CVE-2026-13107: Improper Restriction of XML External Entity Reference

IBM Business Automation Workflow containers and traditional may use programming model artifacts that are vulnerable to XML Entity Injection attacks by default...