psc

PortShellCrypter -- PSC This project - as well as its sister project crash - belongs to my anti-censorship tool-set that allows to setup fully working encrypted shells and TCP/UDP forwarding in hostile censoring environments. It is also useful for forensics to dump data from devices via UART or...

dns-rebinding-tool

Inspired by @tavisio This project is meant to be an All-in-one Toolkit to test further DNS rebinding attacks and my take on understanding these kind of attacks. It consists of a web server and pseudo DNS server that only responds to A queries. The root index of the web server allowes to configure...

CVE-2010-0426

CVE-2010-0426 https://www.cvedetails.com/cve/CVE-2010-0426/ sudo 1.6.x before 1.6.9p21 and 1.7.x before 1.7.2p4, when a pseudo-command is enabled, permits a match between the name of the pseudo-command and the name of an executable file in an arbitrary directory, which allows local users to gain...

EUVD-2026-118924

IBM API Connect 10.0.8.0 through 10.0.8.12 could allow a local attacker to obtain sensitive information due to the use of a cryptographically weak pseudo-random number generator...

CVE-2026-17386 Multiple Vulnerabilities in IBM API Connect

IBM API Connect 10.0.8.0 through 10.0.8.12 could allow a remote attacker to gain full administrative control due to the use of a cryptographically weak pseudo-random number generator...

CVE-2026-17386 Multiple Vulnerabilities in IBM API Connect

IBM API Connect 10.0.8.0 through 10.0.8.12 could allow a remote attacker to gain full administrative control due to the use of a cryptographically weak pseudo-random number generator...

EUVD-2026-118923

IBM API Connect 10.0.8.0 through 10.0.8.12 could allow a remote attacker to gain full administrative control due to the use of a cryptographically weak pseudo-random number generator...

CVE-2018-7600

CVE-2018-7600 Proof of Concept Exploit for Drupal CVE-2018-7600 RCE with Pseudo-Shell and proxy support...

pupy

Pupy Simple Installation pip3 install pipx pipx ensurepath pipx install git+https://github.com/n1nj4sec/pupy@nextgen pupysh If you want more detailed informationRefer to the wiki Development Install git clone https://github.com/n1nj4sec/pupy cd pupy git checkout nextgen git submodule init git...

CVE-2024-40110

CVE-2024-40110 - Poultry Farm Management System v1.0 Exploit para Poultry Farm Management System v1.0 Após encontrar um exploit no site Exploit-DB e o mesmo não funcionar, decidi realizar uma revisão no código e aprimorá-lo para adequar a necessidade. Uma vez que funcionou, decidi então, melhorar...

semgrep-rules

semgrep-rules "The attack surface is the vulnerability. Finding a bug there is just a detail." -- Mark Dowd "Some details are more important than others." -- Fedor G. Pikus A collection of my Semgrep rules to facilitate vulnerability research. Blog posts...

kuang_grade_mk11

kuanggrademk11 Pseudo shell for CVE-2013-0156...

Efficient Cross-Domain Multi-Factor Authentication

Secure cross-domain authentication is crucial for protecting information exchange across terminals in different security domains. However, existing cross-domain authentication models suffer from inflexibility, high storage and computational consumption. In response to these problems, a cross-doma...

CVE-2026-38968

ntopng through 6.6 is vulnerable to Predictable Session Identifier which can lead to Session Hijacking. HTTP session identifiers in src/HTTPserver.cpp use weak time-seeded pseudo-randomness during session creation. As a result, fresh authenticated logins can receive deterministic or colliding...

SUSE CVE-2026-98982

In the Linux kernel, the following vulnerability has been resolved: namespace: don't let a pseudo dentry become the root of a mount dallocpseudo hands out dentries for pipes, sockets and other files that are never anyone's child or parent. They carry DCACHENORCU and dentryfree frees them right aw...

CVE-2026-98982

In the Linux kernel, the following vulnerability has been resolved: namespace: don't let a pseudo dentry become the root of a mount dallocpseudo hands out dentries for pipes, sockets and other files that are never anyone's child or parent. They carry DCACHENORCU and dentryfree frees them right aw...

PT-2026-121959

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the namespace handling where a pseudo dentry can become the root of a mount. The function d alloc pseudo provides dentries for pipes, sockets, and other files that are...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 6.9. It arises when binding mount/proc/self/fd/ allows pseudo-dentries to become the mount root. During mount traversal, before checking mountlock, the code reads the dseq and dflags of released dentry, potentially leading to use-after-free...

CVE-2026-19947

The device multiplexer pseudo-driver in drivers/misc/devmux/devmux.c exposes two system calls, devmuxselectget and devmuxselectset. When CONFIGUSERSPACE is enabled, their user-mode verifiers zvrfydevmuxselectget and zvrfydevmuxselectset forwarded directly to the kernel implementations without...

Astra Linux – vulnerability in linux-5.10, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: NFSv4.2 fixes issues related to nfs42sscopen A destination server performing a COPY operation should not accept the passed filehandle unless it is a valid filehandle. If allocfilepseudo fails, we must decrement a reference on the...