CVE-2018-8639-exp

CVE-2018-8639-exp platform: windows 2008 and windows 2008 R2...

MS12-020-CVE-2012-0002

https://github.com/xiaoxiaoleo/windows-kernel-exploits/blob/2892a653297ccbbab8b2690cf7c9e302d7ffe03f/MS12-020 https://max.book118.com/html/2016/0314/37644373.shtm https://github.com/JYanger/MS12-020-Check/blob/master/ms12-020one.py https://blog.csdn.net/qq73252299/article/details/133156450 صWindo...

R2Socks

R2Socks SOCKS5 proxy tunneled through Cloudflare R2 buckets. Client App ◄─SOCKS5─► Proxy ◄─── R2 Bucket ───► Agent ◄─TCP─► Target The proxy runs a local SOCKS5 server on the operator's machine. Every CONNECT request is serialized as binary packets and stored as R2 objects. The agent polls the sam...

CVE-2016-7255

CVE-2016-7255 Used to exploit cve-2016-7255 in 64 bit versions of Windows, tested on Workstation 7 SP1, 8.1, 10 prior to build 1607, and Server 2012 R2. To use cve-2016-7255 cve-2016-7255.exe 7 - Windows 7 SP1 cve-2016-7255.exe 81 - Windows 8.1 cve-2016-7255.exe 10 - Windows 10 prior to build 160...

October 13, 2026—KB5126836 (Monthly Rollup)

October 13, 2026—KB5126836 Monthly Rollup Applies To Windows Server 2012 R2 ESU Important Windows Server 2012 R2 reached the end of support on October 10, 2023. The Extended Security Updates ESU program for Windows Server 2012 R2 ended on October 13, 2026. This update is the final security update...

November 06, 2026—KB5135582 (Monthly Rollup) Out-of-band

November 06, 2026—KB5135582 Monthly Rollup Out-of-band Applies To Windows Server 2012 R2 ESU Important This update is being released as an exception for devices that are past Year 3 of the Extended Security Updates ESU program. It is provided to deliver a quality improvement. Windows Server 2012 ...

CVE-2026-57565

Readest is a modern, feature-rich ebook reader designed for seamless cross-platform access and an intuitive reading experience. Prior to 0.11.10, the apps/readest-app/src/pages/api/storage/upload.ts route constructed an object key from the authenticated user's identifier and a client-controlled...

CVE-2026-57565 Readest: Cross-tenant object write via unsanitized fileName in /api/storage/upload (object-key path traversal)

Readest is a modern, feature-rich ebook reader designed for seamless cross-platform access and an intuitive reading experience. Prior to 0.11.10, the apps/readest-app/src/pages/api/storage/upload.ts route constructed an object key from the authenticated user's identifier and a client-controlled...

CVE-2026-57565 Readest: Cross-tenant object write via unsanitized fileName in /api/storage/upload (object-key path traversal)

Readest is a modern, feature-rich ebook reader designed for seamless cross-platform access and an intuitive reading experience. Prior to 0.11.10, the apps/readest-app/src/pages/api/storage/upload.ts route constructed an object key from the authenticated user's identifier and a client-controlled...

CVE-2026-57565

The Readest ebook reader (versions prior to 0.11.10 ) is vulnerable to a path traversal flaw in the apps/readest-app/src/pages/api/storage/upload.ts route. The application constructs an object key using a client-controlled fileName without rejecting path separators. Because the R2 backend (apps/r...

PT-2026-137204

Name of the Vulnerable Software and Affected Versions Readest versions prior to 0.11.10 Description An issue exists where the application constructs an object key using the authenticated user identifier and a client-controlled fileName without properly rejecting path separators or parent-director...

Malware in @s4yhiitestpoc/r2-control

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in @s4yhiitestpoc/r2-echo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 95d0e909637faadf9360929eb9b01bfac02f0a4bdf7bff852267657d09c5b459 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in @s4yhiitestpoc/r2-dns

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in @s4yhiitestpoc/r2-dns (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d0c56aeb91a20a757ea94500434819d64c0ab2a067c00ccf7dc325e23abdb46a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-18305 Malicious code in @s4yhiitestpoc/r2-https-dualuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 06d8987a5408de1fd879005877185e31a5a0931162318ade2fc1a4e6ce6592c4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in @s4yhiitestpoc/r2-echo

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2026-18302 Malicious code in @s4yhiitestpoc/r2-control (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2818910f030224e598ac988354614e0febeaed195238b06fcefb80d1932dc965 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @s4yhiitestpoc/r2-control (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2818910f030224e598ac988354614e0febeaed195238b06fcefb80d1932dc965 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @s4yhiitestpoc/r2-https-dualuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 06d8987a5408de1fd879005877185e31a5a0931162318ade2fc1a4e6ce6592c4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...