aws_public_ips

awspublicips Table of Contents What's it for Quick start CLI reference Configuration IAM permissions Changelog Contributing Getting in touch What's it for awspublicips is a tool to fetch all public IP addresses both IPv4/IPv6 associated with an AWS account. It can be used as a library and as a CL...

CVE-2026-48282-coldfusion-rds-detection

CVE-2026-48282 — Adobe ColdFusion RDS Validation and Detection Laboratory validation of CVE-2026-48282 in Adobe ColdFusion Remote Development Services RDS, focused on technical evidence, event reconstruction, and defensive detection opportunities. The repository documents a controlled test in whi...

poro

poro Description Scan for publicly accessible assets on your AWS environment Services covered by this tool: AWS ELB API Gateway S3 Buckets RDS Databases EC2 instances Redshift Databases Poro also check if a tag you specify is applied to identified public resources using --tag-key and --tag-value...

RDS_CVE-2019-0708

RDSCVE-2019-0708...

CVE-2026-43494

🛠️ PinTheft — CVE-2026-43494 Local Privilege Escalation in Linux Kernel via RDS + iouring Page Cache Overwrite 📌 Overview PinTheft is a sophisticated local root exploit for CVE-2026-43494 , a reference-counting bug in the Linux kernel's Reliable Datagram Sockets RDS subsystem. By combining a...

CVE-2026-43494-PinTheft-PoC

SLEY — PinTheft PoC CVE-2026-43494 Proof of concept — uid=1000raken → uid=0root after ./sley on WSL2 6.6.87.2-microsoft-standard-WSL2 Single-file proof-of-concept for CVE-2026-43494 PinTheft: a Linux kernel local privilege escalation that chains an RDS zerocopy reference-count bug with iouring...

pintheft

PinTheft — RDS zerocopy double-free LPE tracking site Source for the PinTheft patch-status tracker: a single-page site recording which distributions have shipped a fix for the RDS zerocopy double-free privilege escalation in the Linux kernel. Where the facts live Everything about the bug — CVE ID...

CVE-2026-43494-PinTheft-PoC

SLEY — PinTheft PoC CVE-2026-43494 Proof of concept — uid=1000raken → uid=0root after ./sley on WSL2 6.6.87.2-microsoft-standard-WSL2 Single-file proof-of-concept for CVE-2026-43494 PinTheft: a Linux kernel local privilege escalation that chains an RDS zerocopy reference-count bug with iouring...

CVE-2019-0708

CVE-2019-0708 BlueKeep pre-auth RCE POC on Windows7 This repository demonstrates the remote code execution bug in Windows Remote Desktop Services RDS. Here is a POC code and technical report about BlueKeep vulnerability, which we developed before. NOTE: Our goal is helping analysts to get better...

PinTheft-go

pintheft-go Go port of pintheft - RDS zcopy double-free LPE. Member of the Dirty Frag vulnerability class. !IMPORTANT Arch Linux is one of the most exposed distributions for this vulnerability, as it is among the few where the RDS module can typically be loaded by default. How it works tl;dr The...

CVE-2026-21533_Scanner.py

CVE-2026-21533 Scanner: Windows RDP Local Privilege Escalation Detection Tool This repository contains a detection tool for the CVE-2026-21533 vulnerability, a privilege management flaw in Windows Remote Desktop Services RDS that could allow a local attacker to elevate their privileges to SYSTEM...

CVE-2026-43494-PinTheft-PoC

SLEY — PinTheft PoC CVE-2026-43494 Proof of concept — uid=1000raken → uid=0root after ./sley on WSL2 6.6.87.2-microsoft-standard-WSL2 Single-file proof-of-concept for CVE-2026-43494 PinTheft: a Linux kernel local privilege escalation that chains an RDS zerocopy reference-count bug with iouring...

CVE-2026-99212

A flaw was found in the Linux kernel's Reliable Datagram Sockets RDS subsystem. A local attacker could exploit this flaw to cause a Denial of Service DoS or memory corruption via a use-after-free condition. When route resolution fails during Remote Direct Memory Access RDMA connection...

CVE-2026-99212

In the Linux kernel, the following vulnerability has been resolved: net/rds: don't let the rdmacm destroy an id RDS still owns on route failure rdsrdmacmeventhandlercmn hands the return value of rdmaresolveroute straight back to the rdmacm on RDMACMEVENTADDRRESOLVED. A synchronous failure there -...

CVE-2026-99166

In the Linux kernel, the following vulnerability has been resolved: net: rds: fix uninitialized trans dereference in CM event handler rdsrdmacmeventhandlercmn assigns trans only when the RDMA device is an InfiniBand CA RDMANODEIBCA. On any other device type, e.g. an iWARP RNIC such as siw, trans...

CVE-2026-99212

In the Linux kernel, the following vulnerability has been resolved: net/rds: don't let the rdmacm destroy an id RDS still owns on route failure rdsrdmacmeventhandlercmn hands the return value of rdmaresolveroute straight back to the rdmacm on RDMACMEVENTADDRRESOLVED. A synchronous failure there -...

CVE-2026-99166

In the Linux kernel, the following vulnerability has been resolved: net: rds: fix uninitialized trans dereference in CM event handler rdsrdmacmeventhandlercmn assigns trans only when the RDMA device is an InfiniBand CA RDMANODEIBCA. On any other device type, e.g. an iWARP RNIC such as siw, trans...

CVE-2026-99212 net/rds: don't let the rdma_cm destroy an id RDS still owns on route failure

In the Linux kernel, the following vulnerability has been resolved: net/rds: don't let the rdmacm destroy an id RDS still owns on route failure rdsrdmacmeventhandlercmn hands the return value of rdmaresolveroute straight back to the rdmacm on RDMACMEVENTADDRRESOLVED. A synchronous failure there -...

EUVD-2026-111964

In the Linux kernel, the following vulnerability has been resolved: net/rds: don't let the rdmacm destroy an id RDS still owns on route failure rdsrdmacmeventhandlercmn hands the return value of rdmaresolveroute straight back to the rdmacm on RDMACMEVENTADDRRESOLVED. A synchronous failure there -...

CVE-2026-99212

The Linux kernel contains a vulnerability in the net/rds component where the rdma_cm might destroy an ID that RDS still owns during a route failure. Specifically, in rds_rdma_cm_event_handler_cmn(), a synchronous failure in rdma_resolve_route() (such as -ENOMEM, an unsettable SA query, or a RoCE ...