CVE-2026-80974

CVE-2026-80974 affects the Linux kernel in the mfd sm501 driver. The memory allocated for struct sm501_devdata in sm501_pci_probe() and sm501_plat_probe() is not freed by the corresponding remove functions, resulting in a memory leak when the device is removed. The fix adds a kfree() call in sm50...

CVE-2026-80974 mfd: sm501: Fix potential memory leaks during remove

In the Linux kernel, the following vulnerability has been resolved: mfd: sm501: Fix potential memory leaks during remove The memory allocated for struct sm501devdata in sm501pciprobe and sm501platprobe is not freed by the corresponding remove functions sm501pciremove and sm501platremove. Fix that...

CVE-2026-80974 mfd: sm501: Fix potential memory leaks during remove

In the Linux kernel, the following vulnerability has been resolved: mfd: sm501: Fix potential memory leaks during remove The memory allocated for struct sm501devdata in sm501pciprobe and sm501platprobe is not freed by the corresponding remove functions sm501pciremove and sm501platremove. Fix that...

CVE-2026-80932

In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: flush works in dependency order virtiovsockremove stops the virtqueues and then flushes each work item before freeing the enclosing virtiovsock. The current order does not account for dependencies between those item...

CVE-2026-80932

A use-after-free vulnerability in the Linux kernel's vsock/virtio component is triggered during virtio_vsock_remove(). The function flushes work items before freeing the virtio_vsock object, but the flush order ignores dependencies: send_pkt_work can queue rx_work after the remove path has alread...

NimBlackout

NimBlackout Nota : Este proyecto es solo con fines educativos. El uso de este código para cualquier actividad maliciosa está estrictamente prohibido. No soy responsable de ningún uso indebido de este software. NimBlackout es una adaptación del proyecto @Blackout originalmente desarrollado en C++...

Geogramint

Geogramint - Telegram 的 OSINT 地理定位工具 终结：2024年9月6日 Telegram 创始人兼首席执行官 Pavel Durov 宣布停止使用“附近的人”功能。该功能已有一周无法使用。 此功能的移除意味着 Geogramint 及其他使用该 API 的 OSINT 工具不再可用。自即日起，此 GitHub 仓库将被归档。 Geogramint 的流行始于这篇 Projet FOX 文章，其中展示了该工具的实际能力。它还在 2023 年法国里尔国际网络安全论坛 FIC 上展出，进而促成了这篇 Projet FOX 文章。 Geogramint...

katoolin3

katoolin3 Katoolin3 brings all programs available in Kali Linux to Debian and Ubuntu. Description This program is a port of katoolin from LionSec to python3. Katoolin3 offers several improvements over katoolin: Up to date packages The old katoolin uses an outdated package list. Katoolin3 always...

Mangle

此存储库已归档 要查看最新版本的 Mangle 或提交问题，请参考 https://github.com/Tylous/Mangle。 Mangle 作者：Tyl0us 在 Source Zero Con 2022 上展示 Mangle 是一款用于操作已编译可执行文件（.exe 或 DLL）的工具。它可以移除基于已知入侵指标（IoC）的字符串并用随机字符替换，通过增加文件大小来规避 EDR 检测，以及从合法文件中克隆代码签名证书。通过这种方式，Mangle 帮助加载器规避磁盘和内存扫描器。 贡献 Mangle 使用 Golang 开发。 安装 首先，克隆仓库。在编译 Mangle...

haxx

haxx Untethered + Unsandboxed code execution haxx as root on iOS 14 - iOS 14.8.1. Based on CoreTrustDemo, also please note that certificates are not copyrightable. Usage Note: requires macOS + existing jailbreak Get up and running This method works on 14.0-14.6. 14.7 14.7b1-14.8.1 requires launch...

unhook-bof

Este es un Beacon Object File para refrescar los DLL y eliminar sus hooks. El código proviene de la investigación de Cylance "Universal Unhooking": https://blogs.blackberry.com/en/2017/02/universal-unhooking-blinding-security-software Para usarlo: Cargue unhook.cna en Cobalt Strike mediante Cobal...

PT-2026-90148

In the Linux kernel, the following vulnerability has been resolved: platform/x86: think-lmi: Free system certificate signatures Multi-certificate support also allows the system authentication object to store -signature and -save signature, which leak when the driver is removed. Free the signature...

Linux Distros Unpatched Vulnerability : CVE-2026-88031

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB Go Driver can cause a caller-supplied structured file...

BadRentdrv2

BadRentdrv2 Un driver vulnerable explotado por mí BYOVD que es capaz de terminar varios EDRs y software antivirus en el mercado, volviéndolos ineficaces, funcionando tanto para x32 como para x64. ¿Cómo funciona? Compile apuntando a la arquitectura x32 heredada para un rango de ataque más amplio. ...

CVE-2021-44228

Log4Shell CVE-2021-44228 Mitigation Ansible Role This Ansible role deploys a Python-based script to programmatically mitigate the Log4Shell vulnerability CVE-2021-44228 by removing the vulnerable JndiLookup class from affected Log4j JAR files. It is designed to be run via Ansible, but you can als...

CVE-2026-88036

Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB C Driver can cause a caller-supplied structured file identifier to be interpreted as a query condition rather than as a literal identifier. An authenticated user who can influence the identifier...

CVE-2026-88031

Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB Go Driver can cause a caller-supplied structured file identifier to be interpreted as a query condition rather than as a literal identifier. An authenticated user who can influence the identifie...

EUVD-2026-75667

Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB Go Driver can cause a caller-supplied structured file identifier to be interpreted as a query condition rather than as a literal identifier. An authenticated user who can influence the identifie...

CVE-2026-88873 WWBN AVideo Cross-Site Request Forgery via logArchive.json.php

WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a cross-site request forgery vulnerability in view/logArchive.json.php that allows unauthenticated attackers to archive application logs by making GET requests without CSRF token validation. Attackers can craft malicious...

EUVD-2026-75423

WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a cross-site request forgery vulnerability in view/logArchive.json.php that allows unauthenticated attackers to archive application logs by making GET requests without CSRF token validation. Attackers can craft malicious...