CVE-2026-81018

In the Linux kernel, the following vulnerability has been resolved: platform/x86: think-lmi: Free system certificate signatures Multi-certificate support also allows the system authentication object to store -signature and -savesignature, which leak when the driver is removed. Free the signatures...

CVE-2026-81018 platform/x86: think-lmi: Free system certificate signatures

In the Linux kernel, the following vulnerability has been resolved: platform/x86: think-lmi: Free system certificate signatures Multi-certificate support also allows the system authentication object to store -signature and -savesignature, which leak when the driver is removed. Free the signatures...

CVE-2026-80974

CVE-2026-80974 affects the Linux kernel in the mfd sm501 driver. The memory allocated for struct sm501_devdata in sm501_pci_probe() and sm501_plat_probe() is not freed by the corresponding remove functions, resulting in a memory leak when the device is removed. The fix adds a kfree() call in sm50...

CVE-2026-80974 mfd: sm501: Fix potential memory leaks during remove

In the Linux kernel, the following vulnerability has been resolved: mfd: sm501: Fix potential memory leaks during remove The memory allocated for struct sm501devdata in sm501pciprobe and sm501platprobe is not freed by the corresponding remove functions sm501pciremove and sm501platremove. Fix that...

CVE-2026-80974

In the Linux kernel, the following vulnerability has been resolved: mfd: sm501: Fix potential memory leaks during remove The memory allocated for struct sm501devdata in sm501pciprobe and sm501platprobe is not freed by the corresponding remove functions sm501pciremove and sm501platremove. Fix that...

CVE-2026-80974 mfd: sm501: Fix potential memory leaks during remove

In the Linux kernel, the following vulnerability has been resolved: mfd: sm501: Fix potential memory leaks during remove The memory allocated for struct sm501devdata in sm501pciprobe and sm501platprobe is not freed by the corresponding remove functions sm501pciremove and sm501platremove. Fix that...

CVE-2026-80932

In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: flush works in dependency order virtiovsockremove stops the virtqueues and then flushes each work item before freeing the enclosing virtiovsock. The current order does not account for dependencies between those item...

CVE-2026-80932

A use-after-free vulnerability in the Linux kernel's vsock/virtio component is triggered during virtio_vsock_remove(). The function flushes work items before freeing the virtio_vsock object, but the flush order ignores dependencies: send_pkt_work can queue rx_work after the remove path has alread...

NimBlackout

NimBlackout Nota : Este proyecto es solo con fines educativos. El uso de este código para cualquier actividad maliciosa está estrictamente prohibido. No soy responsable de ningún uso indebido de este software. NimBlackout es una adaptación del proyecto @Blackout originalmente desarrollado en C++...

Geogramint

Geogramint - Telegram 的 OSINT 地理定位工具 终结：2024年9月6日 Telegram 创始人兼首席执行官 Pavel Durov 宣布停止使用“附近的人”功能。该功能已有一周无法使用。 此功能的移除意味着 Geogramint 及其他使用该 API 的 OSINT 工具不再可用。自即日起，此 GitHub 仓库将被归档。 Geogramint 的流行始于这篇 Projet FOX 文章，其中展示了该工具的实际能力。它还在 2023 年法国里尔国际网络安全论坛 FIC 上展出，进而促成了这篇 Projet FOX 文章。 Geogramint...

katoolin3

katoolin3 Katoolin3 brings all programs available in Kali Linux to Debian and Ubuntu. Description This program is a port of katoolin from LionSec to python3. Katoolin3 offers several improvements over katoolin: Up to date packages The old katoolin uses an outdated package list. Katoolin3 always...

Mangle

此存储库已归档 要查看最新版本的 Mangle 或提交问题，请参考 https://github.com/Tylous/Mangle。 Mangle 作者：Tyl0us 在 Source Zero Con 2022 上展示 Mangle 是一款用于操作已编译可执行文件（.exe 或 DLL）的工具。它可以移除基于已知入侵指标（IoC）的字符串并用随机字符替换，通过增加文件大小来规避 EDR 检测，以及从合法文件中克隆代码签名证书。通过这种方式，Mangle 帮助加载器规避磁盘和内存扫描器。 贡献 Mangle 使用 Golang 开发。 安装 首先，克隆仓库。在编译 Mangle...

haxx

haxx Untethered + Unsandboxed code execution haxx as root on iOS 14 - iOS 14.8.1. Based on CoreTrustDemo, also please note that certificates are not copyrightable. Usage Note: requires macOS + existing jailbreak Get up and running This method works on 14.0-14.6. 14.7 14.7b1-14.8.1 requires launch...

unhook-bof

Este es un Beacon Object File para refrescar los DLL y eliminar sus hooks. El código proviene de la investigación de Cylance "Universal Unhooking": https://blogs.blackberry.com/en/2017/02/universal-unhooking-blinding-security-software Para usarlo: Cargue unhook.cna en Cobalt Strike mediante Cobal...

PT-2026-90148

In the Linux kernel, the following vulnerability has been resolved: platform/x86: think-lmi: Free system certificate signatures Multi-certificate support also allows the system authentication object to store -signature and -save signature, which leak when the driver is removed. Free the signature...

Linux Distros Unpatched Vulnerability : CVE-2026-88031

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB Go Driver can cause a caller-supplied structured file...

BadRentdrv2

BadRentdrv2 一个我利用的易受攻击驱动程序（BYOVD），能够终止市场上多种EDR和杀毒软件，使其失效，同时支持x32和x64架构。 它是如何工作的？ 编译时针对传统的x32架构，以获得更广的攻击范围。 在以管理员身份运行的命令提示符中，使用以下命令行： root@kitploit: BadRentdrv2.exe 这将毫不费力地终止受保护的进程。 注意：在这个概念验证中，我只编写了通过PID终止进程的功能。它还支持其他方法，例如按进程名称终止，以及按父进程名称终止进程及其子进程。只需稍作修改即可实现。请阅读概念验证代码以了解详情。 对市场上最知名的安全系统的测试： 360杀毒...

CVE-2021-44228

Rol de Ansible para Mitigación de Log4Shell CVE-2021-44228 Este rol de Ansible despliega un script basado en Python para mitigar programáticamente la vulnerabilidad Log4Shell CVE-2021-44228 eliminando la clase vulnerable JndiLookup de los archivos JAR de Log4j afectados. Está diseñado para...

CVE-2026-88036

Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB C Driver can cause a caller-supplied structured file identifier to be interpreted as a query condition rather than as a literal identifier. An authenticated user who can influence the identifier...

UBUNTU-CVE-2026-88036

Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB C Driver can cause a caller-supplied structured file identifier to be interpreted as a query condition rather than as a literal identifier. An authenticated user who can influence the identifier...