usbkill

« usbkill » is an anti-forensic kill-switch that waits for a change on your USB ports and then immediately shuts down your computer. To run: sudo python usbkill.py or sudo python3 usbkill.py Related project; same idea, but implemented as a Linux driver: https://github.com/NateBrune/silk-guardian...

CVE-2024-10511

CVE-2024-10511 CWE-287: Improper Authentication Summary Schneider Electric PowerChute Serial Shutdown product is a UPS management software enabling graceful system shutdown and energy management capabilities for desktop, servers and workstations PowerChute Serial Shutdown v1.2.0.301 and prior...

mtkclient

Language: 🇺🇸 🇨🇳 MTKClient Just some mtk tool for exploitation, reading/writing flash and doing crazy stuff. For windows, you need to install the stock mtk port and the usbdk driver see instructions below. For linux, a patched kernel is only needed when using old kamakiri see Setup folder except for...

CVE-2026-26235-JUNG-Smart-Visu-Server-Unauthenticated-Reboot-Shutdown

👤 Author Mohammed Idrees Banyamer 📍 Country: Jordan 📸 Instagram: @banyamersecurity Proof-of-Concept exploit for CVE-2026-26235 - Unauthenticated Denial of Service via missing authentication in JUNG Smart Visu Server ≤ 1.1.1050. 🚨 Vulnerability Description CVE-2026-26235 is an unauthenticated...

EUVD-2026-125087

FrankenPHP before 1.13.4 contains a use-after-free vulnerability that leaves a dangling pointer to a freed environment table when putenv is called during request shutdown. Attackers triggering putenv in shutdown functions, destructors, or session handlers can crash the process on the next getenv...

CVE-2026-128015

FrankenPHP versions prior to 1.13.4 are vulnerable to a use-after-free issue (CWE-416) occurring when putenv() is called during request shutdown. This operation leaves a dangling pointer to a freed environment table. An attacker triggering putenv() via shutdown functions, destructors, or session ...

CVE-2026-123865

An unauthenticated HTTP/2 client can permanently leak Node.js server memory and file descriptors. If a peer triggers a protocol error, for example an oversized frame header, while the session is already shutting down, nghttp2 tears the session down internally but Node.js never notices, leaving a...

CVE-2026-123865 Node.js is vulnerable to an HTTP/2 memory and file-descriptor leak via a protocol error during session shutdown

An unauthenticated HTTP/2 client can permanently leak Node.js server memory and file descriptors. If a peer triggers a protocol error, for example an oversized frame header, while the session is already shutting down, nghttp2 tears the session down internally but Node.js never notices, leaving a...

CVE-2026-123865

Node.js versions 22.x, 24.x, and 26.x are vulnerable to a memory and file-descriptor leak via an HTTP/2 protocol error during session shutdown. When a peer triggers a protocol error (e.g., an oversized frame header) while the session is shutting down, the nghttp2 library terminates the session in...

CVE-2024-3094

CVE-2024-3094 Basic POC to test CVE-2024-3094 vulnerability inside K8s cluster ❗ DISCLAIMER ❗ USE ONLY FOR EDUCATIONAL PURPOSES THE AUTHOR IS NOT RESPONSIBLE FOR ANY DAMAGE CAUSED BY THE USE OF THIS SOFTWARE Description We will deploy a vulnerable pod and exploit it to execute commands inside tha...

CVE-2021-43471

CVE-2021-43471 Denial of service vulnerability caused by unauthorized access to Canon printers Affect product: LBP223 Time: 2021.11.3 The System Manager Mode login does not require an account password or PIN. An attacker can remotely shut down the device after entering the background, creating a...

Dead.Letter-CVE-2026-45185

CVE-2026-45185 — "Dead.Letter" Exim Vulnerability Scanner A shell script for detecting whether a Linux system is vulnerable to CVE-2026-45185, a use-after-free in the Exim mail transfer agent that can lead to remote code execution. Designed for use in CI/CD pipelines, configuration management...

freerdp: freerdp: Denial of Service via infinite loop on truncated WebSocket frame

A flaw was found in FreeRDP. A malicious Remote Desktop RD Gateway or network attacker can cause a Denial of Service DoS by sending a truncated WebSocket data frame followed by a Transport Layer Security TLS connection shutdown. Due to improper handling of the incomplete payload when the connecti...

POC_CVE-2026-45185

CVE-2026-45185 Nuclei Template Validation Lab This repository is not a general-purpose exploit PoC repository. It is a local validation lab for reproducing and reviewing the behavior of a CVE-2026-45185 template intended for contribution to projectdiscovery/nuclei-templates. The nuclei code...

Node.js < 22.23.5, < 24.22.3, < 26.13.1 - Improper Resource Shutdown in node:http2 After a Protocol Error During Session Shutdown leading to Permanent Memory and File Descriptor Leak

Improper Resource Shutdown in node:http2 After a Protocol Error During Session Shutdown leading to Permanent Memory and File Descriptor Leak vulnerability discovered by ? in WordPress npm Node.js versions 26.13.1...

CVE-2026-123179

An insecure default initialization of resource in the Tomcat shutdown listener of Ivanti Sentry before versions 11.0, 10.8.3, and 10.7.4 allows a local authenticated attacker to cause a denial of service...

CVE-2026-123179

Ivanti Ivanti Sentry is vulnerable to a denial of service (DoS) via an insecure default initialization of a resource in the Tomcat shutdown listener . This flaw affects versions before 10.7.4 and 10.8.3 . A local authenticated attacker can exploit this to cause a DoS. Remediation is available in ...

CVE-2026-123179

An insecure default initialization of resource in the Tomcat shutdown listener of Ivanti Sentry before versions 11.0, 10.8.3, and 10.7.4 allows a local authenticated attacker to cause a denial of service...

EUVD-2026-121269

An insecure default initialization of resource in the Tomcat shutdown listener of Ivanti Sentry before versions 11.0, 10.8.3, and 10.7.4 allows a local authenticated attacker to cause a denial of service...

EUVD-2026-120861

An unauthenticated remote attacker can perform a CSRF attack on a logged in backend user allowing for execution of multiple critical system actions. This could allow an attacker to shutdown the server or restore an uploaded backup. This can result in a loss of integrity and availability...