writeup_split

Resumen CVE-2024-0684 Una vulnerabilidad en el programa split de GNU coreutils permite un desbordamiento del búfer del heap con datos controlados por el usuario. Fue introducida en 40bf1591bb4362fa91e501bcec7c2029c5f65a43 el 2023-03-04. Se ha publicado una corrección con...

nextdns

NextDNS CLI Client NextDNS CLI es una herramienta de línea de comandos que te permite usar el servicio DNS-over-HTTPS DoH de NextDNS con capacidades avanzadas. Aunque las funciones más avanzadas solo funcionarán con NextDNS, este programa puede funcionar como cliente para cualquier proveedor de D...

mhf

Mobile Helper Framework is a tool that automates the process of identifying the framework/technology used to create a mobile application. Additionally, it assists in finding sensitive information or provides suggestions for working with the identified platform. How work? The tool searches for fil...

CVE-2026-57827

CVE-2026-57827 — Componente RSFiles! de Joomla: RCE por subida de archivos no autenticada Bypass de subida por controlador dividido → Tarea de escritura directa → /downloads/shell.php → RCE Resumen CVE-2026-57827 es una vulnerabilidad de subida arbitraria de archivos no autenticada de severidad...

apk.sh

🕹️ apk.sh apk.sh is a Bash script that makes reverse engineering Android apps easier, automating some repetitive tasks like pulling, decoding, rebuilding and patching an APK. Features apk.sh basically uses apktool to disassemble, decode and rebuild resources and some bash to automate the frida...

decoder-plus-plus

Decoder++ Decoder++ is an extensible application designed for penetration testers, software developers, and anyone in between looking to effortlessly decode and encode data across various formats. It includes a wide range of preinstalled scripts and codecs, smart decoding and format identificatio...

PichichiH0ll0wer

PichichiH0ll0wer PichichiH0ll0wer Acerca de Características Métodos de inyección Instalación Uso Créditos Acerca de --== Cargador de hollowing de procesos escrito en Nim solo para PEs ==-- Construí PichichiH0ll0wer para aprender y contribuir, claro, pero también porque estoy bastante cansado de...

CVE-2026-83991-writeup-and-poc

The File Said No. Cloud Files Said Supersede. CVE-2026-83991 is a Windows Cloud Files tampering vulnerability whose published affected range begins with Windows 10 version 1809, almost eight years before the September 2026 fix. I asked Windows to open a file for writing. It answered...

CVE-2026-57827

CVE-2026-57827 — RSFiles! Joomla Component Unauthenticated File Upload RCE Split-Controller Upload Bypass → Direct Write Task → /downloads/shell.php → RCE Overview CVE-2026-57827 is a critical-severity CVSS 9.8 unauthenticated arbitrary file upload vulnerability in RSFiles! comrsfiles, a widely...

Statement

Declaración Con respecto a CVE-2021-36593 y CVE-2021-36594, me gustaría mencionar que solo había enviado una solicitud para dividir el CVE-ID. hace 2 años Los CVE-ID se publicarán en los próximos meses, ya que actualmente no hay una actualización disponible. Hemos pospuesto el proceso de...

PT-2026-106554

In the Linux kernel, the following vulnerability has been resolved: mm/shrinker: fix bogus set shrinker bit with cgroup.memory=nokmem With cgroup.memory=nokmem, shrinker memcg alloc bails out early and never allocates an id, so shrinker-id keeps the 0 it got from the kzalloc in shrinker alloc. li...

MiniPlasma-Runner

MiniPlasma-Runner Versión modificada de Nightmare-Eclipse/MiniPlasma CVE-2020-17103 adaptada para uso de C2. El PoC original se ejecuta solo desde disco. Esta versión se ejecuta completamente desde memoria mediante execute-assembly, con un enfoque de binario dividido para evitar la detección...

CVE-2026-9997-VPN-Split-Tunneling-Bypass-via-DHCP-Option-Injection

CVE-2026-9997 – Evasión del túnel dividido de VPN mediante inyección de opciones DHCP Código del programa servidor DHCP simulado en Python + cliente !/usr/bin/env python3 roguedhcpserver.py - Injects a static route to bypass VPN split tunnel import socket, struct, threading def...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: net: stmmac: dwc-qos: Disable split header for Tegra194 There is a long-standing issue with the Synopsys DWC Ethernet driver for Tegra194, where random system crashes have been observed 0. The problem occurs when the split header...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: x86/EFI: The deferral of freeing boot services memory The efifreebootservices function frees the memory occupied by EFIBOOTSERVICESCODE and EFIBOOTSERVICESDATA using memblockfreelate. There are two issues with this approach:...

JASPER: Special Session on Joint Reliability and Security Assessment of SPlit Computing for Edge Robustness

Split Computing SC enables efficient deployment of Deep Neural Networks DNNs by partitioning inference between edge devices and cloud servers. However, intermediate feature representations are simultaneously exposed to hardware faults and adversarial attacks, which are traditionally evaluated...

Split

Descripción Divide and Conquer es un algoritmo que se aplica comúnmente en programación para resolver un problema complejo dividiéndolo en muchos subproblemas más simples. Podemos aplicar este enfoque a la seguridad ofensiva con un objetivo diferente: confundir a los EDR para que pierdan el rastr...

MassScanning-CVE-2025-55182

Escáner Continuo para VPS Una configuración ligera de orquestador y escáner trabajador para ejecutar escaneos grandes/continuos a través de archivos de entrada divididos. Este repositorio contiene scripts de orquestación, una imagen de trabajador basada en Docker y scripts auxiliares para ejecuta...

CVE-2026-104435

Zebra zebrad 4.4.0 and zebra-script 6.0.0 fail to enforce a ZIP-244 consensus rule, accepting V5 transparent inputs signed with SIGHASHSINGLE that lack a corresponding output. Attackers can broadcast crafted V5 transactions with more inputs than outputs that Zebra accepts but zcashd rejects,...

CVE-2026-104435

Zebra zebrad 4.4.0 and zebra-script 6.0.0 are vulnerable to a consensus rule enforcement failure. The software fails to correctly apply the ZIP-244 consensus rule , specifically by accepting V5 transparent inputs signed with SIGHASH_SINGLE that do not have a corresponding output. This flaw allows...