CVE-2026-33263

This vulnerability affects the submission-login process in OX Dovecot. When the mail_max_userip_connections limit (default 10) is reached, an epoll() panic triggered by file descriptor handling issues can crash the process. In high-security mode (default for community releases), only the new conn...

WAREED-DNS-C2

Wareed DNS C2 WAREED é um Command and Control C2 que utiliza o protocolo DNS para comunicações seguras entre o servidor e o alvo. Projetado para minimizar a comunicação e limitar a troca de dados, destina-se a ser um C2 de primeiro estágio para persistir em máquinas que não têm acesso à internet...

purpleteam-orchestrator

orchestratore purpleteam Componente orchestratore di purpleteam - Attualmente in alpha Clona questo repository. cd nella directory root del repository ed esegui: root@kitploit: npm install Configurazione...

purpleteam-s2-containers

Contenitori Stage Two di purpleteam Contenitori Stage Two di purpleteam Questi contenitori vengono avviati dinamicamente in base all'input di configurazione Build User Job fornito alla CLI di purpleteam, in particolare al numero di testSession che definisci. Le seguenti configurazioni sono...

purpleteam

purpleteam CLI CLI-Komponente von purpleteam - Derzeit in Alpha Installation Einfachste npm install -g purpleteam...

WEASEL

WEASEL: Ein leises DNS-Backdoor WEASEL ist ein kleiner In-Memory-Implant, der Python 3 ohne Abhängigkeiten nutzt. Der Beacon-Client sendet eine kleine Menge identifizierender Informationen über seinen Host an eine DNS-Zone, die Sie kontrollieren. Der WEASEL-Server kann Clients beauftragen,...

BlackLotus-analysis-stage2-bootkit-rootkit-stage

BlackLotus-analysis-stage2-bootkit-rootkit-stage Analisi del bootkit-rootkit stage 2 di BlackLotus Prima di addentrarci in questa merda divinacredimi, questa è una merda divina perché nessuno può farlo senza la volontà di DIOalmeno questa è la mia opinione ,ecco l'hash del file bootkit Prima di...

shim

shim, un bootloader UEFI di primo stadio shim è un'applicazione EFI semplice che, quando viene eseguita, tenta di aprire ed eseguire un'altra applicazione. Inizialmente proverà a farlo tramite le chiamate EFI standard LoadImage e StartImage. Se queste falliscono ad esempio perché Secure Boot è...

CVE-2022-21894-Payload-New

Questo è un semplice payload di esempio per CVE-2022-21894 che dimostra come un attaccante potrebbe mappare un payload di secondo stadio per poter chiamare i servizi EFI. Un'analisi di questa vulnerabilità può essere consultata qui: https://github.com/Wack0/CVE-2022-21894. Il codice in questo...

CVE-2026-34621_PDF_SAMPLE

Technische Analyse einer mehrstufigen Adobe-Acrobat-PDF-JavaScript-Probe Überblick Dieses Repository veröffentlicht eine codezentrierte Reverse-Engineering-Dokumentation zu einer bösartigen PDF-Probe, die gestufte Adobe-Acrobat-JavaScripts einbettet. Die analysierte Probe verwendet ein versteckte...

zap-api-rust

ZAP Rust API Die Rust-Implementierung für den Zugriff auf die ZAP API. Weitere Informationen über ZAP finden Sie im Haupt- ZAP-Projekt. Dieses Projekt befindet sich in einem sehr frühen Stadium und sollte nicht in der Produktion verwendet werden! Hilfe erhalten Für Hilfe zur Verwendung der ZAP AP...

Credential-Hunting

CredsHunter credshunter एक केवल-पढ़ने योग्य क्रेडेंशियल खोजक है जो अधिकृत पोस्ट-एक्सप्लॉइटेशन के लिए है। यह एक बार होस्ट को स्कैन करता है और उन रहस्यों को सामने लाता है जिन्हें आप वास्तव में पुनः उपयोग कर सकते हैं — पासवर्ड, कुंजियाँ, हैश और क्रेडेंशियल फ़ाइलें — जबकि क्लाउड / SaaS टोकन पर चुप रह...

DesckVB-RAT

DesckVB RAT v2.9 — Modularer .NET RAT, Mehrstufige Auslieferung & Plugin-Ökosystem Toolchain-Verknüpfung zu „Pjoao1578“ Autor: ShadowOpCode X/Twitter: https://x.com/ShadowOpCode Dieses Repository begleitet einen vollständigen technischen Bericht, der ein aktives Malware-Ökosystem dokumentiert, da...

pysqli

PySQLi - Python SQL injection framework 1. Overview PySQLi is a python framework designed to exploit complex SQL injection vulnerabilities. It provides dedicated bricks that can be used to build advanced exploits or easily extended/improved to fit the case. 2. Why another SQLi framework ? Simple...

Tracking PavinLoader across ClickFix and fake download campaigns

In our previous analysis of the malicious RenPy campaigns, we identified a multi-stage loader deployed as part of the infection chain. Further threat hunting has since shown that the same loader, which we track as PavinLoader , is being used across several different campaigns, including ClickFix...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: st: fixed the issue where the reference count of the platform device was checked during the error path. The probe function never performs any platform device allocation. Therefore, the error path “undoplatformdevalloc”...

CVE-2026-17093

IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, FW950.00 through FW950.H2, OP940.00 through OP940.a1 Power9, and OP940.00 - OP940.81 Power HMC is affected by a vulnerability in host firmware configuration parsing. An attacker with service-level acce...

CVE-2026-17093 Power System Buffer Overflow

IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, FW950.00 through FW950.H2, OP940.00 through OP940.a1 Power9, and OP940.00 - OP940.81 Power HMC is affected by a vulnerability in host firmware configuration parsing. An attacker with service-level acce...

EUVD-2026-62633

IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, FW950.00 through FW950.H2, OP940.00 through OP940.a1 Power9, and OP940.00 - OP940.81 Power HMC is affected by a vulnerability in host firmware configuration parsing. An attacker with service-level acce...

CVE-2026-17093 Power System Buffer Overflow

IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, FW950.00 through FW950.H2, OP940.00 through OP940.a1 Power9, and OP940.00 - OP940.81 Power HMC is affected by a vulnerability in host firmware configuration parsing. An attacker with service-level acce...