moneta

/ \ / | / \ / \ / \ / / \ \ / Y | \ /| | / | //| | / | / / / / / Moneta v1.0 | Forrest Orr | 2020 REQUIRED -m |region|referenced|ioc -p |PID OPTIONAL -v detail|debug|surface -d --option from-base|statistics --filter unsigned-module|clr-prvx|clr-heap|metadata-modules --address --region-size -m...

reproxy

Reproxy is a simple edge HTTPs server / reverse proxy supporting various providers docker, static, file, consul catalog. One or more providers supply information about the requested server, requested URL, destination URL, and health check URL. It is distributed as a single binary or as a docker...

AV-EDR-Killer

AV/EDR Killer https://github.com/user-attachments/assets/1eda3340-2af2-4136-b74e-be7a3f4b3924 This project demonstartes how a legit, and signed driver can be weponized to gain kernel level access. 🚨 The vulnerable driver: wsftprm.sys , signed by TPZ SOLUCOES DIGITAIS LTDA, and previously exposed ...

TopazTerminator

TopazTerminator F, Another driver got burned.. I was gatekeeping wsftprm.sys driver for a while ; but since someone posted a public POC, I'm ungatekeeping it. We all know it'll get added to the driver blocklist soon, so here's my implementation for the same — in C This project exploits the...

Reaper

「💀」 About Reaper Reaper is a proof-of-concept designed to exploit BYOVD Bring Your Own Vulnerable Driver driver vulnerability. This malicious technique involves inserting a legitimate, vulnerable driver into a target system, which allows attackers to exploit the driver to perform malicious action...

Crashcast-Exploit

CRASHCAST MASS-EXPLOIT TOOL Author: @037 This tool allows you to mass play any YouTube video, remotely terminate apps, and rename Chromecast devices obtained from Shodan.io Prerequisites The only thing you need installed is Python 3.x sudo apt-get install python3 You also require to have cURL...

CVE-2026-120222

undici is an HTTP client for Node.js. In versions 7.0.0 through 7.30.1 and 8.0.0 through 8.12.3, when the cache interceptor is composed with a downstream handler that throws during response processing such as the built-in dump interceptor exceeding its maxSize, or the decompress interceptor...

DeathSleep

██████╗ ███████╗ █████╗ ████████╗██╗ ██╗███████╗██╗ ███████╗███████╗██████╗ ██╔══██╗██╔════╝██╔══██╗╚══██╔══╝██║ ██║██╔════╝██║ ██╔════╝██╔════╝██╔══██╗ ██║ ██║█████╗ ███████║ ██║ ███████║███████╗██║ █████╗ █████╗ ██████╔╝ ██║ ██║██╔══╝ ██╔══██║ ██║ ██╔══██║╚════██║██║ ██╔══╝ ██╔══╝ ██╔═══╝...

CVE-2026-120222: undici: undici is an HTTP client for Node.js

undici is an HTTP client for Node.js. In versions 7.0.0 through 7.30.1 and 8.0.0 through 8.12.3, when the cache interceptor is composed with a downstream handler that throws during response processing such as the built-in dump interceptor exceeding its maxSize, or the decompress interceptor...

CVE-2026-92695 FastNetMon: Legacy pcap parse_packet() has no bounds checking, causing out-of-bounds read on truncated frames

FastNetMon is a high-performance DDoS detector and sensor. In version 1.2.9 and earlier, the live parsepacket callback in src/pcapplugin/pcapcollector.cpp is registered through pcaploop and processes captured frames when pcap = on without checking packethdr-caplen. A short frame or an...

CVE-2026-92695

FastNetMon , a high-performance DDoS detector and sensor, is vulnerable to an out-of-bounds read in versions 1.2.9 and earlier . The root cause is located in the parse_packet() callback within src/pcap_plugin/pcap_collector.cpp, which fails to validate packethdr->caplen when pcap = on. An atta...

CVE-2026-116787

FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware. Prior to 1.11.2, modeventsocket used an unauthenticated Content-Length value directly as the allocation size for a...

CVE-2026-116787 FreeSWITCH: Pre-authentication process termination in the Event Socket via an unbounded Content-Length

FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware. Prior to 1.11.2, modeventsocket used an unauthenticated Content-Length value directly as the allocation size for a...

EUVD-2026-117741

FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware. Prior to 1.11.2, modeventsocket used an unauthenticated Content-Length value directly as the allocation size for a...

CVE-2026-116787

Versions of FreeSWITCH prior to 1.11.2 are vulnerable to a pre-authentication process termination in the mod_event_socket component. The root cause is the use of an unauthenticated Content-Length value directly as the allocation size for an Event Socket message body. Providing negative or extreme...

CVE-2026-116787 FreeSWITCH: Pre-authentication process termination in the Event Socket via an unbounded Content-Length

FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware. Prior to 1.11.2, modeventsocket used an unauthenticated Content-Length value directly as the allocation size for a...

CVE-2026-110931

A flaw exists in the Keycloak SAML 1.1 assertion parser, specifically when processing the AuthorityBinding element within an authentication statement. Due to an incomplete fix for a prior vulnerability, the parser can enter an infinite loop that exhausts all available memory. This results in an u...

EUVD-2026-117399

vault-java-driver, a Java client for HashiCorp Vault, parses Vault's JSON responses with a vendored minimal-json parser that has no nesting depth limit. A deeply nested value raises a StackOverflowError, which escapes catch Exception handlers and kills the reading thread. A Vault token that can...

CVE-2026-116541

A flaw was found in netty-tcnative. A remote attacker can cause a Denial of Service DoS by sending post-handshake messages over a TLS Transport Layer Security 1.3 connection. An error in the write callback function, tcnwritetobytebuffer, causes it to overreport the number of bytes written, which...

CVE-2026-121398

A flaw was found in FreeRDP. A malicious Remote Desktop Protocol RDP server can cause a Denial of Service DoS by crashing the proxy service during session termination. When the dynamic channel dump module is enabled, transmitting dynamic channel data while a client disconnects triggers a...