307801 matches found
CVE-2025-32463
CVE-2025-32463 Local Privilege Escalation in Sudo via Malicious nsswitch.conf with sudo -R. Affected versions 1.9.14 ā 1.9.17 š Introduction Sudo is a widely used command-line utility on Unix-like systems that allows permitted users to execute commands with elevated privileges. It plays a critica...
CVE-2023-21768
CVE-2023-21768 Windows Ancillary Function Driver for WinSock According to the detailed description of CVE-2023-21768 published by the Microsoft Security Response Center MSRC, the vulnerability exists in the Ancillary Function Driver AFD, whose system file is afd.sys. The AFD module is the kernel...
Nosql-Exploitation-Framework
Nosql-Exploitation-Framework A FrameWork For NoSQL Scanning and Exploitation Framework NoSQL Exploitation Framework 2.02b Released Author NoSQL Exploitation Framework Authored By Francis Alexander Wiki NoSQL Exploitation Framework Wiki on Installation & Usage -...
CVE-2025-29927
Advanced CVE-2025-29927 Vulnerability Scanner This is a professional-grade scanner designed to detect the CVE-2025-29927 middleware bypass vulnerability in Next.js applications. š§ What It Does Uses a real headless browser Playwright to deeply crawl a target website JS-rendered content included...
blue-pigeon
Blue Pigeon: Bluetooth-based Data Exfiltration and Proxy Tool for Red Teamers 1. The Motivation | Birth of the Bird ā How does Blue Pigeon work? ā The Pigeon's Key Requirements 2. The Components | Dissecting the Pidgey apart ā 1. Blue Pigeon - The Mobile Applicaton ā 2. Blue Beak - Custom...
yarasafe
YARASAFE - Automatic Binary Function Similarity Checks with Yara SAFE is a tool developed to create Binary Functions Embedding developed by Massarelli L., Di Luna G.A., Petroni F., Querzoni L. and Baldoni R. You can use SAFE to create your function embedding to use inside yara rules. If you are...
CVE-2026-88079
Null pointer dereference in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally...
GnuPG: Incorrect cryptographic message parsing
A flaw in GnuPG's gpgsm component improperly handles the Cryptographic Message Syntax CMS format for AES-GCM. By accepting an authentication tag length of 4 bytes instead of the required 12 bytes, this vulnerability allows for a low-impact data integrity issue where the cryptographic validity of...
Low: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: gnupg2: gnupg2-2.4.9-18.3.hum1 aarch64, s390x, x8664 gnupg2-dirmngr-2.4.9-18.3.hum1 aarch64, s390x, x8664 gnupg2-g13-2.4.9-18.3.hum1 aarch64, s390x, x8664 gnupg2-gpg-agent-2.4.9-18.3.hum1 aarch64...
CVE-2019-13496
CVE-2019-13496 Exploit Title: OTP bypass Filed Integrity check Date: 07/10/2019 Exploit Author: Furqan Khan Vendor Homepage: https://www.oneidentity.com/ Software Link: https://www.oneidentity.com/products/cloud-access-manager/ Version: 8.1.3 Tested on: Kali Linux , Windows 7 ,Ubantu 16.04 To...
CVE-2026-83828
Heap-based buffer overflow in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally...
CVE-2026-83773
Exposure of sensitive system information to an unauthorized control sphere in Windows MIDI Service Module allows an authorized attacker to disclose information locally...
CVE-2026-83751
Use after free in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally...
docker-CVE-2019-11043
Docker image and commands to check CVE-2019-11043 CVE: CVE-2019-11043 Description: In PHP versions 7.1.x below 7.1.33, 7.2.x below 7.2.24 and 7.3.x below 7.3.11 in certain configurations of FPM setup it is possible to cause FPM module to write past allocated buffers into the space reserved for FC...
CVE-2026-110235
MP Manager through 1.1.0 contains a path traversal vulnerability that allows attackers to write files outside the extraction folder by bypassing the non-recursive sanitizeEntryName filter. Attackers can craft TAR, 7z or RAR entries named ....//file that become ../file, creating or overwriting fil...
CVE-2026-110210
Phase Console through 2.77.3 contains a missing authorization vulnerability that allows organisation members without Secrets read permission to read secret history via the secretHistory GraphQL query. Attackers holding an environment key can supply a known secret identifier to retrieve encrypted...
Nimcrypt2
Nimcrypt2 Nimcrypt2 is yet another PE packer/loader designed to bypass AV/EDR. It is an improvement on my original Nimcrypt project, with the main improvements being the use of direct syscalls and the ability to load regular PE files as well as raw shellcode. Before going any further, I must...
Invoke-DOSfuscation
Invoke-DOSfuscation v1.0 Introduction Invoke-DOSfuscation is a PowerShell v2.0+ compatible cmd.exe command obfuscation framework. White paper: https://www.fireeye.com/blog/threat-research/2018/03/dosfuscation-exploring-obfuscation-and-detection-techniques.html Background Over the past several yea...
hawk
Hawk Documentation and Resources Visit hawkforensics.io for comprehensive documentation including: Detailed installation and permissions guides Step-by-step tutorials and "How to" videos Troubleshooting help Best practices and usage examples What is Hawk? Hawk is a free, open-source PowerShell...
Dshell
Dshell An extensible network forensic analysis framework. Enables rapid development of plugins to support the dissection of network packet captures. Key features: Deep packet analysis using specialized plugins Robust stream reassembly IPv4 and IPv6 support Multiple user-selectable output formats...