BPFDoor-controller-source

BPFDoor-controller-source Código fuente de una variante reciente del controlador BPFDoor Original: 2eacc8d91b9829b9606a7945fc5311fb5876cfb42ffccc1b91f61841237b04c1 Corregido: bpfdoorcontroller.c Ayudante de original a corregido: formatfix.py Compilar: $ apt install libssl-dev $ gcc...

public-research

Nokia Deepfield ERT — investigación pública Investigación sobre amenazas del Equipo de Respuesta a Emergencias ERT de Nokia Deepfield, centrada en botnets DDoS e infraestructura relacionada. Cada directorio cubre una familia de botnet con un breve resumen e indicadores de compromiso IoCs legibles...

C0deVari4nt

C0deVari4nt Descripción C0deVari4nt es una herramienta de análisis de variantes y visualización que inspecciona bases de código en busca de vulnerabilidades similares. Aprovecha CodeQL, un motor de análisis semántico de código, para consultar código basado en plantillas de consulta CodeQL...

codeql-buffer-overflow-variant

codeql-buffer-overflow-variant A deliberately vulnerable, 170-line C program used as a CodeQL static-analysis target. It reproduces the bug class of CVE-2020-8597 — the pppd EAP rhostname stack buffer overflow CWE-120 — in a program that shares none of pppd's function names, call depth, or dispat...

CVE-2021-40444--CABless

CVE-2021-40444--CABless version Actualización: Código modificado para que no necesitemos depender de archivos CAB. El archivo "index.html" que desencadena la ejecución del payload contendrá solo 1 línea de código, dentro de la etiqueta 'script': new...

AgentTesla-Config-Extractor

AgentTesla-Config-Extractor Config extractor for AgentTesla - Discord/Telegram Variant Usage agenttesla-config-extractor.py -f Example Output Example Hashes 0de25252f312735c0a26f7ac7a27cc8a51bfcdd900fc2e8d0a8b65013988e7e9 118a34bf096f5b9ea16c31de288793192ed4bc413ee8f50198eb7df7f5cf8f0e...

rails-activestorage-vips-audit

rails-activestorage-vips-audit An Agent Skill that audits Ruby on Rails repositories for exposure to CVE-2026-66066 KindaRails2Shell — the Active Storage libvips variant-processing vulnerability that allows arbitrary file read and, in a Rails application, remote code execution. The skill is a...

miasma-toolkit

Toolkit Miasma / Shai-Hulud Herramientas de análisis de incidentes + detección/remediación para el gusano Miasma una variante Mini Shai-Hulud que inyecta cargas útiles de auto-ejecución en configuraciones de agentes de IA / IDE y repositorios npm/GitHub. ⚠️ Aviso legal — sin garantía. Este es un...

Veridiff

════════════════════════════════════════════════════════════════ VERIDIFF the exact instruction where two runs of the same code split ════════════════════════════════════════════════════════════════ Two traces go in. One address comes out: the exact basic block where your two runs stopped agreein...

CVE-2026-21012-Rust-serde-Deserialization-of-Untrusted-Enum-Variant-Injection-

CVE-2026-21012 – Rust serde Deserialization of Untrusted Enum Variant Injection Program Code Rust // serdevuln.rs - Deserializes an enum from user JSON without validation use serde::Deserialize, Serialize; use serdejson; deriveDeserialize, Debug enum AdminAction ReadLogs, DeleteUserString,...

CVE-2026-31431

PoC Python for Copy Fail CVE-2026-31431 Python use nosplice variant...

Chrome-CVE-2024-2887-RCE-POC

Resumen de Chrome-CVE-2024-2887-RCE-Poc Nombre de la vulnerabilidad: Google Chrome Type Confusion Tipo de amenaza: Ejecución de código Probabilidad de explotación: Alta Estado del POC: Público Estado de explotación en la naturaleza: No público Estado del EXP: Público Estado de los detalles...

ssbd-tools

Tools for exercising Speculative Store Bypass Disable The ssbd-tools project is a collection of programs that makes use of the Speculative Store Bypass Disable SSBD functionality provided in x86 processors. SSBD is a processor based mitigation for the Speculative Store Bypass attack that is...

CVE-2025-12758

CVE-2025-12758: Validator.js isLength Unicode Variation Selector Bypass CVE ID: CVE-2025-12758 CVSS Score: 8.7 HIGH Severity: HIGH CWE: CWE-792 Incomplete Filtering of One or More Instances of Special Elements Published: November 26, 2025 Disclosed: October 19, 2025 Vulnerability Overview This...

Hardware-Vulnerability-with-Proof-of-Concept-

🛡️ Spectre Variant 2 CVE-2017-5715 — Investigación de Vulnerabilidad de Hardware Un documento de investigación en profundidad y una Prueba de Concepto PoC práctica que explora ataques de ejecución especulativa en CPUs modernas. 📖 Resumen Este proyecto es una exploración de investigación y...

CVE-2026-40453

Reproducción de Inyección de Encabezados Camel con Variantes de Mayúsculas CVE-2026-40453 Este proyecto demuestra CVE-2026-40453 — una corrección incompleta para CVE-2025-27636. La corrección de 2025 agregó setLowerCasetrue a HttpHeaderFilterStrategy para que los nombres de encabezado con variant...

CVE-2025-53770-SharePoint-Zero-Day-Variant-Exploited-for-Full-RCE

🚨 CVE‑2025‑53770 – Variante de Día Cero de SharePoint Explotada para RCE Completo Una Escalada Crítica desde CVE‑2025‑49706 Por Aditya Bhatt – Red Team | VAPT 📌 Resumen CVE‑2025‑53770 es una vulnerabilidad crítica CVSS 9.8 de RCE sin autenticación en Microsoft SharePoint ahora explotada activamen...

CLEANSTART-2026-GT85159 Security fix for CVE-2025-22872 applied in: cert-manager-webhook-pdns-fips 2.2.0-r0, cert-manager-webhook-pdns-fips 2.4.0-r0, cfssl 1.5.0-r1, cosign 2.4.3-r0, cosign 2.5.3-r0, ingress-nginx-controller 1.24.2-r0, kserve-rest-proxy 0.12.0-r3, kube-fluentd-operator 1.18.2-r0, kube-state-metrics 2.10.1-r0, kuberay-operator 1.3.2-r3, kubernetes-csi-node-driver-registrar 2.13.0-r0, prometheus 2.55.1-r3, prometheus-pushgateway 1.10.0-r3, prometheus-pushgateway-fips 1.10.0-r3, rclone 1.69.0-r0, runc 1.1.14-r0, tempo-fips 2.7.2-r0, wavefront-collector-for-kubernetes 1.13.0-r0

CVE-2025-22872 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-YI67273 Security fix for CVE-2026-34040 applied in: amazon-cloudwatch-agent 1.300070.0-r1, amazon-cloudwatch-agent 1.300071.0-r1, amazon-cloudwatch-agent-fips 1.300069.0-r1, cadvisor-fips 0.55.1-r0, docker-compose 5.1.0-r0, gitlab-runner 18.11.1-r0, grafana-alloy 1.14.2-r2, grafana-alloy 1.15.0-r0, grafana-alloy 1.15.1-r1, grafana-alloy-fips 1.14.2.r0, grafana-alloy-fips 1.15.0-r0, grafana-alloy-fips 1.15.1-r0, harbor-trivy-adapter-fips 0.36.0-r1, k8ssandra-client-fips 0.6.4-r7, k8ssandra-client-fips 0.7.0-r5, kubevela 1.10.8-r0, melange 0.45.4-r0, melange 0.46.1-r0, melange 0.47.0-r0, melange 0.55.0-r1, melange 0.56.1-r1, paranoia 0.2.1-r0, prometheus-fips 3.10.0-r2, prometheus-fips 3.11.3-r2, promxy 0.0.93-r1, pulumi 3.299.0-r0, rancher-agent 2.11.15-r1, spire-server-fips 1.15.1-r1, tkn 0.42.2-r1, tkn 0.43.2-r1, tkn 0.44.2-r1, tkn 0.45.0-r1, tkn-fips 0.44.2-r0, vault 1.21.4-r1

CVE-2026-34040 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-VF40617 Security fix for CVE-2026-33816 applied in: argo-workflows 4.0.4-r1, certificate-transparency-trillian-ctserver 1.3.2-r2, certificate-transparency-trillian-ctserver-fips 1.3.2-r0, cloudnative-pg 1.26.3-r1, cloudnative-pg-fips 1.24.4-r5, cloudnative-pg-fips 1.25.4-r4, cloudnative-pg-fips 1.27.3-r3, cloudnative-pg-fips 1.27.4-r0, cloudnative-pg-fips 1.28.1-r3, cloudnative-pg-fips 1.28.2-r0, cloudprober 0.13.9-r0, cloudprober 0.14.2-r0, jitsucom-bulker 2.10.0-r2, jitsucom-bulker 2.11.0-r1, jitsucom-bulker 2.8.6-r0, jitsucom-bulker 2.9.0-r0, keda 2.19.0-r3, keda-fips 2.18.3-r3, kube-bench 0.15.0-r0, openbao-fips 2.3.2-r6, openbao-fips 2.4.4-r6, openbao-fips 2.5.1-r2, openbao-fips 2.5.2-r0, opentelemetry-collector-contrib 0.150.0-r0, spire-server 1.13.5-r0, spire-server 1.14.5-r0, spire-server-fips 1.14.5-r0, step 0.29.0-r0, step-cli 0.27.5-r1, step-issuer 0.10.2-r1, step-issuer 0.9.11-r1, temporal 1.5.1-r0, temporal-server 1.29.6-r0, temporal-server 1.30.4-r0, temporal-server 1.31.0.153.3-r0, temporal-server-fips 1.29.6-r0, temporal-server-fips 1.31.0.153.1-r0, vault 1.20.4-r3, vault 1.21.4-r3

CVE-2026-33816 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...