919 matches found
piraterf
🏴☠️ PIrateRF - Software-Defined Radio Transmission Platform PIrateRF transforms your Raspberry Pi Zero W into a portable RF signal generator that spawns its own WiFi hotspot. Control everything from FM broadcasts to digital modes through your browser - hack the airwaves from anywhere! 📡⚡ 🎬 Click...
CVE-2025-7771
CVE-2025-7771 — Lectura/Escritura Arbitraria de Memoria Física en ThrottleStop.sys Prueba de concepto completa para el controlador ThrottleStop.sys de TechPowerUp CVE-2025-7771. Un controlador de kernel firmado y aún cargable expone lectura y escritura de memoria física sin validación a través de...
omae-wa-cheese-da
omae-wa-cheese-da Image L/E física arbitraria de GPU CVE-2025-21479 - filtración de KASLR - SELinux permisivo - servidor root de gancho de inicio seguro de RKP & bypass de DEFEX ejecución de binario personalizado LDPRELOAD Tarda unos 6 minutos.. Ten paciencia. Lo optimizaré después. Dispositivos...
Pi-Zero-2W-Bad-USB
Raspberry Pi Zero 2 W BadUSB HID Toolkit A programmable BadUSB / HID attack platform built on a Raspberry Pi Zero 2 W. The Pi enumerates as a USB composite device keyboard plus an optional read-only mass-storage volume and executes Ducky-Script-style payloads against the host it's plugged into...
prowler
Prowler Prowler is a Network Vulnerability Scanner implemented on a Raspberry Pi Cluster, first developed during Singapore Infosec Community Hackathon - HackSmith v1.0. Capabilities Scan a network a particular subnet or a list of IP addresses for all IP addresses associated with active network...
W&B Weave Server - Remote Arbitrary File Leak
The Weave server API allows remote users to fetch files from a specific directory, but due to a lack of input validation, it is possible to traverse and leak arbitrary files remotely. In various common scenarios, this allows a low-privileged user to assume the role of the server admin. id:...
badspin
Bad Spin: LPE de Android Binder Autor: Moshe Kol Exploit de escalada de privilegios desde unstrustedapp para la vulnerabilidad de Android Binder CVE-2022-20421. La vulnerabilidad fue parcheada en el Boletín de Seguridad de Android de octubre de 2022. El exploit funciona en dispositivos que ejecut...
stealth_call
¿Qué es esto? Librería de solo cabecera para Windows x64 que te permite invocar cualquier syscall de NT sin tocar los imports de ntdll, sin dejar cadenas en tu binario y sin las banderas rojas habituales que hacen que los EDR pierdan la cabeza. Sin CRT. Sin STL. Sin IAT. Todo se compila hasta 19K...
multicast_bytecopy
multicastbytecopy Este código se publica para investigadores de seguridad, no utilices este código para ningún propósito a menos que sepas lo que estás haciendo. multicastbytecopy es un exploit de lectura/escritura del kernel para iOS 15.0 - 15.1.1 por @jaakerblom y el sucesor espiritual de...
CVE-2025-66678
CVE-2025-66678 In Hardware Read & Write Utility v1.25.11.26, the driver exposed abritrary MSR read and write, as well as phsyical memory read and write through MmMapIoSpace, both of which enable kernel code execution. PoC Detail The PoC will swap the primary token of the current process to become...
CVE-2026-93094
In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix dplinkpeer dangling references on AP vdev rollback ath12kmacvdevcreate for an AP vdev creates the bss self-peer via ath12kpeercreate, which finishes by calling ath12kdplinkpeerassign to publish the dplinkpeer in...
UBUNTU-CVE-2026-92497
In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: Avoid buffer overread in ath12kwmioprx Currently, in ath12kwmioprx, the firmware buffer is read without first verifying that the buffer has enough data to hold a header. This could result in a buffer overread. Updat...
CVE-2026-92497
In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: Avoid buffer overread in ath12kwmioprx Currently, in ath12kwmioprx, the firmware buffer is read without first verifying that the buffer has enough data to hold a header. This could result in a buffer overread. Updat...
Exploit for Use After Free in Linux Linux_Kernel
GhostLock CVE-2026-43499 for the Galaxy S26 CVE-2026-43499...
Exploit for Type Confusion in Google Chrome
CVE-2026-78938 — V8 TurboFan CheckMaps instance-migration type...
stealth_call
Cos'è? Libreria header-only per Windows x64 che consente di invocare qualsiasi syscall NT senza toccare gli import di ntdll, senza lasciare stringhe nel binario e senza i soliti campanelli d'allarme che fanno impazzire gli EDR. Niente CRT. Niente STL. Niente IAT. L'intero progetto compila a circa...
MINI-68HV-GH7R-XP8W
Bulletin has no description...
CVE-2026-56391
GNU coreutils uniq is vulnerable to an out‑of‑bounds read due to incorrect handling of multibyte input when the -w --check-chars option is used. The findfield function miscalculates the byte length of characters by repeatedly processing a fixed pointer instead of advancing through the input,...
CVE-2026-13077
A missing bounds check in the BSON CodeWScope element accessors allows an attacker to trigger an out-of-bounds heap read via a crafted aggregation pipeline. The vulnerability can be exploited by an authenticated user by generating a malformed BSONColumn data containing a CodeWScope element,...