The vulnerability of the Serial Wire Debug interface (SWD) in the highly integrated wireless system on chip (SoC) Realtek RTL8762C allows a hacker to circumvent existing security restrictions and expose sensitive information.

The vulnerability of the Serial Wire Debug SWD interface in the highly integrated wireless system on chip SoC Realtek RTL8762C is related to improper protection against voltage and clock failures. Exploiting this vulnerability can allow attackers to circumvent existing security restrictions and...

The vulnerability affects the embedded energy-independent single-write eFUSE memory module in Realtek RTL8762C, a highly integrated wireless system on chip (SoC). This module allows a hacker to circumvent existing security restrictions and expose sensitive information.

The vulnerability of the embedded energy-independent single-write eFUSE memory in the highly integrated wireless system on chip SoC Realtek RTL8762C is related to the fact that power is turned on before the access control mechanism is activated. Exploiting this vulnerability can allow a hacker to...

Starlette - Improper Validation of Unsafe Equivalence in Input

A flaw was found in Starlette, a lightweight ASGI Asynchronous Server Gateway Interface framework. A remote attacker could exploit this vulnerability by sending a specially crafted HTTP Host request header. This malformed header could cause the request.url to be incorrectly reconstructed, leading...

Adobe Experience Manager ≤ 6.5.23.0 - XML Injection

Adobe Experience Manager versions 6.5.23.0 and earlier are affected by an XML Injection vulnerability that could result in a Security feature bypass. id: CVE-2025-54251 info: name: Adobe Experience Manager ≤ 6.5.23.0 - XML Injection author: DhiyaneshDK,assetnote severity: medium description: |...

SolarWinds Web Help Desk < 12.8.8 Hotfix 1 (HF1) - Security Control Bypass

SolarWinds Web Help Desk was found to be susceptible to a security control bypass vulnerability that if exploited, could allow an unauthenticated attacker to gain access to certain restricted functionality. id: CVE-2025-40536 info: name: SolarWinds Web Help Desk 12.8.8 Hotfix 1 HF1 - Security...

powerob

Powerob An on-the-fly Powershell script obfuscator meant for red team engagements. Built out of necessity. This only obfuscates functions and removes found in PowerShell scripts. Roadmap includes bfuscating variables. Pull requests and collaborative welcomed. About This was built out of the need ...

CVE-2019-14287-

CVE-2019-14287 A script to check for the sudo security bypass CVE-2019-14287. This script checks for a vulnerable sudo version and tries to exploit it. It can run alone or can be integrated into a enumeration scanner like LinEnum.sh...

CVE-2023-48795

OpenSSH Vulnerability Scanner for CVE-2023-48795 This Python-based tool scans systems for OpenSSH installations and checks if they are vulnerable to CVE-2023-48795 , a critical vulnerability that affects versions earlier than OpenSSH 9.6. The script provides a detailed report of the scanned...

CVE-2024-48910-PoC

CVE-2024-48910-PoC अवलोकन CVE-2024-48910 DOMPurify, जो HTML, MathML और SVG के लिए एक केवल DOM पर काम करने वाला, अत्यंत तेज़, अत्यंत सहिष्णु XSS सैनिटाइज़र है, prototype pollution के प्रति संवेदनशील पाया गया CVE-2024-48910। यह भेद्यता संस्करण 2.4.2 में खोजी और ठीक की गई थी, जिसकी प्रारंभिक घोषणा 3...

Exploiting-a-Linux-kernel-vulnerability

Exploiting-a-Linux-kernel-vulnerability - IT19159140 Local Root vulnerability- CVE-2019-13272 / Security Bypass Vulnerability – CVE-2019-14287 Absolutely, I always choose Linux vulnerability, but then I had to choose different vulnerability else because I didn't know two people could do the same...

CVE-2018-1305

Apache Tomcat सुरक्षा बाईपास भेद्यता हाल ही में, Apache ने एक सुरक्षा बुलेटिन जारी किया जिसमें कहा गया कि Apache Tomcat 7, 8, 9 के कई संस्करणों में सुरक्षा बाईपास भेद्यता मौजूद है। हमलावर इस समस्या का उपयोग करके कुछ सुरक्षा प्रतिबंधों को दरकिनार करके अनधिकृत कार्य कर सकते हैं, जो आगे के हमले में...

Sudo-Security-Bypass-Vulnerability

This repository does not have a README...

gtfocli

GTFOcli GTFOcli यह एक कमांड लाइन इंटरफ़ेस है जो आसान बाइनरी खोज कमांड के लिए है जिसका उपयोग गलत कॉन्फ़िगर किए गए सिस्टम में स्थानीय सुरक्षा प्रतिबंधों को बायपास करने के लिए किया जा सकता है। विषय सूची विषय सूची स्थापना उपयोग Unix बाइनरी खोजें Windows बाइनरी खोजें डॉकरीकृत समाधान का उपयोग करके खोजे...

CVE-2019-14287

CVE-2019-14287 A script to check for the sudo security bypass CVE-2019-14287. This script checks for a vulnerable sudo version and tries to exploit it. It can run alone or can be integrated into a enumeration scanner like LinEnum.sh...

vulnerability-exploitation

vulnerability-exploitation Local Root vulnerability- CVE-2019-13272 / Security Bypass Vulnerability – CVE-2019-14287/Google Android - 'Stagefright' Remote Code Execution - CVE-2015-1538 Absolutely, I always choose Linux vulnerability, but then I had to choose different vulnerability else because ...

LOLBins

LOLBins PyQT ऐप जो विंडोज़ के लिए सभी Living Off The Land बाइनरीज़ और स्क्रिप्ट्स को LOLBAS से और Unix बाइनरीज़ को GTFOBins से सूचीबद्ध करता है, जो गलत कॉन्फ़िगर किए गए सिस्टम में स्थानीय सुरक्षा प्रतिबंधों को बायपास करने के लिए उपयोग किए जा सकते हैं। विंडोज़ लिनक्स...

CVE-2023-2640-32629

Ubuntu Privilege Escalation: CVE-2023-2640 and CVE-2023-32629 This is a local privilege escalation vulnerability affecting certain Ubuntu kernels. It allows unprivileged users to set privileged extended attributes on mounted files, bypassing security checks and potentially gaining elevated...

CVE-2020-15916

EN GenLANConfigAttack - एक PoC है जो CVE-2020-15916 का शोषण करने के लिए है, एक ऐसी भेद्यता जो डिवाइस की LAN कॉन्फ़िगरेशन में अनधिकृत परिवर्तनों की अनुमति देती है। विशेषताएँ LAN कॉन्फ़िगरेशन भेद्यता का शोषण करता है नेटवर्क सेटिंग्स बदलने के लिए दुर्भावनापूर्ण पेलोड भेजता है LAN पर नियंत्रण पाने के...

TeleShadow3

TeleShadow3 Teleshadow3- Advanced Telegram Desktop Session Hijacker! Download Click HERE to download the latest version! Screenshot Stealing desktop telegrams has never been so easy ! Set the email and sender details of the sender and recipient or use Telegram API! and send it to the victim after...

CVE-2025-31651-o

CVE-2025-31651 For a subset of unlikely rewrite rule configurations, it was possible for a specially crafted request to bypass some rewrite rules. If those rewrite rules effectively enforced security constraints, those constraints could be bypassed. 0x01 Status PUBLIC 0x02 PoC Finder see...