webminex

webminex poc эксплойт для бэкдора webmin Пример на bash/curl для эксплуатации бэкдоров webmin CVE-2019-15107 и CVE-2019-15231. автор: Hanno Böck, https://hboeck.de/...

CVE-2026-78013

Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains an Initialization of a Resource with an Insecure Default vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Denial of service, Information...

EUVD-2026-95564

Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains an Initialization of a Resource with an Insecure Default vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Denial of service, Information...

WSMan-WinRM

WSMan-WinRM Коллекция исходного кода и скриптов для удаленного выполнения команд через WinRM с использованием COM-объекта WSMan.Automation. Предыстория Для получения дополнительной информации обратитесь к следующей записи в блоге: WS-Management COM: Another Approach for WinRM Lateral Movement...

Blueborne-CVE-2017-1000251

Blueborne Простой DoS-атака по Bluetooth с использованием эксплойта Blueborne CVE-2017-1000251...

CVE-2014-4378

CoreGraphics Information Disclosure - CVE-2014-4378 В этой статье рассматривается эксплуатация уязвимости MobileSafari на iOS 7.1.x. Использование специально созданного PDF-файла в качестве изображения в HTML позволяет передать информацию о расположении памяти интерпретатору JavaScript в браузере...

Envoy-CPU-Exhaustion-Vulnerability-PoC

Envoy CPU 고갈 취약점 PoC 이 저장소는 CONTINUATION 프레임의 플러드로 인한 Envoy의 CPU 고갈 취약점을 시연하는 개념 증명PoC Python 스크립트를 포함합니다. 저자: blackmagic 2024 설명 Envoy는 현대 클라우드 네이티브 애플리케이션을 위해 설계된 클라우드 네이티브 오픈소스 엣지 및 서비스 프록시입니다. 그러나 1.29.3, 1.28.2, 1.27.4, 1.26.8 이전 버전은 CONTINUATION 프레임의 플러드로 인해 CPU 고갈에 취약합니다. Envoy의 HTTP/2 코덱은...

CVE-2026-76779

Dell Secure Connect Gateway (SCG) Policy Manager versions prior to 5.34.00.16 are vulnerable to an Improper Restriction of Excessive Authentication Attempts (CWE-307). An unauthenticated attacker with remote access could exploit this flaw to achieve Elevation of privileges , Protection mechanism ...

CVE-2026-76779

Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains an Improper Restriction of Excessive Authentication Attempts vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges,...

EUVD-2026-95563

Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains an Improper Restriction of Excessive Authentication Attempts vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges,...

bitbucket-cve-2022-36804

bitbucket-cve-2022-36804 CVE-2022-36804 Atlassian Bitbucket 명령 주입 취약점 POC 팔로우 YouTube Twitter Facebook LinkedIn...

bomber

bomber is an application that scans SBOMs for security vulnerabilities. Overview So you've asked a vendor for an Software Bill of Materials SBOM for one of their closed source products, and they provided one to you in a JSON file... now what? The first thing you're going to want to do is see if a...

security-research

보안 연구 이 프로젝트는 Google이 수행한 연구 중 Google 소유가 아닌 코드에 영향을 미치는 보안 권고와 그에 수반되는 개념 증명proof-of-concept을 호스팅합니다. 우리는 취약점 공개가 쌍방향two-way street이라고 믿습니다. 연구자뿐만 아니라 공급업체도 책임감 있게 행동해야 합니다. 이것이 Google이 90일 공개 기한을 준수하는 이유입니다. Google은 취약점을 발견하면 즉시 공급업체에 알리며, 세부 정보는 90일 후, 또는 공급업체가 수정본을 출시하면 그보다 더 일찍 방어 커뮤니티에 공개합니...

My-PoC-Exploits

My-PoC-Exploits PoC-эксплойты, которые я написал. Они предоставляются как есть, и я не буду оказывать поддержку...

CVE-2026-98203

A flaw was found in the Linux kernel's SoC System on Chip button array driver. The driver fails to verify that the button descriptor package contains entries before accessing them during device initialization. This issue may allow an invalid device configuration to trigger an out-of-bounds memory...

CVE-2025-24813-PoC

CVE-2025-24813-PoC Apache Tomcat 원격 코드 실행 취약점 대량 탐지 스크립트 CVE-2025-24813 면책 조항: 본 문서에 설명된 취약점 및 재현 단계는 오직 네트워크 보안 연구 및 교육 목적으로만 제공됩니다. 누구든지 본 문서의 정보를 불법적인 목적이나 승인되지 않은 시스템 테스트에 사용해서는 안 됩니다. 저자는 본 문서의 정보 사용으로 인해 발생하는 직간접적인 손해에 대해 책임을 지지 않습니다. 침해와 관련된 경우 신속히 연락해 주시기 바라며, 최대한 빨리 처리하고 관련 내용을 삭제하겠습니다. ...

CVE-2026-98375

In the Linux kernel, the following vulnerability has been resolved: xen/netfront: drop RX packets with a short Ethernet header handleincomingqueue pulls pullto bytes into the head before calling ethtypetrans. pullto is the length of the first RX slot, capped at RXCOPYTHRESHOLD, and that length...

CVE-2026-106145

In Progress® Telerik® Report Server prior to version 12.2.26.1007, incorrect privilege assignment in the service-agent SignalR hub allows an authenticated user, including a low-privilege or guest account with a valid bearer token, to register as a trusted service agent. On the next server...

CVE-2026-19569

dynamicobjectcreate in kernel/userspace/userspace.c computed the backing allocation for a dynamically allocated kernel object as objsizegetotype + size, and for thread stack elements as STACKELEMENTDATASIZEsize a round-up plus fixed overhead, without checking either expression for unsigned...

CVE-2026-19571

The ITE IT8xxx2 SHI host-command backend subsys/mgmt/echostcmd/backends/echostcmdbackendshiite.c copied the 8-byte host-command request header from the SPI Rx FIFO directly into the shared receive buffer data-inmsg and only afterwards checked the protocol version and the derived packet length. Th...