multicast_bytecopy

multicastbytecopy This code is published for security researchers, do not use this code for any purpose unless you know what you are doing. multicastbytecopy is a kernel r/w exploit for iOS 15.0 - 15.1.1 by @jaakerblom and the spiritual successor of multipathkfree. The exploit can be adapted to...

CVE-2026-114074

The software Trigger.dev prior to version 4.5.10 is vulnerable to a Server-Side Request Forgery (SSRF) vulnerability. Authenticated project members can bypass webhook SSRF protections by targeting the non-global 198.18.0.0/15 benchmarking range. This occurs because the isUnsafeIPv4 check omits th...

EUVD-2026-107025

Trigger.dev before 4.5.10 contains a server-side request forgery vulnerability that allows authenticated project members to bypass webhook SSRF protections by targeting the non-global 198.18.0.0/15 benchmarking range. Attackers can configure alert-channel webhooks pointing at internally routed...

CVE-2023-20198

🔍 Cisco IOS XE Web UI Vulnerability Scanner - CVE-2023-20198 🚨 🚫 Critical Risk | CVSS: 10.0 | 📅 Updated: Oct 17, 2023 Overview: A swift and powerful scanner for detecting critical vulnerabilities in the web UI of Cisco IOS XE Software. Protect your system from unauthorized level 15 access, puttin...

realme-c53-unlock-root

Realme C53 RMX3760 — Bootloader Unlock & Root Toolkit English | Bahasa Indonesia Unlock bootloader and root your Realme C53 and other Realme devices. Supports KernelSU, Magisk, or a hybrid of both. ⚠️ RMX3760 Unisoc T612 : Bootloader unlock + Magisk root are verified working on BOTH Android 15 and...

IonStack-S22U

CVE-2026-43499 - Samsung 5.10 Kernel Devices IonStack https://github.com/user-attachments/assets/f3d0858d-f8f5-444f-8ae5-541c2bc744c3 | ---|--- | While this repository originated as a device-specific port for the Galaxy S22 Ultra, the project has since shifted and expanded to support all Samsung...

XStream <1.4.15 - Server-Side Request Forgery

XStream before 1.4.15 is susceptible to server-side request forgery. An attacker can request data from internal resources that are not publicly available by manipulating the processed input stream, thereby making it possible to obtain sensitive information, modify data, and/or execute unauthorize...

CVE-2026-43499-OnePlus15

CVE-2026-43499 — OnePlus 15 LPE Educational PoC WARNING: This repository is provided for educational and research purposes only. No pre-built binaries or releases are distributed. You must build everything from source. Android 16 local privilege escalation for OnePlus 15. Fork of...

vivo_iqoo_neo_9_root_research_on_CVE-2025-21479

vivo iQOO Neo 9 Root Research CVE-2025-21479 This project is the result of local privilege escalation research based on CVE-2025-21479 a Qualcomm Adreno A7xx GPU firmware logic vulnerability, the target device is the vivo iQOO Neo 9 Snapdragon 8 Gen 2 / Adreno 740 / A7xx series GPU. The repositor...

CVE-2023-20198

CVE-2023-20198 Exploit PoC for CVE-2023-20198 Description CVE-2023-20198 is characterized by improper path validation to bypass Nginx filtering to reach the webuiwsmahttp web endpoint without requiring authentication. By bypassing authentication to the endpoint, an attacker can execute arbitrary...

Pentagram-exploit-tester

Pentagram-exploit-tester A test app to check if your device is vulnerable to CVE-2021-30955. This tool incorporates @b1n4r1b01's kernel exploit based on CVE-2021-30955 and will run it on your device to test if the device is compatible. Exploit is known to work with iOS 15.0 to 15.1.1 and 15.2 BET...

Cisco-IOS-XE-CVE-2023-20198

Cisco-IOS-XE-CVE-2023-20198 Exploit PoC for CVE-2023-20198 Vulnerability information and exploit usage offered by smokeintheshell See references Endpoint, http content type and headers management have been modified from other existing POCs to work in situations in which other exploits fail...

android-workprofile-exploit

Android Work Profile Security Research Controlled lab research on Android work-profile provisioning behavior, policy timing, and enterprise isolation boundaries. This repository documents academic security research performed in a controlled environment. It is not intended for unauthorized access,...

KTO

KTO - Kick Them Out https://github.com/user-attachments/assets/0ebf61af-c306-4825-b836-95df59052c27 Point it at an SSID and it disconnects the devices on that network, including ones that reconnect. You give it the network name; it finds the access point, finds the clients, and picks a...

CVE-2023-20198

CVE 2023-20198 Introduction The web UI component of Cisco IOS XE Software has a previously undiscovered vulnerability that, when exposed to the internet or untrusted networks, is already being actively exploited, according to Cisco. Due to this vulnerability, a remote, unauthenticated attacker is...

cve-2025-21479-iqoo11pro

CVE-2025-21479 Temporary Root iQOO 11 Series Version Item| Value ---|--- Device| vivo iQOO 11 Pro PD2254 / V2254A System| Android 15, PD2254BA15.2.12.2.W10 Kernel| 5.15.178-g3dc7c01077b8-dirty SoC| Snapdragon 8 Gen 2 SM8550 / kalama GPU| Adreno 740, OpenGL ES 3.2 [email protected] Supported...

lab-cve-2025-57819

Work in Progress FreePBX CVE-2025-57819 Lab - Unauth SQLi → RCE Chain Nuclei POC Spin up a reproducible FreePBX 15 lab Docker to validate CVE-2025-57819 — a critical unauthenticated SQL injection in userman AJAX endpoints that can be chained to RCE. Includes a working Nuclei template...

CVE-2025-55182

Vulnerable React Application CVE-2025-55182 This application is a Proof of Concept PoC for CVE-2025-55182 , a critical Remote Code Execution RCE vulnerability in React Server Components. Vulnerability Details CVE ID : CVE-2025-55182 Severity : Critical CVSS 10.0 Affected Components : React Server...

Fugu15

Fugu15 Fugu15 is a semi-untethered permasigned jailbreak for iOS 15. It contains a code-signing bypass, kernel exploit, kernel PAC bypass and PPL bypass. Additionally, it can be installed via Safari, i.e. a computer is not required, except for a Web Server that hosts Fugu15. Please note that Fugu...

SUSE SLED15: cluster-md-kmp-default / dlm-kmp-default / gfs2-kmp-default / etc (SUSE-SU-2026:4706-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4706-1 advisory. The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues: The following security...