15494 matches found
CVE-2026-99151
The Linux kernel contains a NULL pointer dereference vulnerability within the drm/amd/display component, specifically in the USB4 bandwidth functions . The functions allocate_usb4_bandwidth_for_stream() and allocate_usb4_bandwidth() use ASSERT(stream->sink) before accessing stream->sink->...
NmapReportTemplate
Nmap Report Template Template designed to dynamically display information obtained from Nmap Scan Screenshots Usage 1. Download the nmaptemplatereport.xsl file and, when running Nmap , pass the file as a stylesheet. Example nmap --open -A -T4 -F --script vulners -oX scanoutput.xml --stylesheet...
Guide-and-theoretical-code-for-CVE-2023-35674
Guide-and-theoretical-code-for-CVE-2023-35674 Guide and theoretical code for CVE-2023-35674 Because android is out of my skill league please use this as a high overview from my pov on how i would exploit this cve. the code snippets are just skeletons , please help : So first of all u can't exploi...
CVE-2021-44228
CVE-2021-44228 checker This is the repository for checking for vulnerability CVE-2021-44228. This is a PoC that only displays strings without any external class loading. It cannot be used for arbitrary code execution. How it works? Step 1: Run the server application The image...
pyvex
PyVEX PyVEX is Python bindings for the VEX IR. Project Links Project repository: https://github.com/angr/pyvex Documentation: https://api.angr.io/projects/pyvex/en/latest/ Installing PyVEX PyVEX can be pip-installed: pip install pyvex Using PyVEX import pyvex import archinfo translate an AMD64...
CVE-2019-12937-ToaruOS
CVE-2019-12937 ToaruOS is an open-source computer operating system written in C, a hobbyist operating system developed by an undergraduate computer science student at the University of Illinois. ToaruOS runs on POSIX and x86 architectures. Its main features include support for processes and...
TChopper
TChopper New technique I have discovered recently and give it a nickname Chop chop to perform lateral movement using windows services display name and WMI by smuggling the malicious binary as base64 chunks and automate the process using the TChopper tool. image How it works the tool will get the...
PrecIR
PrecIR Collection of software and hardware tools, their source code and design files for communicating with infrared based Electronic Shelf Labels. See http://furrtek.free.fr/index.php?a=esl for reverse-engineering of the system, the protocol and electronics. Thanks to @david4599 for infos about...
frida-ios-hook
Frida iOS hook π A tool that helps you can easy using frida. It support script for trace classes, functions, and modify the return values of methods on iOS platform. π For Android platform: frida-android-hook π For Intercept Api was encrypted on iOS application: frida-ios-intercept-api Env OS...
open-sesame
open-sesame Contains hackerone disclosed reports and other bug bounty writeups. A python tool which runs to display random publicly disclosed Hackerone reports when bored. Automatically opens the report in browser. Contains Over 8k Publicly disclosed Hackerone reports and addtl. wordlist of 700 b...
cpufetch
Simple yet fancy CPU architecture fetching tool cpufetch is a command-line tool written in C that displays the CPU information in a clean and beautiful way Table of contents 1. Support 2. Installation 2.1 Installing from a package 2.2 Building from source 2.3 Android 3. Examples 3.1 x8664 3.2...
Overglade-Badges
Overglade Hackathon Badges These are zero-power hackathon badges I designed for the overglade hackathon in singapore! They're powered by the RP2040 and have passive NFC and an onboard e-ink driver! Custom Features Passive NFC tap for whatever your heart desires E-ink support so that you don't nee...
CVE-2025-29306
POC - CVE-2025-29306 FOXCMS /images/index.html Code Execution Vulnerability Overview An issue in FoxCMS v.1.2.5 allows a remote attacker to execute arbitrary code via the case display page in the index.html component. Full POC Read about it β CVE-2025-29306 Disclaimer : This Proof of Concept POC ...
CVE-2024-43919
CVE-2024-43919 YARPP = 5.30.10 - Missing Authorization Description The YARPP β Yet Another Related Posts Plugin plugin for WordPress is vulnerable to unauthorized access due to a missing capability check in the /includes/yarppprosetdisplaytypes.php file in all versions up to, and including,...
SharpCookieMonster
SharpCookieMonster .&@. .@@. &&&@ @/ @ @ & ,& &@@@@/ &/ @ &@ @@@@@@@@ @. @. @@/ @ @@@@@@@/ @, @@ @ @@@@@@@@ && %%/%%&//... /% @@@@@@@@ @ ,@///////@. .@..@, %@@ &/////@@. .&@/////////////////&@. &%///@. &/////////////////////////%@ @/////////////////////////////////////////////////@//&@...
termshark
Termshark A terminal user-interface for tshark, inspired by Wireshark. V2.4 is out now with packet search and profiles for colors and columns! See theChangeLog. If you're debugging on a remote machine with a large pcap and no desire to scp it back to your desktop, termshark can help! Features Rea...
CVE-2026-109995
The Advanced Views β Display Framework for Gutenberg & Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'comment' parameter in all versions up to, and including, 3.9.6 due to insufficient input sanitization and output escaping. This makes it possible for...
EDIDFuzzer
EDID fuzzer A tool for fuzzing Enhanced Display Identification Data Released as open source by NCC Group Plc - http://www.nccgroup.com/ Developed by Andy Davis, andy dot davis at nccgroup dot com https://www.github.com/nccgroup/EDIDFuzzer Released under AGPL see LICENSE for more information...
CVE-2026-109995 Advanced Views <= 3.9.6 - Unauthenticated Stored Cross-Site Scripting via Comment Content
The Advanced Views β Display Framework for Gutenberg & Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'comment' parameter in all versions up to, and including, 3.9.6 due to insufficient input sanitization and output escaping. This makes it possible for...
EUVD-2026-110755
The Advanced Views β Display Framework for Gutenberg & Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'comment' parameter in all versions up to, and including, 3.9.6 due to insufficient input sanitization and output escaping. This makes it possible for...