CVE-2024-27804

CVE-2024-27804 ./build.sh ./panic.sh paniccpu 4 caller 0xfffffe0026851cdc: Unaligned kernel data abort. at pc 0xfffffe0026aed514, lr 0xfffffe0026aed5d8 saved state: 0xfffffe3a396e3200 x0: 0x000000000000000e x1: 0xfffffe1002bdc01b x2: 0x0000000000000000 x3: 0xfffffe3a396e3444 x4: 0xfffffe3a396e344...

CVE-2025-31161

CVE-2025-31161 is a critical severity vulnerability allowing attackers to control how user authentication is handled by CrushFTP managed file transfer MFT software. Affected versions: 10.0.0 through 10.8.3 and 11.0.0 through 11.3.0 Exploit summary: Remote and unauthenticated HTTP requests to...

CVE-2024-36971

CVE-2024-36971 — Proof of Concept Research & Analysis Only ⚠️ DISCLAIMER — READ BEFORE USING THIS REPOSITORY This repository is intended only for defensive research, analysis, and responsible reporting. It contains a non-exploitable proof of concept file named CVE-2024-36971 and a publicly...

react

Dumping data from React internals This tool is a quick and dirty userscript for Tampermonkey that digs a couple of levels into any React page and searches for one or more phrases provided by the user. The tool makes it easy to find the right spot in the DOM where React attaches large chuncks of...

AperiSolve

Aperi'Solve Try it now: https://www.aperisolve.com Support Aperi'Solve: Aperi'Solve is an open-source steganalysis web platform that performs automated analysis on images to detect and extract hidden data using common steganography tools and techniques. Key features Visualize each bit layer LSB a...

CVE-2020-5248

CVE-2020-5248 Proof of Concept PoC for CVE-2020-5248. Summary GLPI before before version 9.4.6 has a vulnerability involving a default encryption key. GLPIKEY is public and is used on every instance. This means anyone can decrypt sensitive data stored using this key. It is possible to change the...

MOVEit-Transfer-Data-Breach-Analysis.

MOVEit-Transfer-Data-Breach-Analysis. ​Detailed analysis of the 2023 MOVEit Transfer data breach CVE-2023-34362 for CS50 Cybersecurity. This project explores the technical impact of unauthenticated SQL Injection and its consequences for global data privacy, affecting 2,700+ organizations. Special...

steghide

This repository is read-only. A GitHub org,StegHigh has been set up to maintain steghide. Please submit all PRs, discussions, and issues there. Additionally,StegHigh/steghide is looking for maintainters. Please contribute! Introduction : Steghide is a steganography program that is able to hide da...

basecrack

BaseCrack Decoder For Base Encoding Schemes BaseCrack is a tool written in Python that can decode all alphanumeric base encoding schemes. This tool can accept single user input, multiple inputs from a file, input from argument, multi-encoded bases , bases in image EXIF data , bases on images with...

Blackash-CVE-2025-61884

CVE-2025-61884 New Oracle E-Business Suite Bug Could Let Hackers Access Data Without Login 💀 CVE-2025-61884 — Complete summary 🧾💥 Field| Details ---|--- Identifier| CVE-2025-61884 Product| Oracle E-Business Suite — Oracle Configurator Runtime UI Affected versions| 12.2.3 → 12.2.14 Attack vector|...

secretflow

简体中文｜English SecretFlow is a unified framework for privacy-preserving data intelligence and machine learning. To achieve this goal, it provides: An abstract device layer consists of plain devices and secret devices which encapsulate various cryptographic protocols. A device flow layer modeling...

ABD

Advanced Binary Deobfuscation This repository contains the course materials of Advanced Binary Deobfuscation at the Global Cybersecurity Camp GCC Tokyo and the Security Camp National Workshop in 2020. Course Abstract Reverse engineering is not easy, especially if a binary code is obfuscated. Once...

privacy-parser

Privacy Parser Find every piece of PII in a pile of text and get it back as structured spans. Built on OpenAI Privacy Filter: same 1.5B model, same labels, same weights. Privacy Filter masks. Privacy Parser extracts. Hi Quindle Testwick [email protected] / +1-415-555-0102, account...

raven

Raven - Advanced Cyber Threat Map Simplified, customizable and responsive. It uses D3.js with TOPO JSON, has 247 countries, 100,000 cities, and can be used in an isolated environment without external lookups!. Structure Offline - Demo Firefox, Chrome or Safari Live - Regression 500 attacks at onc...

peeko

peeko Version: v1.1 peeko is a browser-based XSS-powered C2 Command and Control tool that leverages the victim’s browser as a stealthy proxy inside internal networks. Through an injected XSS payload, peeko establishes a WebSocket connection to a central server, allowing an attacker to remotely...

XFLTReaT

XFLTReaT This is just one thing of many things that was missing from the Internet. If you got tired of trying several tunnelling tools for each protocols, this must be your tool ^W framework. If you are interested in the details, please read the Wiki. Available modules TCP UDP ICMP SOCKS v4, 4a, ...

CVE-2026-25212

CVE-2026-25212 – Percona PMM RCE PoC Critical – CVSS 9.9 – Authenticated Remote Code Execution in PMM 3.7. Description This proof‑of‑concept exploits a vulnerability where an internal PostgreSQL user in PMM retains 'SUPERUSER' privileges. An authenticated attacker with 'pmm-admin' rights can abus...

CVE-2022-36804-MASS-RCE

CVE-2022-36804-POC A critical vulnerability CVE-2022-36804 in Atlassian Bitbucket Server and Data Center could be exploited by unauthorized attackers to execute malicious code on vulnerable instances. affected versions All versions of Bitbucket Server and Data Center released before versions...

BL00DYM4RY

🎭 BloodyMary Trojan Phishing Simulator 📋 Description BloodyMary is an educational tool trojan-virus or Ransomware for training cybersecurity specialists, simulating realistic phishing attacks with social engineering elements. This project was created to raise awareness about cyber threats and...

CVE-2020-11019

CVE-2020-11019 In FreeRDP less than or equal to 2.0.0, when running with logger set to "WLOGTRACE", a possible crash of application could occur due to a read of an invalid array index. Data could be printed as string to local terminal. This has been fixed in 2.1.0. authentication| complexity|...