227874 matches found
RCE-Cacti-1.2.22
RCE-Cacti-1.2.22 这是一个使用 Python3 复现的 CVE-2022-46169 漏洞利用代码！如果你正在做一台 HTB 的机器，这可能对你有用…… 🤞✨...
IonStack-S22-cve-2026-43499
IonStack-S22-cve-2026-43499 私の SM-S901W S22（5.10.168-android12-9-27760517-abS901WVLS4DWL3）で、SELinux が permissive のカーネルドメインにてフル root を取得。 注記:...
CVE-2023-38831-Exploit-and-Detection
CVE-2023-38831-Exploit-and-Detection 이 저장소에는 WinRAR CVE-2023-38831 취약점에 대한 공격 탐지 도구와 개념 증명PoC Python 스크립트가 모두 포함되어 있습니다...
CVE-2026-77988
A weakness has been identified in TRENDnet TEW-823DRU 1.1.02b01. This vulnerability affects the function nvramget of the component CLI Configuration Tool. This manipulation causes command injection. The attack is possible to be carried out remotely. The exploit has been made available to the publ...
CVE-2026-77988
A command injection vulnerability exists in the TRENDnet TEW-823DRU (firmware 1.1.02b01), specifically in the nvram_get function of the CLI Configuration Tool . The flaw allows a remote attacker with high privileges to inject and execute arbitrary commands. A proof-of-concept exploit has been mad...
CVE-2026-77988 TRENDnet TEW-823DRU CLI Configuration Tool nvram_get command injection
A weakness has been identified in TRENDnet TEW-823DRU 1.1.02b01. This vulnerability affects the function nvramget of the component CLI Configuration Tool. This manipulation causes command injection. The attack is possible to be carried out remotely. The exploit has been made available to the publ...
EUVD-2026-64252
A weakness has been identified in TRENDnet TEW-823DRU 1.1.02b01. This vulnerability affects the function nvramget of the component CLI Configuration Tool. This manipulation causes command injection. The attack is possible to be carried out remotely. The exploit has been made available to the publ...
CVE-2026-77945
A vulnerability was found in TRENDnet TEW-821DAP 2.2.01b05. Affected is an unknown function of the file /cgi-bin/upload.cgi of the component ssi. Performing a manipulation of the argument filename results in command injection. The attack may be initiated remotely. The exploit has been made public...
EUVD-2026-64245
A vulnerability was found in TRENDnet TEW-821DAP 2.2.01b05. Affected is an unknown function of the file /cgi-bin/upload.cgi of the component ssi. Performing a manipulation of the argument filename results in command injection. The attack may be initiated remotely. The exploit has been made public...
reconix
Reconix 정찰 인텔리전스 엔진 | 유출 스캐너 | 위협 인텔리전스 제품군 🔍 심층 노출 인텔리전스 • ⚡ 고신호 정찰 엔진 ⚠️ 법적 고지 Reconix는 승인된 보안 테스트, 버그 바운티 프로그램 및 방어 연구를 위해 독점적으로 설계되었습니다. ✅ 허용 : 소유한 대상 스캔 ✅ 허용 : 명시적 서면 허가를 받은 대상 스캔 ✅ 허용 : CTF 대회에서 사용 ❌ 금지 : 승인되지 않은 시스템 스캔 ❌ 금지 : 악의적인 목적으로 사용 승인되지 않은 스캐닝은 불법이며 컴퓨터 사기 법률에 따라 처벌됩니다. 전체 고지 사항은...
awesome-exploit-development
awesome-exploit-development Una lista curada de recursos libros, tutoriales, cursos, herramientas y aplicaciones vulnerables para aprender sobre desarrollo de exploits Un proyecto de Fabio Baroni. ¡Lee el artículo completo aquí!...
palera1n
palera1n Jailbreak para dispositivos A8 hasta A11, T2, en iOS/iPadOS/tvOS 15.0, bridgeOS 5.0 y versiones superiores. --- Una captura de pantalla de palera1n usándose en una Terminal Soporte de dispositivos Ten en cuenta que en A11 iPhone X, 8, 8 Plus, debes desactivar tu código de acceso mientras...
htb-sau-exploit-chain
HTB Sau エクスプロイトチェーン — CVE-2023-27163 SSRF + Maltrail RCE 自動化 CVE-2023-27163（Request Baskets ≤ 1.2.1 のサーバーサイドリクエストフォージェリ）と Maltrail 0.53 の認証不要のリモートコード実行脆弱性を連鎖させ、リバースシェルを送信する Python エクスプロイトスクリプトです。Hack The Box の Sau マシン向けに設計されています。 📌 概要 このスクリプトは、ターゲットへの初期アクセスを獲得するために必要なエクスプロイト経路を自動化します： 1...
PT-2026-79532
A weakness has been identified in TRENDnet TEW-823DRU 1.1.02b01. This vulnerability affects the function nvram get of the component CLI Configuration Tool. This manipulation causes command injection. The attack is possible to be carried out remotely. The exploit has been made available to the...
VulnCheck KEV: CVE-2025-10164
A security flaw has been discovered in lmsys sglang 0.4.6. Affected by this vulnerability is the function main of the file /updateweightsfromtensor. The manipulation of the argument serializednamedtensors results in deserialization. The attack can be launched remotely. The exploit has been releas...
PT-2026-79528
A vulnerability was found in TRENDnet TEW-821DAP 2.2.01b05. Affected is an unknown function of the file /cgi-bin/upload.cgi of the component ssi. Performing a manipulation of the argument filename results in command injection. The attack may be initiated remotely. The exploit has been made public...
PT-2026-79742
Name of the Vulnerable Software and Affected Versions Comfast CF-N1-S version 2.6.0.1 Description A stack-based buffer overflow exists in the Web Management component. The issue occurs when the device processes input for NTP timezone settings via the /cgi-bin/mbox-config?method=SET§ion=ntp...
lexmark
Lexmark 打印机相关 这个仓库包含了我公开发布的所有与 Lexmark 打印机相关的工作。 你们中的大多数人可能是冲着固件解密工具来的；请查看 tools 文件夹。 exploit 文件夹包含了我开发的一个（在当时属于）0day 漏洞利用，它似乎影响了超过 100 种不同的 Lexmark 打印机型号。这个漏洞利用最初是为 Pwn2Own Toronto 2022 开发的，并在实际比赛期间神奇地失败了。ZDI 无论如何都提出要以一个可笑的金额购买这些漏洞，而我很快就忘了他们的报价。 和往常一样：所有内容均按原样分发，不要期待支持/更新。 尽情享用！ -- blasty...