cve-2021-3864

Test pour CVE-2021-3864. Comment exécuter créer un utilisateur echo ALL= path/to/gen-core /etc/sudoers sysctl kernel.corepattern=core ./cve-2021-3864 Cela devrait générer un fichier core dans /etc/logrotate.d...

POC-DUMP

POC-DUMP تقرير أو سكربتات لأي أخطاء/ثغرات مثيرة للاهتمام وجدتها. ثغرات CVE الحالية والعدد في ازدياد: • CVE-2021-35475 • CVE-2022-36194 • CVE-2022-36667 • CVE-2022-36668 • CVE-2022-36669 • CVE-2022-37137 • CVE-2022-37138 • CVE-2022-37139 • CVE-2022-37140 • CVE-2022-3211 • CVE-2022-3231...

ipwndfu

Outil open-source de jailbreak pour de nombreux appareils iOS Lisezavertissement avant d'utiliser ce logiciel. checkm8 exploit bootrom permanent et non corrigeable pour des centaines de millions d'appareils iOS destiné aux chercheurs, ce n'est pas encore un jailbreak avec Cydia permet d'extraire...

git-dump

git-dump Ce script est un outil permettant de télécharger récursivement le contenu du répertoire « .git » d'un site web. En utilisant Python et des bibliothèques comme « requests » et « BeautifulSoup », ce script examine la structure des répertoires, télécharge les fichiers et identifie les...

redis-exploitation

redis-exploitation CONFIG SET لأغراض تعليمية فقط البناء $ docker build -t victim . التشغيل $ docker run -d --name victim victim الهجوم $ docker exec -it victim bash root@34ea33cb2eb2 / ls /var/spool/cron/ root@34ea33cb2eb2 / redis-cli 127.0.0.1:6379 config set dir /var/spool/cron/ OK 127.0.0.1:63...

CVE-2026-Termius

تقرير ثغرات تطبيق Termius لنظام macOS CVE-2026-Termius الهدف : Termius نظام macOS الإصدار الذي تم اختباره : الأحدث حتى يناير 2026 الأثر : تنفيذ التعليمات البرمجية عن بُعد RCE، تصعيد الامتيازات المحلية LPE، تجاوز أمان التطبيق 🚨 الملخص التنفيذي تم تحديد ثلاث ثغرات حرجة في تطبيق Termius لنظام macOS...

CVE-2024-30052

This repository hosts materials related to CVE-2024-30052. More details about the vulnerability can be found in my blog post. structure builder folder contains source files for a program that crafts a dump file that exploits the vulnerability. poc folder contains three proof-of-concept files that...

Blackash-CVE-2025-12762

🔐 CVE-2025-12762 — Critical RCE Vulnerability in pgAdmin 4 🚨 What’s the Issue? A Remote Code Execution RCE flaw exists in pgAdmin 4 versions ≤ 9.9. Attackers can run arbitrary commands on the host when pgAdmin is running in server mode and processes a PLAIN-format SQL dump during restore. ⚙️...

CLEANSTART-2026-QE41365 undici's dump interceptor reads and discards a response body up to a configurable maximum size

CVE-2026-84947 affects multiple packages. undici's dump interceptor reads and discards a response body up to a configurable maximum size. See references for individual vulnerability details...

CVE-2025-20260

CVE-2025-20260 - ClamAV PDF Scanning Buffer Overflow First Public PoC First public proof-of-concept for CVE-2025-20260 CVSS 3.1 base score 9.8, Critical, a buffer-overflow vulnerability in the PDF scanning path of ClamAV. This repository contains a generator for the malicious PDF that triggers th...

KsDumper-11

KsDumper-11 https://github.com/mastercodeon314/KsDumper-11/assets/78676320/9452970c-27cf-44df-b091-0d18a07937e5 Nouveautés v1.3.4 Nouvelle fonctionnalité ajoutée : Détection Anti Anti-Debugging Tools Titre de la fenêtre principale, la plupart des titres de contrôles et le nom du fichier exe...

CVE-2026-31024

CVE-2026-31024 Vulnerability Report: Steghide Stack-Based Buffer Overflow & Information Disclosure Field| Value ---|--- Target Application| Steghide Linux Binary Affected Version| 0.5.1 Confirmed; earlier versions likely affected Vulnerability Type| Stack-Based Buffer Overflow CWE-121 Impact|...

CVE-2014-160

CVE-2014-160 exploit Use like this: ./cve-2014-160 dvwa.local https && strings datadump.bin...

CVE202015808

CVE-2020-15808 A proof of concept of CVE-2020-15808 vulnerability exploit on STM32F4 Discovery board Requirements Firmware version older than 1.25.2 Board with VCP ex. STM32F4 discovery arm-none-eabi toolchain Steps to reproduce the exploit 1. Move to VulnerableFirmwareF4 and compile through make...

EEF-CVE-2026-94206 Cloak PBKDF2 field ignores the configured iteration count and runs only :size rounds

Summary Use of Password Hash With Insufficient Computational Effort vulnerability in danielberkompas cloakecto and danielberkompas cloak allows an attacker who holds the hashed values and the configured secret to brute-force low-entropy plaintexts much faster than configured. The dump/1 callback...

ztewaste

ZTE Diagnostics Dump Proof of Concept Extract a concerning amount of user information from Unisoc ZTE devices using CVE-2022-38694. !CAUTION Please do not permalink here!!!!! The repo name is almost certainly going to change in the future. Instead, provide a link to my writeup on my blog. Writeup...

Advanced-SQL-Injection-Cheatsheet

Aide-mémoire sur l'injection SQL basée sur les erreurs MySQL C'est probablement la vulnérabilité la plus facile à exploiter lors d'une attaque par injection SQL. Un attaquant peut énumérer et extraire la base de données MySQL en utilisant les messages d'erreur SQL à son avantage. Détection de la...

PT-2026-106613

In the Linux kernel, the following vulnerability has been resolved: netlink: do not free nlk-groups while lockless readers can use it netlink realloc groups uses krealloc under netlink table grab. Whenever NLGRPSZgroups lands in a different kmalloc bucket, the old bitmap is freed immediately. Two...

ShiningAppMask-ReverseEngineering

ShiningAppMask-ReverseEngineering Intro After recently buying a Shining App Mask, I was curious about the Shining Mask App and mask and how they worked. I decided to reverse engineer it to understand how it worked. The journey started with the hardware. The Android Mobile App can be found here:...

CiscoRV320Dump

CiscoRV320Dump CVE-2019-1653/CVE-2019-1652 Exploits For Dumping Cisco RV320 Configurations and getting RCE Implementations of the CVE-2019-1652 and CVE-2019-1653 exploits disclosed by Red Team Pentesting GmbH. I only tested these on an RV320, but according to the Cisco advisory, the RV325 is also...