CVE-2024-0588

This repository does not have a README...

cve-2021-4034

This repository does not have a README...

regreSSHion-CVE-2024-6387-

CVE-2024-6387 Checker This README provides instructions for using the script to check if your OpenSSH installation is vulnerable to CVE-2024-6387. The script inspects the installed sshd binaries on your system, determines their versions, and checks for vulnerability status based on the detected...

nginxpwner

Nginxpwner Nginxpwner is a simple tool to look for common Nginx misconfigurations and vulnerabilities. Install: cd /opt git clone https://github.com/stark0de/nginxpwner cd nginxpwner chmod +x install.sh ./install.sh Install using Docker git clone https://github.com/stark0de/nginxpwner cd nginxpwn...

sub404

Sub404: A Fast Tool To Check Subdomain Takeover Vulnerability What is Sub 404 Sub 404 is a tool written in python which is used to check possibility of subdomain takeover vulnerability and it is fast as it is asynchronous. Why During recon process you might get a lot of subdomainse.g more than 10...

CVE-2026-56158-.NET-Framework-RCE-PoC-Exploit

CVE-2026-56158 — .NET Framework Remote Code Execution RCE PoC Exploit Critical CVSS 9.8 — Deserialization of Untrusted Data CWE-502 in Microsoft .NET Framework & .NET Runtime Patched: July 14, 2026 | Attributed to: Positive Technologies PT-2026-60174 Table of Contents Overview Vulnerability Detai...

anchore-engine

Anchore Engine IMPORTANT NOTE As of 2023, Anchore Engine is no longer maintained. There will be no future versions released. Users are advised to use Syft and Grype. For users interested in a supported commercial solution for container scanning and complaiance, schedule a demo to see Anchore...

letsdefend-cve-2024-49138-investigation

LetsDefend Investigation: CVE-2024-49138 🔍 Overview Hands-on SOC investigation and incident response simulation using LetsDefend, focused on a real-world exploitation of CVE-2024-49138 — a privilege escalation vulnerability in Windows CLFS driver. 📅 Event Details Event ID : 313 Incident Type :...

CVE-2021-41644

This repository does not have a README...

cve-2013-2072

This repository does not have a README...

Sekiryu

This project was really fun and my first "big" project! Better, smarter, stronger solutions now exist:https://github.com/LaurieWired/GhidraMCP See you space-cowboy Sekiryu v0.0.2 This Ghidra Toolkit is a comprehensive suite of tools designed to streamline and automate various tasks associated wit...

ps5-umtxdbg

NOTES The bug was found in early december 2020, not by me, but a genius who looked 15mins at fbsd and immediately spotted it 🙇‍♂️. This c++ impl was made when experimenting with increasing exploit reliability after ps5 kernel added some heap randomization features. setup vm get vm image wget...

CVE-2022-0847

CVE-2022-0847 Simple reproduction of CVE-2022-0847 Original article by the disclosing author: https://dirtypipe.cm4all.com/ Reproduction Environment Linux kali 5.10.0-kali7-amd64 1 SMP Debian 5.10.28-1kali1 2021-04-12 x8664 GNU/Linux Dependencies gcc Usage Steps git clone...

gha-lab-fb6df3d456

Automated research artifact — not the upstream project. This repository is a disposable lab built by an automated harness for a master's thesis at Université Laval on reproducing published GitHub Actions workflow vulnerabilities. It is a verbatim snapshot of phpgt/Dom at commit...

CVE-2018-10933

This repository does not have a README...

RealTek Jungle SDK - Arbitrary Command Injection

There is a command injection vulnerability on the "formWsc" page of the management interface. Successful exploitation of this vulnerability could lead to remote code execution and compromise of the affected system. id: CVE-2021-35395 info: name: RealTek Jungle SDK - Arbitrary Command Injection...

WordPress Chop Slider 3 - Blind SQL Injection

WordPress Chop Slider 3 plugin contains a blind SQL injection vulnerability via the id GET parameter supplied to getscript/index.php. The plugin can allow an attacker to execute arbitrary SQL queries in the context of the WP database user, thereby making it possible to obtain sensitive informatio...

Eclipse BIRT Viewer - Remote Code Execution

Eclipse BIRT versions 4.8.0 and earlier contain a JSP injection caused by query parameters, letting remote attackers create and access malicious JSP files in the viewer directory, exploit requires sending crafted query parameters. id: CVE-2021-34427 info: name: Eclipse BIRT Viewer - Remote Code...

Kibana - Local File Inclusion

Kibana versions before 6.4.3 and 5.6.13 contain an arbitrary file inclusion flaw in the Console plugin. An attacker with access to the Kibana Console API could send a request that will attempt to execute JavaScript which could possibly lead to an attacker executing arbitrary commands with...

CirCarLife Scada <4.3 - System Log Exposure

CirCarLife Scada before 4.3 allows remote attackers to obtain sensitive information via a direct request for the html/log or services/system/info.html URI. CirCarLife is an internet-connected electric vehicle charging station. id: CVE-2018-12634 info: name: CirCarLife Scada 4.3 - System Log...