f-for-java

f-for-java a project written in go and java i abandoned for CVE-2021-44228 try to fix it if you can XD THE MODULE IN JAVA IS NOT MINE...

CVE-2026-24061-lab

CVE-2026-24061 — Laboratorio de Reproducción ⚠️ Con fines educativos únicamente. Entorno de laboratorio aislado. Francés abajo Resumen Bypass de autenticación crítico CVSS 9.8 en GNU InetUtils telnetd ≤ 2.7. Al inyectar -f root como variable USER mediante la opción Telnet NEWENVIRON, un atacante n...

FMD Android

FMD Android Encuentra tu dispositivo a través de SMS, mensajería instantánea o una interfaz web FMD Server. FMD te permite localizar, hacer sonar, borrar y enviar otros comandos a tu dispositivo cuando está perdido. Su objetivo es ser una alternativa de código abierto segura a Encontrar mi...

B2R2

B2R2 B2R2 is a fully managed binary analysis framework written in F. It provides a rich set of algorithms, functions, and tools for reverse engineering, program analysis, and binary-level inspection. The name B2R2 takes inspiration from R2-D2, the iconic robot from Star Wars. Originally named B2-...

see

Entorno de Ejecución en Aislamiento :Fuente: https://github.com/F-Secure/see :Documentación: https://see.readthedocs.io :Descarga: https://pypi.python.org/pypi/python-see |travis badge| |docs badge| .. |travis badge| image:: https://travis-ci.org/F-Secure/see.svg?branch=master :target:...

CVE-2020-27976

CVE-2020-27976 Exploit osCommerce Phoenix CE . Esto ha producido los mejores resultados durante las pruebas. Los saltos de línea en el payload se reemplazan con espacios antes de la subida. ================== Fuentes: https://www.tenable.com/cve/CVE-2020-27976...

Tylium

Tylium Tuberías de datos primarias para detección de intrusiones, análisis de seguridad y caza de amenazas Estos archivos contienen configuraciones para producir datos EDR detección y respuesta en endpoints además de los registros de sistema estándar. Estas configuraciones permiten la producción ...

CVE-2024-25832-PoC

CVE-2024-25830 and CVE-2024-25832 - DataCube3 Improper Access Control and Unrestricted File Upload. Overview This repository features a Proof of Concept PoC for a two-step exploit chain targeting DataCube3 devices. It combines CVE-2024-25830 Improper Access Control to extract root passwords and...

nextcloud_android

Nextcloud Android app Codacy Badge The Android client forNextcloud. Easily work with your data on your Nextcloud. How to contribute If you want to contribute to Nextcloud, you are very welcome: on our IRC channels and on freenode our forum at https://help.nextcloud.com for translations of the app...

F-Scrack

Para evitar el uso malicioso de este script, este proyecto ha sido eliminado...

FLAIR

F-Secure Lightweight Acquisition for Incident Response FLAIR This document describes the purpose and basic operation of the FLAIR acquisition script. Purpose During investigation of incidents on client estate, there are occasions where no EDR deployed which the IR team can make use of to collect...

lazarus-sigma-rules

Lazarus Sigma Rules The Sigma rules in this repository were created by the F-Secure Countercept Detection and Response Team to provide detection coverage for the Tools, Techniques and Procedures recently used by the Lazarus Group. The blog posts discussing the creation of these Sigma rules can be...

RTOS-F-16-Exploit---CVE-2019-7711

Green Hills INTEGRITY RTOS F-16 Exploit - CVE-2019-7711 Full Format String Exploitation Chain Realistic Ground Maintenance Attack on F-16 Avionics 📋 Description This repository contains a Proof of Concept PoC for CVE-2019-7711 — a Format String vulnerability in the Interpeak IPCOMShell TELNET...

F-logic DataCube3 - SQL Injection

SQL injection vulnerability in f-logic datacube3 v.1.0 allows a remote attacker to obtain sensitive information via the reqid parameter. id: CVE-2024-31750 info: name: F-logic DataCube3 - SQL Injection author: DhiyaneshDK severity: high description: | SQL injection vulnerability in f-logic...

sagemcom-fast-3890-exploit

Sagemcom Fast 3890 exploit This exploit uses the Cable Haunt vulnerability to pop a shell on the Sagemcom F@ST 3890 50.10.19 cable modem, from local network access. Firmware version 50.10.21 or newer should be secure against Cable Haunt. This Proof of concept has specifically been designed to onl...

CVE-2026-33980

CVE-2026-33980 — KQL Injection in adx-mcp-server via tablename parameter Severity : High CVSS 8.3 CWE : CWE-943 — Improper Neutralization of Special Elements in Data Query Logic Affected : adx-mcp-server = 1.1.0 Advisory : GHSA-vphc-468g-8rfp NVD : https://nvd.nist.gov/vuln/detail/CVE-2026-33980...

inetutils-telnetd-auth-bypass

inetutils-telnetd auth bypass lab, CVE-2026-24061 A small lab to play with the auth bypass in inetutils-telnetd 1.9.3 - 2.7 as disclosed on the oss-sec mailing list. 0 This container relies on the fact that inetutils-telnetd is still a vulnerable version in Debian 11 Bullseye. At the time of...

CVE-2026-42208_lab

LiteLLM Proxy SQL Injection GHSA-r75f-5x8p-qvmc A reproduction environment for the SQL injection vulnerability in LiteLLM Proxy's API key authentication flow. Vulnerability Summary...

CVE-2026-24061-Telnetd

CVE-2026-24061 GNU Inetutils Telnetd Authentication Bypass CVE: CVE-2026-24061 Severity: Critical CVSS: 9.8 Critical CWE: CWE-88 — Improper Neutralization of Argument Delimiters in a Command Affected Component: GNU Inetutils telnetd Affected Versions: 1.9.3 through 2.7 Overview CVE-2026-24061 is ...

AZL-99399 CVE-2026-80803 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: nfc: digital: clamp SENSFRES length to the destination buffer digitalinrecvsensfres memcpys resp-len bytes from a remote NFC-F device response into the NFCSENSFRESMAXSIZE-byte target.sensfres field without an upper-bound check. A...