CVE-2026-94084

An invalid memory reference vulnerability exists in Suricata's HTTP/2 application-layer engine during multi-buffer management Http2ThreadMultiBuf. When inspected HTTP/2 response traffic triggers signature rules that evaluate the http.responseheader keyword simultaneously with and without sticky...

pocs_slides

Sharing my advisory, poc, slides and scripts to IoT / protocol security. You can find me at: Medium: https://medium.com/@cq674350529 Blog: https://cq674350529.github.io/ Mail: [email protected] Twitter: @cq674350529 Slides OffByOne2025: Patch Diffing, You Are My Sword! A Deep Dive into Two...

midonescanner-android

MidONe Scanner اسکنر حرفه‌ای آی‌پی تمیز CDN · CLOUDFLARE · DNS ⬇️ دانلود APK · 🖥️ دانلود Windows · 📣 کانال تلگرام 🔍 چرا MidONe Scanner؟ بیشتر ابزارهای اسکن IP فقط یک ping ساده می‌زنند — عددی که هیچ ربطی به سرعت واقعی اتصال ندارد. MidONe Scanner متفاوت است: داده واقعی دانلود می‌کند. سرعتی که اپ نشان...

CVE-2026-31278

CVE-2026-31278 Suprema BioStar 2: Active Directory Credential Exposure Metadata Field| Details ---|--- CVE ID| CVE-2026-31278 Vendor| Suprema Inc. Product| BioStar 2 Vulnerability Type| Sensitive Information Disclosure / Credential Exposure Attack Vector| Remote / Authenticated / Low Complexity...

CVE-2026-11118-HTTP-2-Rapid-Reset-DDoS

CVE-2026-11118 – HTTP/2 Rapid Reset DDoS Program Code Python/http2 client + server http2serversim.py - Simple HTTP/2 server that processes reset streams import socket, ssl, h2.connection, h2.events def handle: sock = socket.socket sock.setsockoptsocket.SOLSOCKET, socket.SOREUSEADDR, 1...

St2-052

S2-052 POC Testing Original title: Tomcat Deploying war Original article: http://blog.csdn.net/caiqiiqi/article/details/77861477 Download the last affected version struts-2.5.12 from the Struts2 official website: http://archive.apache.org/dist/struts/2.5.12/struts-2.5.12-apps.zip Note that you on...

st2-048

St2-048 Remote Code Execution Vulnerability Apache Struts 2 possible RCE in the Struts Showcase app in the Struts 1 plugin example in the Struts 2.3.x series http://struts.apache.org/docs/s2-048.html https://cwiki.apache.org/confluence/display/WW/S2-048 Use-Age: python St2-048.py set url :...

Quiksand-CVE-2023-24012

DDS Security Test ROS 2 DDS security research test environment, based on ROS 2 Foxy. Project Introduction This project demonstrates a privilege escalation vulnerability in the ROS 2 SROS2 security framework. By modifying signed permission files, an attacker can cause a node to subscribe to topics...

h2buster

h2buster v0.4d A fast, threaded, recursive, web directory brute-force scanner over HTTP/2 using hyper, inspired by Gobuster. Features Fast and portable - install hyper and run. Multiconnection scanning. Multithreaded connections. Scalable: scans can be as docile or aggressive as you configure the...

h2buster

h2buster v0.4d Un scanner rapide, multithreadé et récursif de force brute de répertoires web sur HTTP/2 utilisant hyper, inspiré par Gobuster. Fonctionnalités Rapide et portable - installez hyper et exécutez. Analyse multi-connexion. Connexions multithreadées. Évolutif : les analyses peuvent être...

isf

Industrial Exploitation Framework ISFIndustrial Exploitation Framework is a exploitation framework based on Python, it's similar to metasploit framework. ISF is based on open source project routersploit. Read this in other languages:English, 简体中文, Disclaimer Usage of ISF for attacking targets...

CVE-2017-5638

CVE-2017-5638 Apache Struts 2 Introduction: Apache Struts 2 is an open source web application framework for developing Java EE Web applications,It is the second generation of the struts framework first released on 10th Oct 2006. Struts Framework is designed in a way that it helps creating Web...

security-onion

Security Onion Security Onion 16.04 has reached End Of Life: https://blog.securityonion.net/2021/04/security-onion-1604-has-reached-end-of.html You can find the new Security Onion 2 repo at: https://github.com/Security-Onion-Solutions/securityonion/...

celerystalk

celerystalk celerystalk helps you automate your network scanning/enumeration process with asynchronous jobs aka tasks while retaining full control of which tools you want to run. Interactive Demo: Bug Bounty Mode HackerOne Interactive Demo: Vulnerability Assessment / PenTest Mode Retired...

HoneyPy

HoneyPy 🍯 A low interaction honeypot with the capability to be more of a medium interaction honeypot. Project status: No longer in active development. Repository will remain for anyone wanting to use or contribute to HoneyPy. I recommend using the honeydb-agent instead:...

CVE-2026-32136_exploit

CVE-2026-32136exploit - AdGuard Home h2c Upgrade Auth Bypass Unauthenticated authentication bypass in AdGuard Home 0.107.73 via HTTP/2 cleartext h2c upgrade. | ---|--- CVE| CVE-2026-32136 CVSS| 9.8 Critical — AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CWE| CWE-287 Improper Authentication Affected| AdGua...

vmp2

Introduction This repository is a collection of legacy tools for working with VMProtect 2 -protected binaries. These tools enable unpacking, analysis, and experimental devirtualization of software protected with VMProtect 2. At the core of this collection is vmprofiler , a utility library that...

Kali-Metasploitable

Audit Report and Security Laboratory Project: Vulnerability Analysis and Secure Network Exploitation Date: April 2026 Author: Ivo Albacete 1. Executive Summary This project involved the deployment of a controlled environment for practicing cybersecurity techniques. A virtualized laboratory was...

SC3010-Computer-Security

SC3010-Computer-Security — CVE-2017-5638 Attack Recreation This repository is part of the SC3010 Computer Security course project. It recreates CVE-2017-5638 , a critical Remote Code Execution vulnerability in Apache Struts 2 versions 2.3.5–2.3.31 and 2.5–2.5.10, famously exploited in the 2017...

RabbitMQ 4.0.x < 4.0.22 / 4.1.x < 4.1.14 / 4.2.x < 4.2.7 Atom Exhaustion via User Tags List

The version of RabbitMQ installed on the remote host is 4.0.x prior to 4.0.22, or 4.1.x prior to 4.1.14, or 4.2.x prior to 4.2.7. It is, therefore, affected by a denial of service vulnerability: - settags/2 maps rabbitdatacoercion:toatom/1 over the user's tags list, and the 20 MB management reque...