snuffleupagus

Snuffleupagus Security module for php7 and php8 - Killing bugclasses and virtual-patching the rest! Key Features • Download • Examples • Documentation • License • Thanks Snuffleupagus is a PHP 7+ and 8+ module designed to drastically raise the cost of attacks against websites, by killing entire b...

mosh

Mosh: the mobile shell Mosh is a remote terminal application that supports intermittent connectivity, allows roaming, and provides speculative local echo and line editing of user keystrokes. It aims to support the typical interactive uses of SSH, plus: Mosh keeps the session alive if the client...

ghostlock-myron-tw

GhostLock for POCO F8 Ultra / REDMI K90 Pro Max — Global & Taiwan Variant myron, WPMTWXM GhostLock CVE-2026-43499 kernel exploit port for the global/Taiwan firmware of the POCO F8 Ultra / REDMI K90 Pro Max codename myron, Snapdragon 8 Elite Gen 5 / SM8850. Target : HyperOS OS3.0.6.0.WPMTWXM —...

CVE-2021-43798

CVE-2021-43798 Grafana 8.x Path Traversal Pre-Auth All credits go to j0v and his tweet https://twitter.com/j0v0x0/status/1466845212626542607 Disclaimer This is for educational purposes only. I am not responsible for your actions. Use at your own discretion. In good faith, I've held back releasing...

npcap

Npcap Npcap is a packet capture and injection library for Windows by the Nmap Project. It is a complete update to the unmaintained WinPcap project with improved speed, reliability, and security. Documentation The complete documentation for Npcap is available in the Npcap Guide on npcap.com. There...

drupal8-REST-RCE

drupal8-REST-RCE CVE-2019-6340 drupal8-REST-RCE /node/1 , CVE-2018-7600 drupal8 RCE /user/register Unix/Linux command - remote code Execution command "id" Usage python drupal8-REST-RCE.py user defined port python drupal8-REST-RCE.py default : 80/tcp updated! Script editted for supporting python3...

cve-2022-42889-intercept

cve-2022-42889-intercept For versions below Java 11, special attention is required, as higher versions have already removed the Javascript interpreter. This solution targets Java 8. Intercept illegal parameters via JVM startup parameters and jps pid. quick start -----------------------load...

CVE-2021-44228

CVE-2021-44228 Log4Shell Proof of Concept CVE-2021-44228 Make sure to use Java 8 JDK. Java 8 Download Images Credits Casey Dunham - Java Reverse Shell kozmer - Initial PoC Legal The author of this script does NOT take any responsibility of how this piece of code is used! This was created solely...

ghostlock-h8q

GhostLock CVE-2026-43499 for Galaxy Z Fold 8 h8q / Fold 8 Ultra q8q Most of this code is based on @polygraphene's fork of the original. Heavy modifications were required because the main primer used select for most published variants of the exploit does not properly align with the rtmutexwaiter...

flawfinder

About This is "flawfinder" by David A. Wheeler. Flawfinder is a simple program that scans C/C++ source code and reports potential security flaws. It can be a useful tool for examining software for vulnerabilities, and it can also serve as a simple introduction to static source code analysis tools...

automatic-api-attack-tool

Automatic API Attack Tool Imperva's customizable API attack tool takes an API specification as an input, and generates and runs attacks that are based on it as an output. The tool is able to parse an API specification and create fuzzing attack scenarios based on what is defined in the API...

Google-Tensor-Chips

Google Tensor Chips — DarWINN NPU Access Direct-access tooling for the Google Tensor NPU DarWINN, reverse-engineered across two generations: Tensor G2 Pixel 7, codename Janeiro and Tensor G3 Pixel 8, codename Rio. Why this exists I was trying to get LLM inference running on the phone and wanted t...

op13-cve-2026-64560

OnePlus 13 OP5D0DL1 CVE-2026-64560 Device-specific adaptation of the CVE-2026-64560 Android proof of concept for the exact OnePlus 13 PJZ110 builds listed below. It provides temporary root access for the current boot through an ADB-shell-only helper. !WARNING This is experimental kernel exploit...

CVE-2021-29447-PoC

CVE-2021-29447 Proof-of-Concept ╔═╗╦ ╦╔═╗ ║ ╚╗╔╝║╣────2021-29447 ╚═╝ ╚╝ ╚═╝ Written By Isa Ebrahim - 0xRar on January, 2023 ═══════════════════════════════════════════════════════════════════════════ Title: Wordpress XML parsing issue in the Media Library leading to XXE Affected versions: Wordpre...

exploit_cve-2021-29447

exploitcve-2021-29447 For educational purposes only. This exploit is supposed to be really convenient tool to get any file from server running wordpress 5.6.2 and php8. see https://wpscan.com/vulnerability/cbbe6c17-b24e-4be4-8937-c78472a138b5 All you need is base wp-admin access and ability to...

XCP_ng_CVE-2026-43284_tester

XCP-ng Dirty Frag Diagnostic — CVE-2026-43284 A community diagnostic tool to determine whether an XCP-ng dom0 host is exposed to CVE-2026-43284 "Dirty Frag", a local privilege escalation vulnerability in the Linux kernel's xfrm-ESP subsystem. TL;DR — All current XCP-ng releases 8.1, 8.2, 8.3...

vmlinux-to-elf

vmlinux-to-elf This tool allows to obtain a fully analyzable .ELF file from a vmlinux/vmlinuz/bzImage/zImage kernel image either a raw binary blob or a preexisting but stripped .ELF file, with recovered function and variable symbols. For this, it scans your kernel for a kernel symbol table...

ca-certificates security update

An update is available for ca-certificates. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The ca-certificates package contains a set of Certificate Authority C...

CVE-2018-7602

CVE-2018-7602 A remote code execution vulnerability exists within multiple subsystems of Drupal 7.x and 8.x. This potentially allows attackers to exploit multiple attack vectors on a Drupal site, which could result in the site being compromised. This vulnerability is related to Drupal core - High...

CVE-2021-4154

CVE-2021-4154 This bug was fix in https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=3b0462726e7ef281c35a7a4ae33e93ee2bc9975b This exploit works on most pre-patch kernels for: CentOS 8 kernels higher than linux-4.18.0-305.el8 Debian 11 kernels higher than 5.10.0-8 Fedor...