CVE-2025-24990_POC

Windows Agere Modem Driver ltmdm64.sys. This driver is very old and is not loaded by default on my test machine, so I will exploit it in a BYOVD scenario. Interestingly, according to my research this driver has existed on Windows 7 and has at least one bug. here At that time, MSRC didn't take any...

shocker

Shocker A tool to find and exploit servers vulnerable to Shellshock Ref: https://en.wikipedia.org/wiki/Shellshocksoftwarebug Released as open source by NCC Group Plc - https://www.nccgroup.trust/ Developed By: Tom Watson, tom dot watson at nccgroup dot trust https://github.com/nccgroup/shocker...

CVE-2025-63579

CVE-2025-63579 Unauthorized access to all user names and passwords entered in the Address Book feature found in Kyocera Command Center RX printers. Description Unauthorized use of Kyocera printers, allows all information stored in the Kyocera address book to be exported. The security measure that...

recox

Recox v2.0 RecoX is an incredibly versatile and powerful tool that is specifically designed to aid in the identification and classification of vulnerabilities within web applications. The script is able to detect vulnerabilities that are not typically included in the OWASP top ten vulnerabilities...

bug-free-memory

nate158 https://t.me/Nate158digimon gcloud compute addresses create google-managed-services-VPCNETWORKNAME --global --purpose=VPCPEERING --addresses=192.168.0.0 --prefix-length=16 --network=projects/PROJECTID/global/networks/VPCNETWORKNAME nate15872.wordpress.com...

lightrag-hku: SSRF via IPv6-transition address bypass (NAT64, IPv4-compatible, 6to4) of the native-markdown image-download guard

SummaryLightRAG's native markdown parser downloads external images referenced by an uploaded markdown or textpack document. The only SSRF guard, validatedaddresses in lightrag/parser/markdown/parser.py, resolves the image host and rejects it when the resolved IP is not isglobal. That check is...

hostintel

hostintel This tool is used to collect various intelligence sources for hosts. Hostintel is written in a modular fashion so new intelligence sources can be easily added. Hosts are identified by FQDN host name, Domain, or IP address. This tool only supports IPv4 at the moment. The output is in CSV...

CVE-2026-63563

CVE-2026-63563 - Unauthenticated Address Book Modification on Sharp MX/BP Multifunction Printers Vendor advisory: Sharp Product Security Advisory 2026-004 published July 31, 2026 Summary Sharp MX/BP series multifunction printers expose the address book through the device web interface without...

ios-gamed-0day

iOS gamed exploit fixed in 15.0.2 Update: Apple has quietly fixed this in iOS 15.0.2 without any kind of public acknowledgement or credit. Any app installed from the App Store may access the following data without any prompt from the user: Apple ID email and full name associated with it Apple ID...

kyocera-cve-2022-1026_SOAP1.1

Kyocera cve-2022-1026 soap1.1 Authorized testing only. This project is provided for educational and defensive validation purposes in environments you own or have explicit permission to test. Do not use against systems you do not own or administer. A Kyocera printer exposure check and data-retriev...

CVE-2020-16898-EXP-POC

CVE-2020-16898 CVE-2020-16898 Vulnerabilidad de ejecución remota de código en TCP/IP de Windows EXP&POC Reproducción forforever：https://www.cnblogs.com/forforever/p/13846077.html poc CVE-2020-16898Checker-poc Comando: Iniciar PowerShell/CMD como administrador Powershell.exe -ExecutionPolicy...

sylkie

sylkie A command line tool and library for testing networks for common address spoofing security vulnerabilities in IPv6 networks using the Neighbor Discovery Protocol. Getting Started Note: This project is still in the early phases of development. If you run into any problems, please consider...

pymultitor

PyMultiTor Python Multi Threaded Tor Proxy, Did you ever want to be at two different places at the same time? When I asked myself this question, I actually started developing this solution in my mind. While performing penetration tests there are often problems caused by security devices that bloc...

fast-uri: fast-uri: Server-side request forgery via malformed IPv6 normalization

A flaw was found in fast-uri, a URI parser for Node.js. Its custom parser for bracketed IPv6 literals does not fully validate the IPv6 grammar, allowing invalid trailing text in an authority to be silently discarded. This can lead to a malformed, attacker-controlled host being normalized into a...

VLC-CVE-2008-4654-Exploit

VLC-CVE-2008-4654-Exploit Well, it's just an old vulnerability whose CVE number is CVE-2008-4654. This vulnerability is caused by Out of Memory at line 1650 of modules/demux/ty.c. streamReadpdemux-s, mstbuf, 8 + imapsize; When I downloaded the EXP from other websites, I found that it doesn't work...

Vol3xp

Vol3xp, Plugins de Volatility 3 Explorer WinObj - Explorador de Objetos del Kernel de Windows, una mejora de https://github.com/kslgroup/WinObj para Volatility 3 winobj.py WinObj muy similar a WinObj Sysinternals También es compatible con Struct Analyzer y WinObjGui de VolExp. RAMMap - Mapeo de...

cve-2023-31355-poc

SEV Firmware Vulnerability This repo contains an exploit for a vulnerability in the SEV firmware. The exploit allows decrypting arbitrary memory of an SEV-SNP guest after it's been decommissioned. Tested on version 1.55.16 latest as of time of writing. Root Cause snpreclaimbuffer unconditionally...

CVE-2019-10149

CVE-2019-10149 CVE-2019-10149 : A flaw was found in Exim versions 4.87 to 4.91 inclusive. Improper validation of recipient address in delivermessage function in /src/deliver.c may lead to remote command execution. Example nc -lvp 9000 python ./CVE-2019-10149/exploit.py --rhost example.com --rport...

CVE-2020-0022

CVE-2020-0022 Many thanks to Insinuator for their amazing blog post and code! Results All the steps mentioned in the insinuator post have been completed, and more. These are a lot of steps to put in a README.md file, so feel free to check out the post from Insinuator mentioned above. The exploit ...

CVE-2026-39259

SmallerC scanf s Stack.md SmallerC - scanf %s Stack Buffer Overflow Project: https://github.com/alexfru/SmallerC SmallerC's scanf implementation does not enforce an upper bound on string reads when %s or % is used without an explicit field width in the format string The runtime will continue...