ShiningAppMask-ReverseEngineering

ShiningAppMask-IngenieríaInversa Introducción Después de comprar recientemente una Shining App Mask, sentí curiosidad por la aplicación Shining Mask y la máscara y cómo funcionaban. Decidí aplicar ingeniería inversa para entender cómo funcionaba. El viaje comenzó con el hardware. La aplicación...

Root-My-Galaxy-Payloads

Root My Galaxy Payloads This repository contains the device-specific native side of Root My Galaxy: exact firmware profiles and offsets; the app-domain CVE-2026-43499 exploit source and compiled payload; the app bootstrap helper source; the verified KernelSU late-load build artifacts; the support...

CVE-2026-88393

WookTeam v1.6.6 and before is vulnerable to RCE in the project task export interface /api/project/task/export. The data parameter is base64-decoded and passed directly into the string2array function in app/Module/Base.php, which executes eval"$array = $data;" whenever the decoded string starts...

c-CVE-2024-0044

CVE 2024 0044 CVE-2024-0044, identificada en la función createSessionInternal del archivo PackageInstallerService.java, es una vulnerabilidad de alta gravedad que afecta a Android versiones 12 y 13. Esta vulnerabilidad permite a un atacante realizar un ataque «run-as any app», lo que provoca una...

CVE-2024-55503

CVE-2024-55503 Termius App MacOS dylib Inyección de comandos Descripción Un problema en termius anterior a v.9.9.0 permite a un atacante local ejecutar código arbitrario mediante un script manipulado en el componente DYLDINSERTLIBRARIES. usando dylib DYLDINSERTLIBRARIES=exploitcombined.dylib...

CVE-2021-26855-Scanner

CVE-2021-26855-Scanner Escáner y PoC para CVE-2021-26855 Crédito a GreyOrder por el PoC. Re-subido por conveniencia y porque Microsoft lo eliminó al menos una vez : Ejemplo de uso para escaneo masivo: shodan download --limit 12345 exchange "http.component:'outlook web+app'" gzip -d exchange.json....

CVE-2024-0044

CVE 2024 0044 CVE-2024-0044, identificada en la función createSessionInternal del archivo PackageInstallerService.java, es una vulnerabilidad de alta gravedad que afecta a las versiones de Android 12 y 13. Esta vulnerabilidad permite a un atacante realizar un ataque de "ejecución como cualquier...

CVE-2021-26855-SSRF-Exchange

CVE-2021-26855-SSRF-Exchange CVE-2021-26855 SSRF Exchange Server Shodan https://beta.shodan.io/search?query=http.component%3A%22outlook+web+app%22 https://beta.shodan.io/search?query=http.html%3A%22%2Fowa%22 Fofa https://fofa.so/result?q=title%3D%22Outlook+Web+App%22...

decrypted

decrypted Descifrador de FairPlay volcado de iPA para aplicaciones iOS que se ejecutan en macOS con SIP habilitado, usando CVE-2025-24204. Compatible con macOS 15.0-15.2 AÚN EN DESARROLLO Créditos CVE-2025-24204 Decryptor...

CVE-2018-19518

CVE-2018-19518 último informe aquí: https://gitlab.com/ensimag-security/CVE-2018-19518/-/jobs/artifacts/master/raw/rapport.pdf?job=PDF Uso ejecutar la aplicación docker-compose up -d ejemplo de uso normal para la aplicación web. imap : webmail.grenoble-inp.org user : [email protected] passwo...

ROOT-APP-NPM-CVE-2026-11525 CVE-2026-11525 in undici - Patched by Root

Root has patched CVE-2026-11525 in the undici package for Root:npm. Multiple fixed versions available...

packages_apps_Nfc_AOSP10_r33_CVE-2020-0215

This repository does not have a README...

CVE-2026-105288 feelec-yishu feelcrm-os Crm Endpoint functions.php index cross site scripting

A vulnerability has been found in feelec-yishu feelcrm-os 1.0.0. Affected by this vulnerability is the function IndexController::index of the file App/ThinkPHP/Common/functions.php of the component Crm Endpoint. Such manipulation of the argument redirecturl leads to cross site scripting. The atta...

CVE-2026-43499-A36

CVE-2026-43499-A36 Standalone, device-tested CVE-2026-43499 port for the Canadian Galaxy A36 5G SM-A366W on exact firmware A366WVLS3AYG1, including KernelSU late-load and Root My Galaxy integration. This repository contains the device-specific native side of Root My Galaxy: exact firmware profile...

CVE-2025-24813_presentation

Este es un proyecto de Next.js iniciado con create-next-app. Primeros pasos Primero, ejecuta el servidor de desarrollo: npm run dev or yarn dev or pnpm dev or bun dev Abre http://localhost:3000 en tu navegador para ver el resultado. Puedes empezar a editar la página modificando app/page.tsx. La...

CVE-2026-105238

A flaw has been found in ChatGPTNextWeb NextChat up to 2.16.1. This vulnerability affects the function proxyHandler of the file app/api/proxy.ts of the component Proxy Fallback Handler. This manipulation of the argument x-base-url causes server-side request forgery. It is possible to initiate the...

CVE-2026-105238

The ChatGPTNextWeb NextChat software, version up to 2.16.1 , is vulnerable to a Server-Side Request Forgery (SSRF) . The flaw exists within the proxyHandler function located in app/api/proxy.ts of the Proxy Fallback Handler component. Specifically, an attacker can manipulate the x-base-url argume...

CVE-2025-55182-Exploiter

🛡️ RSC Sentinel Pro Advanced React Server Components RSC Auditor & CVE-2025-55182 Exploitation Toolkit 🔥 Detect. Fingerprint. Exploit. A Chrome Extension for Security Researchers & Bug Hunters targeting Next.js App Router RSC vulnerabilities — especially CVE-2025-55182 RSC Deserialization RCE. ✅...

POC-ES-File-Explorer-CVE-2019-6447

PoC ES File Explorer 4.1.9.7.4 CVE-2019-6447 This is a very simple implementation in bash of the CVE-2019-6447 PoC. It basically uses curl to send the requests with the right parameters. I've built it as I was looking for a similar script during a CTF and couldn't find any. You can play around wi...

Cappriciosec-University

📚 Cappriciosec University – India’s First Hacker E-Learning Platform Cappriciosec University is India’s first e-learning platform for hackers, cybersecurity beginners, and bug bounty hunters. We are focused on ethical hacking, penetration testing, IoT hacking, cyber crime investigation, and...