1462398 matches found
openmagic
openmagic openmagic can assist you in the automating testing and exploiting of systems vulnerable to the OpenSSL TLS heartbeat read overrun CVE-2014-0160. The base module wraps a modified version of the "ssltest.py" program by Jared Stafford and provides the following additional features: Save th...
GhostLock
GhostLock 5.10 This is a kernel root exploit for the Amazon Fire Max 11 sunstone and the Fire TV Stick 4K Max 2nd Gen / 2023 karat, adapted from CVE-2026-43499 in CyberMeowfia. Supported devices Two devices are supported, both on Fire OS 8. Each has its own build target. Fire Max 11 sunstone Fire...
CVE-2021-4034
CVE-2021-4034 This repository contains the exploit for vulnerability CVE-2021-4034 . Steps: 1. gcc cve-2022-4034 -o cve-2022-4034 2 ./cve-2022-4034...
MitigationToolkit-ROSN-LR5-Full
🧬 ROSN-LR5 – Kernel LPE PoC & Mitigation Toolkit CVE-2026-31431 Offensive and defensive tool for the CVE-2026-31431 vulnerability on Linux systems. It combines a local privilege escalation LPE proof of concept with utilities to review and temporarily mitigate the AFALG-based attack vector. ⚖️...
skeleton
Skeleton but pronounced like Peloton A Zero-Click RCE exploit for CVE-2021-0326 on the Peloton Bike And also every other unpatched Android Device PoC requires ASLR to be disabled. Associated blog post:...
CVE-2024-29849
CVE-2024-29849 Veeam Backup Enterprise Manager Authentication Bypass CVE-2024-29849 by Sina Kheirkhah @SinSinology of SummoningTeam @SummoningTeam Technical Analysis A root cause analysis of the vulnerability can be found on my blog Summary Supported versions? According to Veeam official advisory...
CVE-2024-32002-linux-submod
This repository does not have a README...
Nessus_CVE-2014-6271_check
NessusCVE-2014-6271check Quick and dirty nessus .audit file to check is bash is vulnerable to CVE-2014-6271...
CVE-2021-4034-Linux
CVE-2021-4034 PoC for PwnKit: Local Privilege Escalation Vulnerability in polkit’s pkexec CVE-2021-4034 https://seclists.org/oss-sec/2022/q1/80...
CVE-2026-59310
CVE-2026-59310 Donate Support the maintenance of this project with PayPal or by scanning the QR code below. ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments...
cve-2022-44268-detector
cve-2022-44268-detector - detect malicious PNGs cve-2022-44268-detector is a Go program that consumes PNGs and reports whether they appear to be malicious images generated by an exploit for CVE-2022-44268, an ImageMagick vulnerability that allows attackers to read arbitrary file contents using...
CVE-2020-3452
This repository does not have a README...
CVE-2023-51385-save
This repository does not have a README...
log4j_scanner
Filesystem log4jscanner for windows and Unix. Scanning for CVE-2021-44228, CVE-2021-45046, CVE-2019-17571, CVE-2021-44832 Requires a minimum of Python 2.7. Can be executed as Custom Script Rule of an Audit or via a Server Script with Server Automation. Also executable standalone from the command...
cve-2020-11023-scanner
💥 CVE-2020-11023 Scanner: Find and Conquer XSS Before It's Too Late! 💥 Are you haunted by the specter of Cross-Site Scripting XSS vulnerabilities lurking in your JavaScript code? Worried about CVE-2020-11023 leaving your web applications open to attack? Fear no more! The CVE-2020-11023 Scanner is...
proftpd-cve-2019-12815
ProFTPD 1.3.x README Status Introduction ProFTPD is a highly configurable FTP daemon for Unix and Unix-like operating systems. See the README.ports file for more details about the platforms on which ProFTPD in known or thought to build and run. ProFTPD grew from a desire for a secure and...
CVE-2022-3602-and-CVE-2022-3786
CVE-2022-3602-and-CVE-2022-3786 This is a detection script which will determine whether client authentication is required by the SSL server, in which case servers based on OpenSSL 3.0.0 to 3.0.6 will be vulnerable to both CVE-2022-3602 and CVE-2022-3786 Prerequisite's python3 pip install -r...
publications
Publications from Calif MAD Bugs: Month of AI-Discovered Bugs Apple Internals A series reverse-engineering Apple's internals. Security Research A Race Within A Race: Exploiting CVE-2025-38617 in Linux Packet Sockets Security Audits Shamir39 Security Audit, commissioned by an unnamed client. Mbed...