redis-poc

Redis Authenticated RCE stream NACK double free, TDigest & TopK module bugs Non-destructive RCE exploits for Redis 6.2.22, 7.4.9, 8.6.4 via the stream consumer-group shared-NACK double free a patch bypass of CVE-2026-25243, 8.8.0 via a TDigest heap-overflow in bundled RedisBloom, and 8.8.1 via a...

fuzztruction

Fuzztruction Fuzztruction is an academic prototype of a fuzzer that does not directly mutate inputs as most fuzzers do but instead uses a so-called generator application to produce an input for our fuzzing target. As programs generating data usually produce the correct representation, our fuzzer...

restler-fuzzer

RESTler What is RESTler? RESTler is the first stateful REST API fuzzing tool for automatically testing cloud services through their REST APIs and finding security and reliability bugs in these services. For a given cloud service with an OpenAPI formerly Swagger specification, RESTler analyzes its...

EtwLeakKernel

EtwLeakKernel This repository contains a PoC for a program that utilizes ETW to leak kernel memory addresses. It does so by creating a consumer could be to almost any provider as almost all of them leak kernel addresses and requesting a stack trace from it. Once the stack trace is received, it is...

atproto

Blacksky AppView This is Blacksky's fork of the AT Protocol reference implementation by Bluesky Social PBC. It powers the AppView at api.blacksky.community. We're publishing this for transparency and so other communities can benefit from the work. This repository is not accepting contributions,...

OAuth-Request-Crafter

OAuth-Request-Crafter OAuth Request Crafter is a tool that helps you to play with OAuth signature protected URLs. Features Support GET,POST,PUT and DELETE Proxy the Request Tamper URL, Parameters & Headers on the GO Add additional Headers and Cookie Why? When dealing with OAuth signature protecte...

MeshTNC

MeshTNC MeshTNC is a tool for piping LoRa data to and from consumer grade radios. Code - github.com/datapartyjs/MeshTNC Releases - github.com/datapartyjs/MeshTNC/releases Support - ko-fi/dataparty Features Simple serial cli built into the firmware Transmit raw bytes hex over LoRA using serial CLI...

CVE-2017-2751

You'll find the .tex and .pdf file for CVE-2017-2751, a BIOS/EFI password extraction for consumer HP laptops...

dlink-dir-819-dos

CVE-2022-40946 Exploit: Unauthenticated Denial of Service in DLink consumer DIR 819 A1 routers Exploit Fetch the sources $ git clone https://github.com/whokilleddb/dlink-dir-819-dos $ cd dlink-dir-819-dos $ pip install -r requirements.txt Run the exploit $ ./exploit.py -i 192.168.0.1 + DLink...

Spring-Kafka-POC-CVE-2023-34040

Spring Kafka Deserialization POC Requirements Java 11 Maven Docker or Kafka Usage First start up the Dockerized Kafka instance. This will start up Kafka and make it available on port 29092. docker-compose up Start up the Consumer application. cd spring-kafka-consumer mvn clean install mvn...

invokeai-consumer

invokeai-consumer Demo consumer app pinned to invokeai==5.0.1 — used by Endor Labs to demonstrate vulnerability detection and exploit-chain analysis against the upstream invokeai library. v5.0.1 is the specific release named in the source CVE CVE-2024-10821...

ollama-consumer

ollama-consumer Demo consumer app pinned to github.com/ollama/ollama v0.5.0 — used by Endor Labs to demonstrate vulnerability detection and exploit-chain analysis against the upstream ollama library...

gin-vulnerable

gin-vulnerable Demo consumer pinned to github.com/gin-gonic/gin v1.7.0 vulnerable to CVE-2023-29401. The /download/:filename handler passes user input directly to Context.FileAttachment — the exploit-condition pattern Endor flags as exploitable...

CVE-2026-40860

camel-jms JMS ObjectMessage Unsafe Deserialization Reproducer CVE-2026-40860 This project demonstrates a Java deserialization vulnerability in Apache Camel's camel-jms component and, transitively, camel-sjms, camel-sjms2, camel-amqp, camel-activemq, camel-activemq6, tracked as CVE-2026-40860...

org.jenkins-ci.plugins:rabbitmq-build-trigger (>=1.0, <=1.1), org.jenkins-ci.plugins:rabbitmq-consumer (>=1.0, <=1.1) potentially affected by CVE-2026-106121 via com.rabbitmq:amqp-client (3.0.3)

com.rabbitmq:amqp-client MAVEN version 3.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - org.jenkins-ci.plugins:rabbitmq-build-trigger =1.0, =1.0, =1.1 Source cves: CVE-2026-106121 Source advisory:...

org.apache.camel:camel-rabbitmq (>=2.13.0, <=2.13.4), org.axonframework:axon-amqp (2.1) +3 more potentially affected by CVE-2026-106121 via com.rabbitmq:amqp-client (3.2.2)

com.rabbitmq:amqp-client MAVEN version 3.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - org.apache.camel:camel-rabbitmq =2.13.0, =2.1, =2.1, =2.6 Source cves: CVE-2026-106121 Source advisory:...

GHSA-7822-RCF6-97FX RabbitMQ: Malformed UTF-8 in shortstr properties permanently disables RPC consumers

Summary A single AMQP message with malformed UTF-8 in a shortstr property for example correlation-id can permanently disable a Java client RPC consumer. The client decodes malformed bytes into U+FFFD replacement characters. Each of those re-encodes to 3 bytes, so a 255-byte property becomes 765...

org.apache.camel:camel-rabbitmq (>=2.13.0, <=2.13.4), org.axonframework:axon-amqp (2.1) +3 more potentially affected by CVE-2026-106122 via com.rabbitmq:amqp-client (3.2.2)

com.rabbitmq:amqp-client MAVEN version 3.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - org.apache.camel:camel-rabbitmq =2.13.0, =2.1, =2.1, =2.6 Source cves: CVE-2026-106122 Source advisory:...

org.jenkins-ci.plugins:rabbitmq-build-trigger (>=1.0, <=1.1), org.jenkins-ci.plugins:rabbitmq-consumer (>=1.0, <=1.1) potentially affected by CVE-2026-106122 via com.rabbitmq:amqp-client (3.0.3)

com.rabbitmq:amqp-client MAVEN version 3.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - org.jenkins-ci.plugins:rabbitmq-build-trigger =1.0, =1.0, =1.1 Source cves: CVE-2026-106122 Source advisory:...

org.apache.camel:camel-rabbitmq (>=2.13.0, <=2.13.4), org.axonframework:axon-amqp (2.1) +3 more potentially affected by CVE-2026-106123 via com.rabbitmq:amqp-client (3.2.2)

com.rabbitmq:amqp-client MAVEN version 3.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - org.apache.camel:camel-rabbitmq =2.13.0, =2.1, =2.1, =2.6 Source cves: CVE-2026-106123 Source advisory:...