595 matches found
EUVD-2021-31898
Malicious code in bioql PyPI...
Exploit for Improper Input Validation in Microsoft
Email exploit Moniker Link-CVE-2024-21413-Module — Documentati...
dostackbufferoverflowgood
This is a Windows executable file .exe named "dostackbufferoverflowgood.exe" that is intentionally vulnerable to a stack buffer overflow attack. The file is part of a repository on GitHub, which is a collection of resources for a talk on vulnerability exploitation. The file is a 32-bit executable...
applications_hap
It is an offensive tool for mobile applications. The repository contains a collection of HAP HarmonyOS Application Package files, which are likely used for testing or demonstrating various mobile applications on the HarmonyOS platform. The files include demos for features such as flashlight, medi...
Exploit for Deserialization of Untrusted Data in Siemens 6Bk1602-0Aa12-0Tp0_Firmware
Log4J-RCE-Proof-Of-Concept CVE-2021-44228 This is a proof of concept of the log4j rce. Here are some links for the CVE-2021-44228: - https://www.lunasec.io/docs/blog/log4j-zero-day - https://github.com/advisories/GHSA-jfh8-c2jp-5v3q - https://github.com/apache/logging-log4j2/pull/608 -...
Constructing a Photonic Implementation of Quantum Key Distribution
Quantum Key Distribution QKD stands as a revolutionary approach to secure communication, using the principles of quantum mechanics to establish unbreakable channels. Unlike traditional cryptography, which relies on the computational difficulty of mathematical problems, QKD utilizes the inherent...
Linux Distros Unpatched Vulnerability : CVE-2008-4609
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The TCP implementation in 1 Linux, 2 platforms based on BSD Unix, 3 Microsoft Windows, 4 Cisco products, and probably other operating systems allows remote...
Clickjack attack steals password managers’ secrets
Sometimes it can seem as though everything's toxic online, and the latest good thing turned bad is here: Browser pop-ups that look like they're trying to help or authenticate you could be programmed to steal data from your password manager. To make matters worse, most browser extension-based...
Linux Distros Unpatched Vulnerability : CVE-2013-2596
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Integer overflow in the fbmmap function in drivers/video/fbmem.c in the Linux kernel before 3.8.9, as used in a certain Motorola build of Android 4.1.2 and othe...
Exploit for Out-of-bounds Read in Citrix Netscaler_Application_Delivery_Controller
CVE-2025-5777 Exploit Tool 🔥 A powerful educational tool...
MS SWIFT Remote Code Execution via unsafe PyYAML deserialization
Description A Remote Code Execution RCE vulnerability exists in the modelscope/ms-swift project due to unsafe use of yaml.load in combination with vulnerable versions of the PyYAML library ≤ 5.3.1. The issue resides in the tests/run.py script, where a user-supplied YAML configuration file is...
Pterodactyl Panel 1.11.11 - Remote Code Execution (RCE)
Exploit Title: Pterodactyl Panel 1.11.11 - Remote Code Execution RCE Date: 22/06/2025 Exploit Author: Zen-kun04 Vendor Homepage: https://pterodactyl.io/ Software Link: https://github.com/pterodactyl/panel Version: 1.11.11 Tested on: Ubuntu 22.04.5 LTS CVE: CVE-2025-49132 import requests import js...
Personalized Constitutionally-Aligned Agentic Superego: Secure AI Behavior Aligned to Diverse Human Values
Agentic AI systems, possessing capabilities for autonomous planning and action, exhibit immense potential across diverse domains. However, their practical deployment is significantly hampered by challenges in aligning their behavior with varied human values, complex safety requirements, and...
Differentiation-Based Extraction of Proprietary Data from Fine-Tuned LLMs
The increasing demand for domain-specific and human-aligned Large Language Models LLMs has led to the widespread adoption of Supervised Fine-Tuning SFT techniques. SFT datasets often comprise valuable instruction-response pairs, making them highly valuable targets for potential extraction. This...
CVE-2021-45111
Improper access control in Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier allows remote authenticated users to trigger the creation of demonstration data, including user accounts with known credentials...
CVE-2013-2554
Unspecified vulnerability in Microsoft Windows 7 allows attackers to bypass the ASLR and DEP protection mechanisms via unknown vectors, as demonstrated against Firefox by VUPEN during a Pwn2Own competition at CanSecWest 2013, a different vulnerability than CVE-2013-0787...
Exploit for CVE-2024-55656
CVE-2024-55656 - Redis Stack - RedisBloom Integer Overflow R...
Exploit for Deserialization of Untrusted Data in Google Android
Exploration of CVE-2024-31317 CVE-2024-31317 provides unprivi...