mi-x

Am I Exploitable? 저자: 2022 - 현재, Rezilion 설명: 취약점 검증 개발: 2022년 1월 - 현재 문서: 웹사이트 및 README 참조 소개 설명 'Am I Exploitable?'는 특정 취약점에 대해 시스템이 악용 가능한지 검증해야 하는 필요를 충족시키기 위한 Python 오픈 소스 프로젝트입니다. 이 프로젝트는 특정 취약점에 악용 가능한지 여부를 이해하는 데 도움을 주며, 시스템에서 취약한 구성 요소 또는 취약하지 않은 구성 요소가 무엇인지 설명해 줍니다. 이 프로젝트는 수행하는 취약점 검사에...

cves-2025-11187_15467_69418

Non è una mia scoperta. Non ho mai trovato il tempo per una catena completa, anche se è sfruttabile all'80%; bfcanary richiede un bersaglio reale. glhf CVE...

qark

Quick Android Review Kit This tool is designed to look for several security related Android application vulnerabilities, either in source code or packaged APKs. The tool is also capable of creating "Proof-of-Concept" deployable APKs and/or ADB commands, capable of exploiting many of the...

CVE-2019-0785

CVE-2019-0785 Microsoft Windows DHCP da sfruttare. Per favore aspetta, eh? Sto arrivando!...

CVE-2024-21345

Usage - python3 CVE-2024-21345.py Tutti i kernel sono sfruttabili. Ottieni facilmente accesso root...

blackbox-fuzzing

Fuzzing de Caixa Preta de Dispositivos IoT Usando o Roteador TL-WR902AC como Exemplo Esta é a versão em HTML do meu trabalho acadêmico, que pode ser baixado como PDF aqui. Introdução O fuzzing tornou-se "uma das maneiras mais eficazes" de encontrar bugs em software. Com esta ou alegações...

CVE-2022-26809

Descrizione CVE CVE-2022-26809 - la debolezza in un componente core di Windows RPC ha ottenuto un punteggio CVSS di 9.8 non senza motivo, poiché l'attacco non richiede autenticazione e può essere eseguito da remoto su una rete, e può portare all'esecuzione remota di codice RCE con i privilegi del...

Advisories

Sicherheitshinweise Dieses Repository enthält mehrere Schwachstellen, die während Penetrationstests entdeckt und gemeldet wurden. Der gesamte Inhalt dieses Repositorys dient ausschließlich zu Bildungszwecken. Links...

yasuo

YASUO @0xsauby Description Yasuo is a ruby script that scans for vulnerable 3rd-party web applications. While working on a network security assessment internal, external, redteam gigs etc., we often come across vulnerable 3rd-party web applications or web front-ends that allow us to compromise th...

Oracle WebLogic Server - Remote Code Execution

The Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: WLS - Web Services is susceptible to a remote code execution vulnerability that is easily exploitable and could allow unauthenticated attackers with network access via HTTP to compromise the server. Supported versions...

PaperCut NG - Authentication Bypass

This vulnerability allows remote attackers to bypass authentication on affected installations of PaperCut NG 22.0.5 Build 63914. Authentication is not required to exploit this vulnerability. The specific flaw exists within the SecurityRequestFilter class. The issue results from improper...

Exploits + Shellcode + GHDB

The Exploit Database Git Repository This is an official repository of The Exploit Database, a project sponsored by Offensive Security. Our repositories are: Exploits & Shellcodes: gitlab.com/exploit-database/exploitdb Binary Exploits: gitlab.com/exploit-database/exploitdb-bin-sploits Papers:...

node-ip-vex

node-ip-vex Dieses Beispielprojekt hängt vom npm-Paket node-ip ab, das für CVE-2024-29415 anfällig ist. Da unser Projekt die anfällige Funktion .isPublic jedoch nicht direkt verwendet, ist es für CVE-2024-29415 nicht ausnutzbar. Führen Sie eine Analyse mit Docker Scout durch Ich kann mein Projekt...

Astra Linux – Vulnerability in Firefox

The incorrect use of the '' method could lead to a “user-after-poison” situation and potentially cause a exploitable crash. This vulnerability affects Firefox versions earlier than 85...

Astra Linux – Vulnerability in Firefox and Thunderbird

While implementing AudioWorklets, some code may have converted one type to another, resulting in an invalid, dynamic type. This could lead to a potentially exploitable crash. This vulnerability affects Firefox 111, Firefox ESR 102.9, and Thunderbird 102.9...

firefox: thunderbird: Internally found bugs fixed in Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1 and Firefox 154

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Internally found bugs present in Thunderbird ESR 140.13, Thunderbird ESR 153.0 and Thunderbird 153. Some of these bugs showed evidence of memory corruption or another...

SUSE CVE-2026-74990

Internally found bugs present in Thunderbird ESR 140.13, Thunderbird ESR 153.0 and Thunderbird 153. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these could have been exploited. This vulnerability was...

EUVD-2026-61932

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Content Acquisition System. The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP...

EUVD-2026-60673

Internally found bugs present in Thunderbird ESR 140.13, Thunderbird ESR 153.0 and Thunderbird 153. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these could have been exploited. This vulnerability was...

CVE-2026-74987 Internally found bugs fixed in Firefox ESR 140.14, Firefox ESR 153.1 and Firefox 154

Internally found bugs present in Firefox ESR 140.13, Firefox ESR 153.0 and Firefox 153. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these could have been exploited. This vulnerability was fixed in Firef...