CVE-2025-2945-pgAdmin4-Authenticated-RCE-PoC-

CVE-2025-2945 – pgAdmin4 Authenticated RCE PoC This repository contains a proof-of-concept script created for security research and authorized penetration testing involving the vulnerability CVE-2025-2945 , affecting certain versions of pgAdmin4. The issue allows an authenticated pgAdmin user wit...

CVE-2020-2551

CVE-2020-2551 The setup script of this project has been tested on version 10.3.6, version 12 has not been tested. Environment kali+weblogic10.3.6+jdk6u25 Ensure the machine deploying weblogic has at least 1.5G of memory, because the script specifies -x1024m in its parameters. Usage Deploy weblogi...

Dirty-Pipe-Exploits

CVE-2022-0847 Exploits Dirty Pipe What is it ? Disclosed on March 7, 2022 by Max Kellerman2, CVE-2022-0847 is a vulnerability in the Linux kernel versions 5.8 to 5.16.11 that allows attackers to overwrite read-only or immutable files and escalate their privileges on the victim's system...

raven

Raven - Advanced Cyber Threat Map Simplified, customizable and responsive. It uses D3.js with TOPO JSON, has 247 countries, 100,000 cities, and can be used in an isolated environment without external lookups!. Structure Offline - Demo Firefox, Chrome or Safari Live - Regression 500 attacks at onc...

Datart v1.0.0-rc.3 - Remote Code Execution

Datart v1.0.0-rc.3 contains a vulnerability that allows remote attackers to execute arbitrary code via INIT connection parameters. id: CVE-2025-56819 info: name: Datart v1.0.0-rc.3 - Remote Code Execution author: Redmomn severity: critical description: | Datart v1.0.0-rc.3 contains a vulnerabilit...

gftrace

gftrace A command line Windows API tracing tool for Golang binaries. Note: This tool is a PoC and a work-in-progress prototype so please treat it as such. Feedbacks are always welcome! How it works? Although Golang programs contains a lot of nuances regarding the way they are built and their...

wavecrack

Wavecrack Description A user-friendly Web interface to share an hashcat cracking box among multiple users with some pre-defined options. Screenshots The homepage Adding an hash to crack Seeing the results and some stats Outline This Web application can be used to launch asynchronous password crac...

cve-2019-1108

CVE-2019-1108 Exploitation CVE-2019-1108 Remote Desktop Protocol Client Information Disclosure Vulnerability Published: 07/09/2019 | Last Updated : 11/19/2019 MITRE CVE-2019-1108 An information disclosure vulnerability exists when the Windows RDP client improperly discloses the contents of its...

CVE-2025-15467

CVE-2025-15467: OpenSSL CMS AuthEnvelopedData Stack Buffer Overflow Overview CVE-2025-15467 is a critical stack buffer overflow vulnerability in OpenSSL's CMS Cryptographic Message Syntax parsing code. The vulnerability exists in the evpciphergetasn1aeadparams function when processing AES-GCM...

CVE-2026-113910

A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An app may be able to disclose kernel...

CVE-2026-112571

A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing a maliciously crafted imag...

EUVD-2026-110223

A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An app may be able to disclose kernel...

CVE-2026-113910

A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An app may be able to disclose kernel...

CVE-2026-113910

A memory initialization issue exists in several Apple platforms, which could allow an app to disclose kernel memory . This vulnerability has been addressed through improved memory handling. Affected products include iOS (26.7.2, 27.2), iPadOS (26.7.2, 27.2), macOS (Golden Gate 27.2, Sequoia 15.8....

EUVD-2026-110362

A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing a maliciously crafted imag...

CVE-2026-112571

A memory initialization issue exists in multiple Apple operating systems, including iOS , iPadOS , macOS , tvOS , visionOS , and watchOS . Processing a maliciously crafted image could lead to the disclosure of process memory . The issue was addressed with improved memory handling and is fixed in ...

elfloader

Summary elfloader is a super simple loader for ELF files that generates a flat in-memory representation of the ELF. Pair this with Rust and now you can write your shellcode in a proper, safe, high-level language. Any target that LLVM can target can be used, including custom target specifications...

Llama-Stack-0.4.0rc3-local-CVE-2026-25211

Llama Stack pgvector Password Leak PoC CVE-2026-25211 Local Proof-of-Concept demonstrating plaintext database password exposure in initialization logs of llama-stack versions 0.4.0rc3. Overview In affected versions of llama-stack before 0.4.0rc3, when using the pgvector vector store provider, the...

CVE-2026-116115

A security vulnerability has been detected in Yoosee GM8135S Camera 21.00.01.36. This impacts an unknown function of the file wpasupplicantX.conf of the component WiFi Configuration. Such manipulation leads to improper initialization. The attack can only be initiated within the local network. Thi...

EUVD-2026-109607

A security vulnerability has been detected in Yoosee GM8135S Camera 21.00.01.36. This impacts an unknown function of the file wpasupplicantX.conf of the component WiFi Configuration. Such manipulation leads to improper initialization. The attack can only be initiated within the local network. Thi...