raven

Raven - Advanced Cyber Threat Map Simplified, customizable and responsive. It uses D3.js with TOPO JSON, has 247 countries, 100,000 cities, and can be used in an isolated environment without external lookups!. Structure Offline - Demo Firefox, Chrome or Safari Live - Regression 500 attacks at onc...

wavecrack

Wavecrack Description A user-friendly Web interface to share an hashcat cracking box among multiple users with some pre-defined options. Screenshots The homepage Adding an hash to crack Seeing the results and some stats Outline This Web application can be used to launch asynchronous password crac...

gftrace

gftrace A command line Windows API tracing tool for Golang binaries. Note: This tool is a PoC and a work-in-progress prototype so please treat it as such. Feedbacks are always welcome! How it works? Although Golang programs contains a lot of nuances regarding the way they are built and their...

elfloader

Summary elfloader is a super simple loader for ELF files that generates a flat in-memory representation of the ELF. Pair this with Rust and now you can write your shellcode in a proper, safe, high-level language. Any target that LLVM can target can be used, including custom target specifications...

CVE-2025-15467

CVE-2025-15467: OpenSSL CMS AuthEnvelopedData 스택 버퍼 오버플로우 개요 CVE-2025-15467 는 OpenSSL의 CMS암호화 메시지 구문 파싱 코드에서 발견된 치명적인 스택 버퍼 오버플로우 취약점입니다. 이 취약점은 CMS AuthEnvelopedData 구조에서 AES-GCM 초기화 벡터IV를 처리할 때 evpciphergetasn1aeadparams 함수에 존재합니다. 속성| 값 ---|--- CVE ID| CVE-2025-15467 심각도| 높음 CVSS| 8.1+ 영향받는 버전...

cve-2019-1108

CVE-2019-1108 익스플로잇 CVE-2019-1108 Remote Desktop Protocol Client Information Disclosure Vulnerability Published: 07/09/2019 | Last Updated : 11/19/2019 MITRE CVE-2019-1108 An information disclosure vulnerability exists when the Windows RDP client improperly discloses the contents of its memory. A...

Datart v1.0.0-rc.3 - Remote Code Execution

Datart v1.0.0-rc.3 contains a vulnerability that allows remote attackers to execute arbitrary code via INIT connection parameters. id: CVE-2025-56819 info: name: Datart v1.0.0-rc.3 - Remote Code Execution author: Redmomn severity: critical description: | Datart v1.0.0-rc.3 contains a vulnerabilit...

SealSecurityAssignment

SealSecurityAssignment Researching on the vulnrability CVE-2023-26136 Research on Vulnerability: CVE-2023-26136 Description: Versions of the package tough-cookie before 4.1.3 are vulnerable to Prototype Pollution due to improper handling of Cookies when using CookieJar in rejectPublicSuffixes=fal...

CVE-2020-2551

CVE-2020-2551 이 프로젝트의 설정 스크립트는 10.3.6 버전에서 테스트되었으며, 12 버전은 테스트되지 않았습니다. 환경 kali + weblogic 10.3.6 + jdk6u25 weblogic을 배포하는 머신의 메모리는 최소 1.5G 이상이어야 합니다. 스크립트에서 매개변수로 지정된 -x1024m 때문입니다. 사용 방법 weblogic 로컬 디버깅 환경 배포 해당 버전 디렉토리로 이동하여 해당 README를 참조하십시오. 로그인 시도 http://ip:7001/console에 접속하십시오. 처음 접속 시 초기화...

Dirty-Pipe-Exploits

CVE-2022-0847 익스플로잇 Dirty Pipe 무엇인가? 2022년 3월 7일 Max Kellerman2에 의해 공개된 CVE-2022-0847은 Linux 커널버전 5.8 5.16.11의 취약점으로, 공격자가 읽기 전용 또는 변경 불가능한 파일을 덮어쓰고 피해자 시스템에서 권한을 상승시킬 수 있게 합니다. CVE-2022-0847은 Dirty Pipe라고 불리며 CVSS 점수는 7.8높음입니다. 취약점 익스플로잇은 어떻게 작동하나요? Dirty Pipe 취약점은 struct pipebuffer7의 flags 속성이...

CVE-2026-94592 Armatura LLC Armatura One Use of Hard-coded Credentials

Armatura One's database initialization routine assigns a fixed, vendor-defined password to the database superuser account at creation time, rather than generating a unique password per installation. An individual with access to the server operating system and knowledge of this value can...

CVE-2026-85086

Improper certificate validation, Initialization of a resource with an insecure default vulnerability in Apache Thrift perl bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

EUVD-2026-91068

: Insecure Default Initialization of Resource vulnerability in Johnson Controls EasyIO FS32 allows : Authentication Abuse. This issue affects EasyIO FS32: before 3.0b63...

CVE-2025-2945-pgAdmin4-Authenticated-RCE-PoC-

CVE-2025-2945 – pgAdmin4 인증된 RCE PoC 이 저장소는 pgAdmin4 의 특정 버전에 영향을 미치는 취약점 CVE-2025-2945 와 관련된 보안 연구 및 승인된 침투 테스트를 위해 작성된 개념 증명PoC 스크립트 를 포함합니다. 이 문제는 SQL 편집기에 접근 권한이 있는 인증된 pgAdmin 사용자가 Query Tool 패널 초기화 흐름을 악용하여 원격 코드 실행을 트리거할 수 있게 합니다. 이 PoC는 교육, 감사 및 방어 목적으로만 취약점을 시연합니다. 이 CVE와 PoC가 어떻게 작동하는지...

CVE-2026-71448

: Insecure Default Initialization of Resource vulnerability in Johnson Controls EasyIO FS32 allows : Authentication Abuse. This issue affects EasyIO FS32: before 3.0b63...

CVE-2026-71448

The Johnson Controls EasyIO FS32 (versions before 3.0b63 ) is susceptible to an Insecure Default Initialization of Resource vulnerability (CWE-1188). This security flaw allows for Authentication Abuse . The documents do not provide specific technical details regarding the root cause, exploit vect...

CVE-2026-71448

: Insecure Default Initialization of Resource vulnerability in Johnson Controls EasyIO FS32 allows : Authentication Abuse. This issue affects EasyIO FS32: before 3.0b63...

Llama-Stack-0.4.0rc3-local-CVE-2026-25211

Llama Stack pgvector 비밀번호 유출 PoC CVE-2026-25211 로컬 PoCProof-of-Concept — llama-stack 버전 0.4.0rc3의 초기화 로그에서 데이터베이스 비밀번호가 평문으로 노출되는 취약점을 시연합니다. 개요 영향을 받는 llama-stack 버전0.4.0rc3 이전에서는 pgvector 벡터 저장소 제공자를 사용할 때, PostgreSQL 데이터베이스 비밀번호가 서버 또는 벡터 저장소 초기화 중 평문 으로 로그에 기록됩니다. 이 정보는 다음 위치에 나타납니다: stdout /...

CVE-2026-79900

The boks_ksllogsd component is vulnerable to a heap overflow during KSL checksum initialization. The issue occurs because affected releases verify that OpenSSL recognizes a digest name provided in the MD field of an authenticated KSL start message but fail to validate that the name fits within a ...

CVE-2026-79900 Heap overflow in KSL checksum initialization

boksksllogsd accepts a checksum algorithm name in the MD field of an authenticated KSL start message. Affected releases verify that OpenSSL recognizes the digest name but do not verify that the value fits in a fixed 16-byte checksum context field before copying it. An authenticated KSL client can...