Am-I-affected-by-Meltdown

Bin ich betroffen von Meltdown?! Meltdown CVE-2017-5754 Checker Was bin ich? Proof-of-concept / Exploit / Prüft, ob das System von Variante 3: rogue data cache load CVE-2017-5754, auch bekannt als MELTDOWN, betroffen ist. Die Grundidee ist, dass der Benutzer erfährt, ob das laufende System...

AV-Chaos-Monkey

AV Chaos Monkey Verteilte Chaos-Engineering-Plattform zum Lasttest von Videokonferenzsystemen. Simuliert 1500+ WebRTC-Teilnehmer mit H.264/Opus-Streams und injiziert Netzwerk-Chaos-Spitzen, um die Systemresilienz unter verschlechterten Bedingungen zu validieren. Architektur 1...

CVE-2026-9973-exploit

CVE-2026-9973 बग सुधार https://chromium-review.googlesource.com/c/v8/v8/+/7822799 root@kitploit: wasmturboshaft Fix Phi handling in Load Elimination some more Multiple Phis can depend on each other, so we have to clear all their replacements up front. Fixed: 509268941 Change-Id:...

CVE-2026-43499-A36

CVE-2026-43499-A36 Eigenständiger, am Gerät getesteter CVE-2026-43499-Port für das kanadische Galaxy A36 5G SM-A366W auf exakter Firmware A366WVLS3AYG1, einschließlich KernelSU-Late-Load- und Root-My-Galaxy-Integration. Dieses Repository enthält die gerätespezifische native Seite von Root My...

CVE-2025-59528-PoC

CVE-2025-59528 PoC zu Bildungszwecken Nur zu Bildungszwecken. Dieses Projekt ist für kontrollierte Sicherheitsforschung, Demonstrationen im Unterricht und autorisierte Tests in einer isolierten Laborumgebung vorgesehen. Verwenden Sie es nicht gegen Systeme, Netzwerke, Anwendungen oder Konten, die...

TangledWinExec

Tangled WinExec Questo repository è dedicato allo studio delle tecniche di esecuzione dei processi Windows. Alla maggior parte dei PoC viene assegnato un nome corrispondente alla tecnica. Progetti BlockingDLL : Questo toolset serve per testare il processo di blocco delle DLL. Vedi README.md...

LOAD

Intro Basato su AWS-Redteam-Lab e OCD GOAD Il prezzo per eseguire il lab per 125 ore in un mese è di circa 14$. Con il Free Tier ottieni 750 ore di EC2 al mese, ci sono 6 macchine, quindi 125 ore. Ma ottieni solo 30 GB di storage. Quindi ti serve storage per le altre 5 VM: 30 GB 5 = 150 GB = 14$ ...

mariadb-13-rce-lab

MariaDB 13.0.1-rc RCE Lab Esecuzione di codice in remoto sull'immagine Docker non modificata e stock di MariaDB 13.0.1-rc come uid 999 mysql. Due varianti di exploit: Variante| File| Requisiti| Note ---|---|---|--- SQL puro consigliata| exploitpuresql.py| un account MariaDB a bassi privilegi + TC...

LdrLibraryEx

LdrLibraryEx DLL को मेमोरी में लोड करने के लिए एक छोटी x64 लाइब्रेरी। विशेषताएं कम निर्भरताएँ और फ़ंक्शन उपयोग केवल ntdll.dll उपयोग होता है पोजीशन इंडिपेंडेंट कोड हल्का और न्यूनतम उपयोग में आसान मेमोरी से मॉड्यूल लोड करें डिस्क से मॉड्यूल लोड करें एपीआई सेट समर्थन इमेज लोड कॉलबैक को बायपास करें...

Perfusion

Perfusion Unter Windows 7 , Windows Server 2008R2 , Windows 8 und Windows Server 2012 ist der Registrierungsschlüssel der Dienste RpcEptMapper und DnsCache nur 7/2008R2 mit schwachen Berechtigungen konfiguriert. Jeder lokale Benutzer kann einen Unterschlüssel Performance erstellen und dann die...

spd_flasher

CVE-2022-38694 Gehärteter Exploit — RP2350 USB Host Auto Flasher 中文版 README Tutorial UDX710-Bootkette-Reverse-Engineering und RP2350-Hardened-Boot-Tutorial Nutzt die CVE-2022-38694-BootROM-Schwachstelle von Unisoc über einen Raspberry Pi RP2350 -USB-Host aus, um beim Booten automatisch den...

trellis-cve-2018-6389

trellis-cve-2018-6389 Entschärfen Sie CVE-2018-6389 WordPress load-scripts / load-styles Angriffe. Ziel Warum? Abschwächung Warum nicht? Anforderungen Installation Trellis WordPress FAQs Kann ich dies auf managed Hosting verwenden? Es sieht großartig aus. Wo finde ich weitere solche Goodies? Dies...

DetectWindowsCopyOnWriteForAPI

Strumenti di Enumerazione delle Proprietà dei Processi Windows per la Caccia alle Minacce ====================== Sfondo Lo scopo di questi strumenti è enumerare le caratteristiche dei processi Windows che supportano il rilevamento delle tecniche di process injection utilizzate dagli attori delle...

WordPress EWWW Image Optimizer plugin <= 8.7.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'data-script' Lazy Load Attribute in Post Content vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via 'data-script' Lazy Load Attribute in Post Content vulnerability discovered by UKO - Korea univ. in WordPress Plugin EWWW Image Optimizer versions = 8.7.3...

CVE-2026-76225

ArcadeDB before 26.8.1 contains a server-side request forgery vulnerability in the OpenCypher LOAD CSV implementation that fails to validate HTTP/HTTPS URLs. Authenticated attackers can craft LOAD CSV queries pointing to internal network addresses or cloud metadata endpoints to make the ArcadeDB...

EUVD-2026-62466

ArcadeDB before 26.8.1 contains a server-side request forgery vulnerability in the OpenCypher LOAD CSV implementation that fails to validate HTTP/HTTPS URLs. Authenticated attackers can craft LOAD CSV queries pointing to internal network addresses or cloud metadata endpoints to make the ArcadeDB...

CVE-2026-76225

ArcadeDB before 26.8.1 has a server-side request forgery flaw in its OpenCypher LOAD CSV implementation, which does not validate HTTP/HTTPS URLs. Authenticated attackers can craft LOAD CSV queries pointing to internal network addresses or cloud metadata endpoints to make the server fetch and retu...

CVE-2026-76225 ArcadeDB before 26.8.1 Server-Side Request Forgery via LOAD CSV

ArcadeDB before 26.8.1 contains a server-side request forgery vulnerability in the OpenCypher LOAD CSV implementation that fails to validate HTTP/HTTPS URLs. Authenticated attackers can craft LOAD CSV queries pointing to internal network addresses or cloud metadata endpoints to make the ArcadeDB...

CVE-2026-76225 ArcadeDB before 26.8.1 Server-Side Request Forgery via LOAD CSV

ArcadeDB before 26.8.1 contains a server-side request forgery vulnerability in the OpenCypher LOAD CSV implementation that fails to validate HTTP/HTTPS URLs. Authenticated attackers can craft LOAD CSV queries pointing to internal network addresses or cloud metadata endpoints to make the ArcadeDB...

wordpress-cve-2018-6389

WordPress-CVE-2018-6389 WordPress Core - 'load-scripts.php' Denial of Service = 4.9.4 Datum: 05/02/2018 Software-Link: WordPress Version: = 4.9.4 Getestet auf: KaLi Linux 2018.1 CVE: CVE-2018-6389 Entdeckt von: Barak Tawily Exploit von: Javier Olmedo VERWENDUNG Klone dieses Repository...