CVE-2024-55587

CVE-2024-55587 Dieses Repository ist ein Proof of Concept für die Sicherheitslücke CVE-2024-55587 in der Python-Bibliothek libarchive. Die Datei generatezip erstellt eine bösartige Zip-Datei, die die unsichere Extraktion von Dateien in der extractall-Methode von libarchive ausnutzt. Die Datei...

CVE-2025-32463-EXPLOIT

Xpl0it — Sudo NSS Library Hijack | v0.0.4 Autor: 0xb0rn3 | 0xbv1 Typ: Proof of Concept PoC Sicherheitsforschungswerkzeug CVE: CVE-2023-42456 Technik: sudo -R chroot NSS-Bibliotheksinjektion → Privilegieneskalation zu root ⚠️ Haftungsausschluss Dieses Tool ist nur für autorisierte Penetrationstests...

CVE-2023-4911-Lab

CVE-2023-4911 "Looney Tunables" Analyseumgebung Docker-basierte Laborumgebung zur Analyse der Buffer-Overflow-Schwachstelle Local Privilege Escalation im dynamischen Lader der GNU C Library glibc und zur Entwicklung von Exploits. CVE-Informationen Eintrag| Wert ---|--- CVE-Nummer| CVE-2023-4911...

CVE-2019-18276

Um die Schwachstelle CVE-2019-18276 auszunutzen, öffnen Sie dieses Verzeichnis in einem Terminal und führen Sie die folgenden Befehle aus: cd ./demonstration ./make Die in der virtuellen Maschine einzugebenden Befehle lauten: ./creationsecret.sh hacker ./exploit.sh 1000 enable -f ./libpwn.so asd...

CLSA-2026-1791107509 TuxCare security update for org.springframework (35 CVEs)

TuxCare rebuilt 22 org.springframework packages to address 35 CVEs. Fixed in 5.0.0.RELEASE-tuxcare.1...

ROOT-APP-GOBINARY-CVE-2025-15558 CVE-2025-15558 in github.com/docker/cli - Patched by Root

Root has patched CVE-2025-15558 in the github.com/docker/cli package for Root:Go. Multiple fixed versions available...

IngressNightterror

IngressNightterror CVE-2025-1974 Übersicht Dieses Repository enthält meine Forschung zur IngressNightmare-Schwachstelle. Es enthält verwundbare Ingress-Deploy-Dateien, den Exploit selbst und ein Shared-Object-Payload. CVE Die Liste der CVE-Indizes: CVE-2025-1974 - Hauptschwachstelle CVE-2025-2451...

OpenSSL-2022

OpenSSL-Sicherheitslücke 2022 - CVE-2022-3602/CVE-2022-3786 Dieses Repository enthält operative Informationen zu CVE-2022-3602 und CVE-2022-3786, zwei Sicherheitslücken in OpenSSL 3.0.0-3.0.6. Weitere Informationen finden Sie unter: OpenSSL-Sicherheitshinweis OpenSSL-Blogbeitrag: FAQ...

bug-bounty-library

Bug Bounty / Original Findings Library Folders are numbered in the order a hunter actually works - first to last. Start at 00-hunt/00-INDEX. Run the hunt from 00-hunt/ALPHA. This README is only the map. Authorization only. Safe harbor, VDP, GitHub PVR, or coordinated disclosure. No other-customer...

lm-fingerprint

LM-Fingerprint Fingerprints the serving stack behind an OpenAI-compatible chat endpoint. It records tokenizer accounting, hidden template offset, validation prose, JSON/SSE shape, role acceptance, named limits, and gateway headers. It does not load weights, store API keys, or ask the model who it...

detection-defense-library

Detection Defense Library One defense-engineering library, consolidated. Attack classes, the patterns that detect them, the committed Sigma rules, and the Windows trust-boundary model, all in a single repo. This repo folds in five former sibling repositories: Former repo| Folded into| What it hol...

exploit-js2py

CVE-2024-28397 - الهروب من الصندوق الرملي في js2py الوصف تؤثر ثغرة CVE-2024-28397 على إصدارات js2py حتى v0.74، وهي مكتبة بايثون تتيح تنفيذ كود جافا سكريبت داخل مفسّر بايثون. يكمن الخلل في تنفيذ الطريقة disablepyimport، التي يفترض أن تمنع كود جافا سكريبت من الوصول إلى كائنات بايثون. ومع ذلك، وبسبب...

[SECURITY] Fedora 44 Update: assimp-6.0.5-5.fc44

Assimp, the Open Asset Import Library, is a free library to import various well-known 3D model formats into applications. Assimp aims to provide a full asset conversion pipeline for use in game engines and real-time rendering systems, but is not limited to these applications...

OPENSUSE-SU-2026:12048-1 python313-zipp-4.1.0-1.2 on GA media

These are all security issues fixed in the python313-zipp-4.1.0-1.2 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:12041-1 python313-rsa-4.9.1-1.4 on GA media

These are all security issues fixed in the python313-rsa-4.9.1-1.4 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:12033-1 python313-python-rapidjson-1.23-1.4 on GA media

These are all security issues fixed in the python313-python-rapidjson-1.23-1.4 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:12019-1 python313-mysql-connector-python-9.7.0-1.2 on GA media

These are all security issues fixed in the python313-mysql-connector-python-9.7.0-1.2 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:12036-1 python313-redis-7.0.1-2.5 on GA media

These are all security issues fixed in the python313-redis-7.0.1-2.5 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:12003-1 python313-cmarkgfm-2025.10.22-1.4 on GA media

These are all security issues fixed in the python313-cmarkgfm-2025.10.22-1.4 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:12015-1 python313-markdown-it-py-4.2.0-1.2 on GA media

These are all security issues fixed in the python313-markdown-it-py-4.2.0-1.2 package on the GA media of openSUSE Tumbleweed...