cve-2019-17558-apache-solr-rce

Apache Solr RCE CVE-2019-17558 - CTF Write-up Practical exploitation of a Velocity Template Injection vulnerability in Apache Solr, progressing from a failure in an automated tool Metasploit to a successful manual exploitation. This write-up documents the complete reasoning of the exercise,...

CVE-2026-55543

TuxGuitar is an open-source guitar tablature editor. Prior to 2.1.0, an untrusted .tg file can set gervil.soundbank.path to reference an on-disk archive, including the .tg file itself, whose META-INF/services/javax.sound.midi.Soundbank entry names an attacker-supplied class stored in that archive...

pe-sieve

Intro PE-sieve is a tool that helps to detect malware running on the system, as well as to collect the potentially malicious material for further analysis. Recognizes and dumps variety of implants within the scanned process: replaced/injected PEs, shellcodes, hooks, and other in-memory patches...

CVE-2022-34302

🕷️ CVE-2022-34302 - New Horizon Datasys Boot Loader Vulnerability New Horizon Datasys Reboot Restore Boot Loader - Bring Your Own Vulnerable UEFI Application BYOVUA - Secure Boot bypass via signed bootloader with built-in custom PE/COFF loader that loads unsigned UEFI applications. 📑 Table of...

CVE-2026-111154

A flaw was found in libtimidity. The SoundFont loader fails to properly validate generator operator values during file parsing, leading to a stack-based out-of-bounds write. By convincing a user to open a specially crafted SoundFont .sf2 audio file, an attacker can corrupt stack memory and crash...

CVE-2026-111155

A flaw was found in libtimidity. The SoundFont loader fails to properly validate sample and instrument index values, leading to an out-of-bounds memory read. An attacker could exploit this vulnerability by providing a specially crafted SoundFont .sf2 audio file, causing the application to crash a...

CVE-2026-111152

A flaw was found in game-music-emu. This flaw allows an attacker to cause a Denial of Service DoS by crashing applications that process untrusted audio files. By providing a specially crafted ZXAYEMUL file with an oversized track table, an integer underflow in the AY loader triggers an...

CVE-2026-55543

Versions of TuxGuitar prior to 2.1.0 are vulnerable to Arbitrary Code Execution when processing a maliciously crafted .tg file. An attacker can set the gervil.soundbank.path property to point to an on-disk archive (such as the .tg file itself) containing a META-INF/services/javax.sound.midi.Sound...

mortar

Mortar Loader Red teaming evasion technique to defeat and divert detection and prevention of security products.Mortar Loader performs encryption and decryption PE/Shellcode inside the memory streams and execute it leveraging several injection techniques . Mortar is able to bypass modern anti-viru...

ReflectivePluginLoader

ReflectivePluginLoader A minimal reflective PE mapper and module stomping engine for Windows x64, built around a clean IPlugin ABI. Maps a DLL from a byte buffer in memory, resolves exports, and calls plugin functions — either from anonymous memory classic reflective load or from inside a...

hades

About Hades is a proof of concept loader that combines several evasion technques with the aim of bypassing the defensive mechanisms commonly used by modern AV/EDRs. Usage The easiest way, is probably building the project on Linux using make. git clone https://github.com/f1zm0/hades && cd hades ma...

PythonAESObfuscate

PythonAESObfuscate Pythonic way to load shellcode. Builds an EXE for you too! Usage Place a payload.bin raw shellcode file in the same directory. Default Architecture is x86 run python obfuscate.py Default output is out.py Requirements Windows Python 2.7 Pyinstaller PyCrypto PyCryptodome didn't...

zig-pe

zig-pe Reflective PE loader written in Zig. Loads and executes native and .NET PE files directly from memory. Features PE Loading Pipeline Parse DOS and NT headers PE32 and PE32+ at runtime Map sections into allocated memory Resolve imports name and ordinal, PE32 4-byte / PE32+ 8-byte thunks Appl...

Remote-BOF-Runner

Remote BOF Runner A Havoc extension framework for remote execution of Beacon Object Files BOFs using a PIC loader made with Crystal Palace. Overview Remote BOF Runner enables secure execution of BOFs in arbitrary processes by leveraging the Crystal Palace PIC loader. This framework implements a...

Quantum-Silicon-Core-Loader

Quantum Silicon Core Loader Primary Core: qslcl.asm v0.0.2 under development Assistant Module: qslcl.bin v0.7.4 Universal Controller: qslcl.py v2.2.2 Legally Protected Research - This project operates under established legal frameworks for security research, right to repair, and academic freedom...

Phantom-Evasion-Loader

SROP-Assisted Cross-Memory Attach CMA Injection via Direct Syscalls. 👻 Phantom-Evasion-Loader x64 Linux Phantom-Evasion-Loader is a standalone, pure x64 Assembly injection engine engineered to minimize the detection surface of modern EDR/XDR solutions and Kernel-level monitors like Falco eBPF. It...

NyxInvoke

NyxInvoke NyxInvoke is a versatile Rust-based tool designed for executing .NET assemblies, PowerShell commands/scripts, Beacon Object Files BOFs and PE files with built-in Ntdll Unhooking, patchless AMSI and ETW bypass capabilities. It can be compiled as either a standalone executable or a DLL...

LoadReload

LoadReload Shellcode Loader based on what i did for my Master Thesis, designed for Sliver-Shellcode smaller than 25MB..... !Note Features: Multibyte-XOR Decryption of Payload Fetches Payload locally Anti-Emulation by BusySleep-Function via KUSERSHAREDDATA RW-RX-Loop for EDR-Deconditioning / Wasti...

Astral_Projection

Astral Projection - UDRL Astral Projection is a Cobalt Strike UDRL User-Defined Reflective Loader, that performs advanced module stomping. The UDRL loads a module using LoadLibraryExW, then manipulates its internals by setting VEH to intercept strategic calls that allow it to steal the section...

CVE-2026-109224

The SureCart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads, Subscriptions, Donations, & Payments plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'comment' parameter in all versions up to, and including, 4.9.4 due to insufficient input sanitizatio...