CVE-2024-56426

Exynos 990 / Exynos9830 Unified BootROM Exploit Unified CVE-2024-56426 tooling for the Exynos 990 Galaxy S20, S20 FE, and Note20 families. The exploit accepts all ten model names and maps them onto six verified stock bootloader families. !CAUTION The tracked key bundle and generated images are...

FullscreenBrowserPhishing

Phishing mediante el modo de pantalla completa en el navegador Para empezar, me gustaría señalar que el phishing es ilegal y este proyecto es solo con fines educativos. El proyecto en este repositorio es solo una PoC para mostrar cómo se puede hacer y por eso la versión pública tiene fallos : Dem...

vim: Vim: Arbitrary Code Execution via Insecure Shell Command Handling

A vulnerability in Vim's shell script plugins sh.vim, zsh.vim, ps1.vim allows arbitrary code execution if a user selects maliciously crafted text in Visual mode and triggers a keyword lookup, due to improperly escaped shell metacharacters...

CVE-2018-13379

CVE-2018-13379 CVE-2018-13379 https://blog.orange.tw/2019/08/attacking-ssl-vpn-part-2-breaking-the-fortigate-ssl-vpn.html https://fortiguard.com/psirt/FG-IR-18-384 以下版本的 FortiOS 存在漏洞。 FortiOS 5.6.3 to 5.6.7 FortiOS 6.0.0 to 6.0.4 ONLY if the SSL VPN service web-mode or tunnel-mode is enabled...

WiseDelete

WiseDelfile 驱动封装器 一款轻量级 Windows 实用程序，可加载 WiseDelfile64.sys 内核驱动程序，执行所需的设备握手，并发出 IOCTL 请求，以删除通过标准 Windows API 无法删除的文件。 本项目演示了在加载驱动程序后，如何利用 CVE-2025-66680 从用户模式调用驱动程序的删除文件功能。 功能特性 在运行时加载和卸载 WiseDelfile64.sys。 自动执行所需的驱动握手。 发送驱动程序的删除 IOCTL 以移除文件。 支持使用 -folder 标志递归删除目录。 执行后清理临时驱动程序服务。 无 C 运行时依赖。 用法...

wyze-bulb-color-pwned

wyze-bulb-color-pwned Wireless exploit for the Wyze WLPA19CV2 color bulb Overview The Wyze Color WLPA19CV2 bulbs have a factory test mode which allows a custom OTA image to be flashed wirelessly through a specific sequence of power cycling. This project provides An implementation and guide to...

shadowhammer

Comprobador de direcciones MAC Shadowhammer en modo lote Kaspersky descubrió y analizó recientemente el ataque 'Shadowhammer' https://securelist.com/operation-shadowhammer/89992. Realizaron un gran análisis y publicaron una herramienta para que los administradores de sistemas pudieran determinar ...

Pre-render-data-spoofing-on-React-Router-framework-mode-CVE-2025-43865

欢迎使用 React Router！ 一个现代、生产就绪的模板，用于使用 React Router 构建全栈 React 应用程序。 功能特性 🚀 服务端渲染 ⚡️ 热模块替换（HMR） 📦 资源打包与优化 🔄 数据加载与变更 🔒 默认使用 TypeScript 🎉 TailwindCSS 样式支持 📖 React Router 文档 快速开始 安装 安装依赖： npm install 开发 使用 HMR 启动开发服务器： npm run dev 你的应用将在 http://localhost:5173 上可用。 生产构建 创建生产构建： npm run build 部署 Docker 部...

Mini_httpd-CVE-2018-18778

minihttpd任意文件读取漏洞（CVE-2018-18778） Minihttpd是一个微型的Http服务器，在占用系统资源较小的情况下可以保持一定程度的性能（约为Apache的90%），因此广泛被各类IOT（路由器，交换器，摄像头等）作为嵌入式服务器。而包括华为，zyxel，海康威视，树莓派等在内的厂商的旗下设备都曾采用Minihttpd组件。 在minihttpd开启虚拟主机模式的情况下，用户请求http://HOST/FILE将会访问到当前目录下的HOST/FILE文件。 void snprintf vfile, sizeofvfile, "%s/%s", reqhostnam...

CVE-2026-59969

A flaw was found in Apache ZooKeeper. When operating in FIPS Federal Information Processing Standards mode with specific Transport Layer Security TLS settings enabled, ZooKeeper's quorum communication fails to properly verify the hostname of peer certificates. This vulnerability allows a maliciou...

PixelDump_CVE-2016-8462

PixelDump - CVE-2016-8462 PixelDump（CVE-2016-8462）是由 beaups 和 Jon 'jcase' Sawyer 发现/研究出的 个 Pixel 引导加载程序漏洞之一。 免责声明 这是一个粗糙的 POC，原本从未打算发布。我只是复制了另一个项目，花了几分钟加了几行代码，然后把它发给了 Google，以提高我们的漏洞赏金金额。很逊，没错。（勉强）可用，没错。 让我再说一遍，这是糟糕透顶的代码。真的别以为你能用它来做任何事。 详细信息 该漏洞允许你在设备处于引导加载程序模式时有效地“读取”设备上的数据，即使引导加载程序已锁定也是如此。...

CVE-2026-47883

CVE-2026-47883: PoC de Open Redirect en UrlHandlerFilter de Spring Framework Este repositorio es un PoC de reproducción mínima de CVE-2026-47883, publicado a través del aviso de seguridad oficial de Spring. Aviso oficial: https://spring.io/security/cve-2026-47883/ Título oficial: Spring Framework...

libreswan: badly formatted X.509 certificate can cause an assertion failure that crashes the daemon process

A flaw was found in Libreswan. An unauthenticated remote attacker can send a specially crafted X.509 certificate payload during an IKEv1 or IKEv2 exchange. This flaw occurs when Libreswan is operating in FIPS Federal Information Processing Standards mode and processing a certificate with an inval...

RpcAuthnLevelPrivacyEnabled

Gestión de la implementación de cambios de asociación de impresora RPC para CVE-2021-1678 KB4599464 Error en el uso compartido de impresora de Windows descargue y ejecute: https://github.com/alvaciroliveira/RpcAuthnLevelPrivacyEnabled/blob/main/RpcAuthnLevelPrivacyEnabled.reg CRÉDITOS PARA:...

CVE-2026-18414: Out-of-bounds Write

The ADC API requires each driver to reject a sampling sequence whose destination buffer is too small: the buffersize field of struct adcsequence in include/zephyr/drivers/adc.h documents that "the driver must ensure that samples are not written beyond the limit and it must return an error if the...

CVE-2026-18413: Out-of-bounds Write

The ADC API requires each driver to reject a sampling sequence whose destination buffer is too small: the buffersize field of struct adcsequence in include/zephyr/drivers/adc.h documents that "the driver must ensure that samples are not written beyond the limit and it must return an error if the...

CVE-2026-101102: Undefined Security Weakness

A vulnerability was found in deepseek-ai deepseek-harness up to 0.1.0-rc.7. Impacted is the function runcode of the component Code Mode Sandbox. The manipulation results in sandbox issue. The attack can be executed remotely. The vendor's own code, SAFETY.md, and design notes all explicitly state...

OceanBase 3.2.4 < 3.2.4.8 / 4.2.1 < 4.2.1.10 / 4.2 < 4.2.5 / 4.3.3 < 4.3.3.2 Privilege Escalation (OBVD-2025-0205)

The version of OceanBase installed on the remote host is 3.2.4.x prior to 3.2.4.8, 4.2.1.x prior to 4.2.1.10, 4.2.x prior to 4.2.5, or 4.3.3.x prior to 4.3.3.2. It is, therefore, affected by a privilege escalation vulnerability as referenced in the OBVD-2025-0205 advisory. - In OceanBase's Oracle...

CVE-2026-18415: Out-of-bounds Write

ieee802154send in subsys/net/l2/ieee802154/ieee802154.c copies the outgoing packet into a single fixed 125-byte transmit buffer txframebufpool, sized IEEE802154MTU. In builds with CONFIGNETL2IEEE802154FRAGMENT enabled the default whenever CONFIGNET6LO is set, the branch taken when 6LoWPAN...

mythic_ornn

Mythic Ornn Generador impulsado por LLM para Agentes, Payload-Types y Perfiles C2 de Mythic. Los agentes de Mythic son tediosos de escribir a mano: cada uno reimplementa el mismo protocolo de red, el andamiaje de payload-type y la infraestructura de C2. Mythic Ornn omite el código repetitivo...