r4ven

If you find this GitHub repo useful, please consider giving it a star! ⭐️ ▶️ Watch Video - How To Use! This project is a security research and awareness tool designed to demonstrate how modern web browsers may expose location data, camera access, IP address, and device information when users...

CVE-2025-63946-Tencent-PC-Manager-EoP

CVE-2025-63946 Tencent PC Manager EoP version: PCManager Version lower or equal 17.10.28554.205 Summary: I discovered a vulnerability in Tencent PC Manager where files and directories under C:\Windows\Temp are insecurely handled. An attacker can leverage symbolic link symlink attacks to coerce a...

chipsec

CHIPSEC: Platform Security Assessment Framework CHIPSEC is a framework for analyzing the security of PC platforms including hardware, system firmware BIOS/UEFI, and platform components. It includes a security test suite, tools for accessing various low level interfaces, and forensic capabilities...

CVE-2025-2502

Discovered by chance while learning about local privilege escalation. In any version of Lenovo PC Manager, the tools in Lenovo PC Manager have permission flaws. Any downloaded tool grants ordinary users F full control permissions. Since tools in all versions have permission issues, ordinary users...

POC-of-CVE-2022-36271

POC-of-CVE-2022-36271 The name of an affected Product : Outbyte PC Repair Installation File The affected version : 1.7.112.7856 The CVE ID for the entry : CVE-2022-36271 Description: iertutil.dll is missing so an attacker can use a malicious dll with same name and can get a admin privileges and...

mediacodecoob

mediacodecoob Infoleak and PC control poc for CVE-2015-6620 24445127, I'll add after conference...

functrace

functrace - A function tracer functrace is a tool that helps to analyze a binary file with dynamic instrumentation using DynamoRIO http://dynamorio.org/. These are some implemented features based on DynamoRIO: disassemble all the executed code disassemble a specific function dump if these are...

Ustealer

Ustealer Ubuntu stealer, steal ubuntu information in local pc nice with usb key Require G++ sudo apt-get install g++ libsqlite3 sudo apt-get install libsqlite3-dev Compilation Go in Ustealer/ folder and run makefile make Use ./ustealer...

POC-CVE-2018-4327-and-CVE-2018-4330

brokentooth POC for CVE-2018-4327 atleast I think so since CVE-2018-4327 and CVE-2018-4330 were both written about by @SparkZheng but it does not say which once relates to which bug but since he described this one first then I'm taking a guess. Tested on iPhone 6S 11.3.1 Should work until 11.4...

CVE-2016-3861

CVE-2016-3861 Una versión extendida del exploit libutils de Mark Brand, del artículo del blog de Google Project Zero: https://googleprojectzero.blogspot.com/2016/09/return-to-libstagefright-exploiting.html Principales diferencias: todos los archivos mp4 utilizados para la explotación se generan...

toothfairy

toothfairy Related to brokentooth linked below. Unlike brokentooth, toothfairy does not require pressing buttons on the bluetooth menu. Both CVE's were revealed by @SparkZheng but with no POC so I decided to make a POC for the learning experience. The code is not perfect but it does the job. Test...

CVE-2022-34301

🕷️ CVE-2022-34301 - Vulnerabilidad del Boot Loader de Eurosoft Eurosoft Pc-Check UEFI Diagnostics Shell - Bring Your Own Vulnerable UEFI Application BYOVUA - Omisión de Secure Boot mediante un UEFI Shell firmado y corrupción de gSecurity2. 📑 Tabla de Contenidos Descripción General Antecedentes...

CVE-2023-3519

CVE-2023-3519 Because you can run powershell on ur mum's PC without having to install NMAP or PYTHON or tell anyone you run ARCH! ; x...

swsim

swSIM Project needs to be cloned recursively. Downloading the ZIP is not enough. swSIM is an all-software SIM card. It's the first publicly available to the best of my knowledge SIM card simulator which does not rely on any SIM hardware to work. Scope A software-only SIM card simulator. It does N...

swsim

swSIM El proyecto necesita clonarse de forma recursiva. Descargar el ZIP no es suficiente. swSIM es una tarjeta SIM totalmente software. Es el primer simulador de tarjeta SIM disponible públicamente hasta donde yo sé que no depende de ningún hardware SIM para funcionar. Alcance Un simulador de...

hsm

zhsm A Hardware Security Module HSM library for Zig providing PC/SC access to PIV , CAC , and YubiKey tokens. Status Aspect| Info ---|--- API Stability| Development Zig Version| 0.16.0 Platforms| Linux, macOS, Windows License| MIT Features PIV Support NIST SP 800-73-4 Certificate retrieval slots...

Multiple vulnerabilities in Contec PC-HELPER series

Overview PC-HELPER series provided by Contec Co., Ltd. contains multiple vulnerabilities listed below. Cross-site scripting CWE-79 - CVE-2026-82790 Cross-site request forgery CWE-352 - CVE-2026-82764 OS command injection CWE-78 - CVE-2026-82791 Cross-site scripting CWE-79 - CVE-2026-82792...

CVE-2026-82790

Cross-site scripting vulnerability exists in PC-HELPER Wireless I/O DIO-0404RY-LWF and PC-HELPER Wireless I/O DIO-0404RY-LWF-US. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser...

CVE-2026-82790

A cross-site scripting (XSS) vulnerability exists in PC-HELPER Wireless I/O DIO-0404RY-LWF and DIO-0404RY-LWF-US , two wireless I/O devices manufactured by Contec. If exploited, an arbitrary script may be executed on a logged-in user's web browser. The CVSS 3.1 base score is 5.4 (MEDIUM) with a c...

CVE-2026-82790

Cross-site scripting vulnerability exists in PC-HELPER Wireless I/O DIO-0404RY-LWF and PC-HELPER Wireless I/O DIO-0404RY-LWF-US. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser...