CVE-2019-12594

CVE-2019-12594 This is a PoC for CVE-2019-12594, a vulnerability in DOSBox 0.74-2. Launching a calculator on the host from DosBox 0.74-2 The PoC for this vulnerability has been tested with the following configuration: DOSBox 0.74-2 Debian 10 amd64 Libc6 2.28-10...

BYOVD

EnPortv-Killer PoC for vulnerability in EnPortv driver from EnCase As of 2026-07-10, the driver is listed onLOLDDrivers but remains absent from Microsoft's recommended driver block rules as of 2026-07-10 Built on byovd-lib -- implements the DriverConfig trait and delegates the full BYOVD flow to...

CVE-2025-22457

CVE-2025-22457 CVE-2025-22457: Python Exploit POC Scanner to Detect Ivanti Connect Secure RCE This script helps identify Ivanti Connect Secure, Policy Secure, or ZTA Gateways that may be vulnerable to CVE-2025-22457 , a critical unauthenticated stack-based buffer overflow in the web process...

CVE-2017-7921-EXPLOIT

CVE-2017-7921 - Hikvision Camera Series Improper Authentication Vulnerability A security flaw identified as CVE-2017-7921, which affects various models of Hikvision cameras. The vulnerability was discovered in the DS-2CD2xx2F-I Series V5.2.0 build 140721 to V5.4.0 build 160530, DS-2CD2xx0F-I Seri...

CVE-2026-82936 Denial of Service in mH-DEVELOPER

mH-DEVELOPER smart home module is vulnerable to Denial of Service due to uncontrolled resource consumption. The Express bodyParser is configured with a 250 MB limit for JSON and URL-encoded request bodies. An authenticated attacker on the LAN can send large request bodies that exhausts buffers in...

bdapiutil-bydov

BdApiUtil64.sys BYOVD 用于 Windows 的 C++ 演示工具，通过 DeviceIoControl 和特定的 IOCTL 与 BdApiUtil 设备交互，以请求终止进程。 要求 64 位 Windows 10/11 Visual Studio / MSVC 已加载且可访问的 BdApiUtil64.sys 驱动 根据系统配置，需要管理员权限 用法 BdApiKiller.exe BdApiKiller.exe -n BdApiKiller.exe --name...

nginx-map-risk-audit

CVE-2026-42533: NGINX Map Regex Risk Review Defensive research note on CVE-2026-42533, a heap buffer overflow in NGINX request processing tied to map directives with regex captures and certain variable evaluation patterns. In plain English: NGINX is web server and reverse proxy software. It often...

ppid-spoofing

https://www.countercept.com/blog/detecting-parent-pid-spoofing/...

doublepulsar-usermode-injector

作者：Matt Hillman（[email protected] - @sp1nl0ck） 公司：Countercept（@countercept） 网站：https://countercept.com 一个利用 DOUBLEPULSAR 载荷中的用户态 shellcode，将任意 DLL 反射式加载到另一个进程中的实用工具，用于测试检测技术或进行其他安全研究。 背景 Shadow Brokers 泄露的 DOUBLEPULSAR 载荷最初在内核态运行，并通过异步过程调用（APC）将 DLL 反射式加载到用户态进程中。DLL 的实际加载发生在用户态，本工具利用该用户态...

ReflectiveDLLInjection

关于 反射式DLL注入是一种库注入技术，它利用反射式编程的概念，将库从内存加载到宿主进程中。因此，该库通过实现一个最小的可移植可执行文件（PE）加载器来负责自身的加载。它可以在与宿主系统和进程进行最小交互的情况下，控制自身如何加载以及与宿主交互。 该注入技术适用于从Windows NT4到Windows 8（含）的系统，并在适用的x86、x64和ARM架构上运行。 概述 将库远程注入进程的过程分为两步。首先，您希望注入的库必须被写入目标进程（下文称为宿主进程）的地址空间。其次，该库必须以满足其运行时预期的方式加载到宿主进程中，例如解析其导入表或将其重定位到内存中的合适位置。...

KeePass-dump-py

KeePass-dump-py My attempt to re-write the original KeePass 2.X Master Password Dumper CVE-2023-32784 POC in python. Please head over to Original POC for more details about the vulnerability and exploitation process. What this script does: 1. Checks if KeePass process is running, otherwise it...

CVE-2025-41244

💻 Step-by-Step Technical Process Compile the Program bash Compile the C code into an executable gcc -o /tmp/httpd /tmp/CVE-2025-41244.c Make it executable chmod +x /tmp/httpd Test the Version Functionality bash Test the -v flag should print version and exit /tmp/httpd -v Test the -V flag should...

StealC-Stealer-RuntimeBroker-Hollowing-C2-Extraction-Payload-Extraction-Analysis

1. RuntimeBroker.exe Hollowing & C2 IP Addresses Process Hacker memory analysis reveals that StealC Stealer performs process hollowing on RuntimeBroker.exe and establishes connections to multiple C2 servers. Key Observations: Target Process: RuntimeBroker.exe PID 14900. C2 IP Addresses:...

Vidar-Stealer-Reverse-Engineering

Vidar Stealer 2.0 Reverse Engineering Analysis Overview This analysis covers an in-depth reverse engineering of Vidar Stealer 2.0 , a sophisticated information stealer that uses advanced evasion techniques to remain undetected. Key findings include: Task Scheduler Tampering: Modifies system task...

super-trouper

Super Trouper An MCP server for the Frida reverse engineering toolkit. Super Trouper runs an MCP server over STDIO that exposes Frida capabilities as tools for coding agents. It can connect to local, USB, and remote devices; inspect applications and processes; manage process sessions; and load,...

CVE-2021-44909

CVE-2021-44909 Exploit Title: orangescrum 1.8.0 - Remote Command Execution RCE unauthenticated Date: 03/12/2021 Vendor Homepage: https://www.orangescrum.org/ Software Link: https://github.com/Orangescrum/orangescrum Version: 1.8.0 Tested on: Windows 10 x64 using XAMPP 7.4.23, Apache/2.4.48 Win64...

CVE-2017-11610

CVE-2017-11610 Unauthenticated Reverse Shell RCE for Supervisor 3.0a1 - 3.3.2 Standalone Python ≥3.6 Unauthenticated RCE exploit for Supervisor 3.0a1 to 3.3.2, rewritten from this Metasploit module. Explanatory post here. Tested with Python 3.7 on this target runing Supervisor 3.3.2 Usage:...

CVE-2026-102006: Missing Release of Memory after Effective Lifetime

In Wind River VxWorks 7 prior to 26.09, specific system call arguments can result in the process management subsystem failing to properly release allocated kernel memory before terminating the calling application. Fixed in Version 26.09...

CVE-2026-101911: Uncontrolled Resource Consumption

ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. Prior to 10.7.1, the Address6 constructor, Address6.isValid, and parse code in src/ipv6.ts accept unbounded strings and expand invalid characters through REBADCHARACTERS into large diagnostics. Material...

CVE-2024-41453_CVE-2024-41454

CVE-2024-41453 CVE-2024-41454 ProcessMaker Vulnerabilites just for education: @ryancooley @velkymx @nolanpro @caleeli install ProcessMaker 4 Core Docker Instance frome this repository: https://github.com/ProcessMaker/pm4core-docker this is latest pm docker version PMVERSION=4.1.21, below image is...