openqore

openqore an open-source toolkit to patch, modify, and enhance the firmware of headphones based on the BES chipsets originally started from the soundcore Q35, with future support for other models planned. note: this project is my personal journey into the world of hardware reverse-engineering and...

quantum

Shor's Algorithm for ECDLP — Q-Day Prize Submission Quantum solver for the Elliptic Curve Discrete Logarithm Problem ECDLP, built for the Q-Day Prize Challenge by Project Eleven. The goal: recover ECC private keys on real quantum hardware using Shor's algorithm. Author : Giancarlo Lelli Contact :...

Q-DDOS-GUI

Q-DDOS-GUI DDOS WRITTEN IN C TCP/HTTP/HTTPS ddos written in c . Attack on tcp, http and https protocol. Attack with ddos choosing a random TIMEOUT between a range of seconds or with a defined Timeout. Select the number of threads you want to use. check the stop all box to stop all threads and...

CVE-2023-34598

Gibbon v25.0.0 - ローカルファイルインクルージョン - CVE-2023-34598 Gibbon v25.0.0 は、ローカルファイルインクルージョン（LFI）の脆弱性の影響を受けます。この脆弱性により、インストールフォルダ内に存在する複数のファイルの内容をサーバーのレスポンスに含めることが可能になります。 概念実証 この脆弱性を悪用するには、攻撃者は "q"...

NFtables-IPtables-integration-script

🛡️ Q-Feeds Linux Firewall Blocklist Integration Automated malware IP blocklist for Linux servers — supports nftables and iptables+ipset 📋 Table of Contents Quick Start Overview How It Works Prerequisites Detailed Installation Configuration Usage and Verification Troubleshooting Uninstalling Licens...

django-cve-2025-64459

Django CVE-2025-64459 이 애플리케이션은 여러 Django 버전에 영향을 미치는 CVE-2025-64459를 시연합니다. 이 취약점은 최신 Django 릴리스에서 패치되었습니다. SQL 인젝션 SQL 인젝션은 사용자 입력이 SQL 쿼리의 일부로 처리되어 공격자가 쿼리 작동 방식을 변경하고 접근해서는 안 되는 데이터를 노출하거나 수정할 수 있는 취약점입니다. 취약점 설명 Django QuerySet 및 Q 객체에서 데이터 노출로 이어질 수 있는 SQL 인젝션 취약점입니다. 이 익스플로잇은 Django...

CVE-2026-56096

CVE-2026-56096: Solr Query Injection & Blind Data Extraction in TYPO3 EXT:solr An architectural security vulnerability was discovered in the official TYPO3 Apache Solr extension EXT:solr / apache-solr-for-typo3/solr. The issue allows unauthenticated remote attackers to inject arbitrary Solr/Lucen...

CVE-2023-45542

CVE-2023-45542 A reflected cross-site scripting XSS vulnerability exisits in the q parameter on search function of mooSocial v3.1.8 which allows attackers to steal user's session cookies and impersonate their account via a crafted URL. Vulerable Parameter: q Exploit - Proof of Concept POC Reflect...

CVE-2024-27956-RCE

CVE-2024-27956-RCE CVE-2024-27956에 대한 PoC입니다. ValvePress Automatic 플러그인의 SQL 인젝션 취약점입니다. 이 PoC는 취약점을 악용하여 대상에 사용자를 생성하고 관리자 권한을 부여합니다. WordPress에서 관리자가 되면 원격 코드 실행RCE으로 이어질 수 있습니다. 사용법 git clone https://github.com/diego-tella/CVE-2024-27956-RCE/ cd CVE-2024-27956-RCE python exploit.py...

RedTeamBrasil-CVE-2025-64459

connector-sqli Django ORM의 SQL 인젝션 자동 익스플로잇 Q-object connector · CVE-2025-64459 🎥 RedTeam Brasil 채널 — 포르투갈어로 실전 공격 보안. ██████╗ ████████╗██████╗ connector-sqli ██╔══██╗╚══██╔══╝██╔══██╗ Django Q connector SQLi ██████╔╝ ██║ ██████╔╝ CVE-2025-64459 ██╔══██╗ ██║ ██╔══██╗ RedTeam Brasil 채널 ██║ ██║ ██║...

CVE-2025-64459-Poc

CVE-2025-64459: Django ORM SQL Injection PoC Vulnerability: SQL Injection via QuerySet and Q keyword argument unpacking. CVE ID: CVE-2025-64459 Discovered By: Me Cyberstan Disclosure Date: November 5, 2025 🚨 Executive Summary This repository contains a Dockerized Proof of Concept PoC demonstratin...

CVE-2020-18324

Subrion CMS 4.2.1 – Kickstart 템플릿의 반사형 XSS 취약점 설명 Subrion CMS는 설치가 쉽고 관리가 간단합니다. 독립 실행형 애플리케이션으로 사용하거나 다른 애플리케이션과 함께 사용하여 초급 사이트, 중형 또는 대형 사이트를 만들 수 있습니다. 반사형 크로스사이트 스크립팅 취약점은 Subrion CMS v.4.2.1의 "Kickstart" 웹 애플리케이션 템플릿에서 "search" 구성 요소를 통해 발견되었으며, 이를 통해 원격 공격자가 임의의 JavaScript를 주입할 수 있습니다. 날짜 :...

CVE-2025-28121

💥 CVE-2025-28121 - Online Exam Mastering System 1.0의 반사형 XSS 📝 설명 code-projects Online Exam Mastering System 1.0 은 feedback.php 파일의 q 매개변수를 통해 반사형 크로스 사이트 스크립팅XSS에 취약합니다. 이 문제는 원격 공격자가 애플리케이션에 악성 JavaScript를 주입할 수 있게 하며, 이 스크립트는 적절한 살균 또는 인코딩 없이 응답에 반사됩니다. 성공적으로 악용될 경우 쿠키 도난, 계정 탈취 또는 기타 클라이언트 측...

gps-sdr-sim

GPS-SDR-SIM GPS-SDR-SIM generates GPS baseband signal data streams, which can be converted to RF using software-defined radio SDR platforms, such as ADALM-Pluto, bladeRF, HackRF, and USRP. Windows build instructions 1. Start Visual Studio. 2. Create an empty project for a console application. 3. ...

craw

CRAW: Codec Robust Audio Watermarking Source code for CRAW , a robust audio watermarking method built on STFT-magnitude-domain embedding. An encoder embeds a binary message into an audio clip's magnitude spectrogram phase is preserved from the clean signal; a decoder recovers the message under a...

CVE-2026-95519

A flaw was found in rpm. An attacker can supply a crafted manifest file that, when processed by a user or automation using rpm -q -p or similar manifest-processing flows, leads to arbitrary code execution. This occurs because manifest entries are unexpectedly macro-expanded before being opened,...

DEBIAN-CVE-2026-95519

A flaw was found in rpm. An attacker can supply a crafted manifest file that, when processed by a user or automation using rpm -q -p or similar manifest-processing flows, leads to arbitrary code execution. This occurs because manifest entries are unexpectedly macro-expanded before being opened,...

EUVD-2026-85877

A flaw was found in rpm. An attacker can supply a crafted manifest file that, when processed by a user or automation using rpm -q -p or similar manifest-processing flows, leads to arbitrary code execution. This occurs because manifest entries are unexpectedly macro-expanded before being opened,...

CVE-2026-96772

A security flaw has been discovered in Intelliants Subrion CMS up to 4.2.1. This affects an unknown part of the file /actions.json?action=assign-owner. The manipulation of the argument q results in information disclosure. The attack can be executed remotely. The exploit has been released to the...

EUVD-2026-85759

A security flaw has been discovered in Intelliants Subrion CMS up to 4.2.1. This affects an unknown part of the file /actions.json?action=assign-owner. The manipulation of the argument q results in information disclosure. The attack can be executed remotely. The exploit has been released to the...