cheatsheets

Category| Description ---|--- Api| Collection of curl commands Exploit| Sorted by CVE Linux| Command line for Linux Other| Everything that does not belong elsewhere Snippet| Code snippets for different languages Theorie| Background knowledge on specific topics Url| Resources on the Internet...

CVE-2026-71557-poc

CVE-2026-71557: go-git Reference Name Path Traversal PoC 日本語版はこちら Description This repository contains a safe local proof of concept for CVE-2026-71557 , based on go-git's public advisory GHSA-qgq7-7hm3-q39j. Before the fix, storage/filesystem used a loose-reference name as the path .git/ without...

CVE-2022-30190

CVE-2022-30190 Microsoft Office Word RCE Reproduction CVE-2022-30190 Vulnerability Overview MS Office docx files may contain external OLE object references as HTML files. There is an HTML scenario ms-msdt: that calls the msdt diagnostic tool, which is capable of executing arbitrary code specified...

NemoClaw

NVIDIA NemoClaw: Reference Stack for Sandboxed AI Agents in OpenShell NVIDIA NemoClaw is an open source reference stack for running supported AI agents more safely inside NVIDIA OpenShell sandboxes. It provides guided onboarding, managed inference, network policy, managed integrations,...

apache-ofbiz-CVE-2020-9496

apache-ofbiz-CVE-2020-9496 Youtube https://www.youtube.com/watch?v=DO93Xc8sGWg...

CVE-2021-44228-Apache-Log4j-Rce

CVE-2021-44228Apache Log4j Remote Code Execution） all log4j-core versions =2.0-beta9 and =2.14.1 The version of 1.x have other vulnerabilities, we recommend that you update the latest version. Security Advisories / Bulletins linked to Log4Shell CVE-2021-44228 Usage: download this project, compile...

spire

!Production...

Dockerized-CVE-2019-14287

Dockerized CVE-2019-14287 Containerized and deployable use of the CVE-2019-14287 vuln. View README.md for more. This CVE affects all versions of sudo under 1.8.28 where a sudo user can escalate to root by referencing its user ID. This Dockerfile allows this CVE to be built, where it can be used f...

CVE-2022-1011

CVE-2022-1011 Fix link: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit?id=0c4bcfdecb1ac0967619ee7ff44871d93c08c909 This vulnerability is mainly due to the asynchronous nature of splice, which allows the user-mode filesystem process server side to retain a piece of memor...

CVE-2026-84118-who-labeled-the-crit-as-a-high

CVE-2026-84118 — SpiderMonkey GC use-after-free Bug 2057457 This is one of those where Mozilla labeled a Critical as a High. So someone might want to go have Firefox update the original bug hunters payment if that's the case. THE TLDR: You can do an OOB R primitive on a controlled pointer and the...

CVE-2026-85046-who-put-the-silverback-guerilla-in-the-wasm

CVE-2026-85046 Saw the other POC of this and I thought to myself this is such a nightmare to look at. So I went and simplified the POC and added a jump to your own wasm. Because wasm. Chrome 152.0.7977.75 can confuse object pointers with integers during sort. poc.js keeps a stale Wasm module...

binja_arch_ref

binjaarchref A simple Binary Ninja plugin to display a cheat sheet with information about the current architecture Origins This project is a product of NCC Group's 2017 summer internship program. Further updates will be tracked athttps://github.com/ehennenfent/binjaarchref. NCC Group is not...

covertchannels-steganography

Many people ask me how to start in the field of steganography/covert channels or how to improve their skills. I wrote this recopilation to help them with some good references, tools and books that I used and read I will add more soon. Books & Papers/Articles Information Hiding Techniques for...

DjVuLibre-poc-CVE-2025-53367

1- WHAT IS DJVU. DjVu pronounced "déjà vu" a set of compression technologies, a file format, and a software platform for the delivery over the Web of digital documents, scanned documents, and high resolution images. DjVu documents download and display extremely quickly, and look exactly the same ...

jsherp-user-info-idor

jshERP /user/info IDOR — VulDB submission package This repository contains a standalone VulDB-style advisory for an authenticated insecure direct object reference in jshERP. Product: jshERP Tested commit: ad6cf886dd4e0676723060a25d361c703dc56bc0 3.6-SNAPSHOT, GitHub master HEAD on 2026-09-04...

CVE-2026-42945

CVE-2026-42945 Security Detection Tool This is a CVE-2026-42945 static detection tool for defense and internal network investigation, used to check whether there are high-risk rewrite combinations in NGINX ngxhttprewritemodule related configurations. This project does not provide exploit code, do...

Tiredful-API

What is Tiredful API? Tiredful API is intentionally designed broken app. The aim of this web app is to teach developers, QA or security professionals about flaws present in webservices REST API due to insecure coding practice. Who can use Tiredful API? Web developers Web Pentesters Security...

MalwareConfigLists

MalwareConfigLists Just some lists of Malware Configs...

labs

Name| Description ---|--- CVE-2015-5531| Directory traversal vulnerability in Elasticsearch before 1.6.1 allows remote attackers to read arbitrary files via unspecified vectors related to snapshot API calls. CVE-2016-1909| Fortinet FortiAnalyzer before 5.0.12 and 5.2.x before 5.2.5; FortiSwitch...

CVE-2024-21006_PoC

CVE-2024-21006 PoC CVE-2024-21006 is a critical Remote Code Execution RCE vulnerability affecting Oracle WebLogic Server. The flaw is related to the insecure use of the IIOP Internet Inter-ORB Protocol and JNDI Java Naming and Directory Interface protocols, allowing an unauthenticated remote...