34198 matches found
CLEANSTART-2024-XM31676 GRUB2 fails to validate kernel signature when booted directly without shim, allowing secure boot to be bypassed
Security vulnerability affects the grub package. GRUB2 fails to validate kernel signature when booted directly without shim, allowing secure boot to be bypassed...
otp-bot
SMSBotBypass Bypass SMS verifications from Paypal, Instagram, Snapchat, Google, 3D Secure, and many others... using a Discord Bot or the private API. It's really simple. Imagine that your friend got a Snapchat account, you try to reset his password using the sms system : he's gonna receive the sm...
CVE-2026-26179
CVE-2026-26179 PoC for CVE-2026-26179 / ZDI-26-276, my very own Secure Kernel bug. I'm well aware that I have a dedicated repository for my vulnerabilities and/or exploits, but this bug in particular is rather special at least to me. As such, I have opted to give it its own repository. I also pla...
PSCF
The OWASP Product Security Capability Framework PSCF This is the OWASP framework for building security capabilities into your product delivery process and teams. The main website for the PSCF is on Prods.ec and includes many more details about the Framework along with explanatory videos. We creat...
CVE-2019-5700
CVE-2019-5700 Unfortunately, I don't have a trendy and clever name for this vulnerability. This bug is fairly simple to exploit. I actually sat on it for quite a while until I realized this might affect more devices than I initially thought. Scope: This bug affects Nvidia Tegra t114-t210 SoCs tha...
csw-slides-2024
Developing Secure Software in 2024 Abstract As humanity increases its dependence on computer systems, the need for safe and secure software becomes paramount. Today, everything from planes, trains, and automobiles to toothbrushes and cooktops contain a multitude of tiny computers. Each of these...
CVE-2023-46805_CVE-2024-21887
CVE-2023-46805 An authentication bypass vulnerability in the web component of Ivanti ICS 9.x, 22.x and Ivanti Policy Secure allows a remote attacker to access restricted resources by bypassing control checks. usage: ./CVE-2023-46805.sh https://fqdn:port ./CVE-2023-46805.sh https://my.vpn.ip:443...
CVE-2026-20131-Post-Incident-Written-Report
CVE-2026-20131-Post-Incident-Written-Report This post-incident report analyzes the exploitation of CVE-2026-20131, a critical zero-day unauthenticated Remote Code Execution RCE vulnerability in Cisco Secure Firewall Management Center FMC. The document covers the initial intrusion vector via Java...
opencode-secure
The open source AI coding agent. Installation YOLO curl -fsSL https://opencode.ai/install | bash Package managers npm i -g opencode-ai@latest or bun/pnpm/yarn scoop install opencode Windows choco install opencode Windows brew install anomalyco/tap/opencode macOS and Linux recommended, always up t...
tu-TOCTOU-kaiu-TOCMEU-CVE-2020-13162-
Pulse Secure Windows Client https://www.redtimmy.com/privilege-escalation/pulse-secure-windows-client/ and https://www.redtimmy.com/privilege-escalation/pulse-secure-client-for-windows-9-1-6-toctou-privilege-escalation-cve-2020-13162/...
CVE-2019-11510
CVE-2019-11510 Exploit for Arbitrary File Read on Pulse Secure SSL VPN CVE-2019-11510 You can use a single domain, either a list of domains. You must include https:// in front of the domain. Usage : cat targetlist.txt | bash CVE-2019-11510.sh / bash CVE-2019-11510.sh -d https://vpn.target.com/ If...
CVE-2022-21894
baton drop CVE-2022-21894: Secure Boot Security Feature Bypass Vulnerability Windows Boot Applications allow the truncatememory setting to remove blocks of memory containing "persistent" ranges of serialised data from the memory map, leading to Secure Boot bypass. The truncatememory BCD element...
lazarus-sigma-rules
Lazarus Sigma Rules The Sigma rules in this repository were created by the F-Secure Countercept Detection and Response Team to provide detection coverage for the Tools, Techniques and Procedures recently used by the Lazarus Group. The blog posts discussing the creation of these Sigma rules can be...
CVE-2025-0690
CVE-2025-0690: Integer Overflow Vulnerability in GRUB2 š”ļø Overview CVE-2025-0690 is a critical integer overflow vulnerability in the GRUB2 boot loader, allowing arbitrary code execution and Secure Boot bypass. This flaw affects systems that rely on GRUB2 for secure boot, exposing the system before...
training-application-security
Free Secure Coding & Application Security Training ā Open Source SCORM Exercises 40 free, open-source secure coding exercises that teach web application security the way developers learn ā by exploiting real vulnerabilities like SQL injection, cross-site scripting XSS, and broken access control,...
CVE-2026-20131
CVE-2026-20131 ā Cisco Secure FMC Remote Code Execution Java Deserialization Severity: Critical CVSS 3.1: 10.0 CWE: CWE-502 ā Deserialization of Untrusted Data Affected: Cisco Secure Firewall Management Center FMC Software Advisory: cisco-sa-fmc-rce-NKhnULJh Bug ID: CSCwt14636 Overview A...
Attackers Chain Three Ivanti Connect Secure Flaws to Gain Unauthenticated Root Access
The U.S. Cybersecurity and Infrastructure Security Agency CISA on Friday added two security flaws impacting Ivanti Connect Secure ICS to its Known Exploited Vulnerabilities KEV catalog, following active exploitation in the wild. The vulnerabilities are listed below - CVE-2026-111357 CVSS score: 8...
CVE-2023-32784-EXPLOIT-REPORT
CVE-2023-32784 Exploit Demonstration Project Overview This repository provides a demonstration of CVE-2023-32784, a critical vulnerability found in KeePass versions prior to 2.54. The exploit allows the recovery of the master password through memory dumps, exposing stored credentials. This...
CVE-2019-11510-1
CVE-2019-11510-1 Exploit for Arbitrary File Read on Pulse Secure SSL VPN CVE-2019-11510 python usage: python CVE-2019-11510.py https://x.x.x.x åčé¾ę„ļ¼ https://hackerone.com/reports/591295 https://github.com/projectzeroindia/CVE-2019-11510...
pulsexploit
pulsexploit Automated script for Pulse Secure SSL VPN exploit CVE-2019-11510 using hosts retrieved from Shodan API. You must have a Shodan account to use this script. Click here if you don't have Shodan account. Installation 1. Install dependencies. CentOS & Fedora yum install git python3 -y Ubun...