CVE-2021-44228---Log4Shell-Analysis

🔥 Analisi di Log4Shell CVE-2021-44228 Un'analisi tecnica completa della vulnerabilità Log4Shell CVE-2021-44228, una delle vulnerabilità più critiche nella storia del software moderno. 📖 Panoramica Questo repository contiene un'analisi approfondita della vulnerabilità Log4Shell in Apache Log4j2,...

CVE-2025-47987_PoC

analisi tecnica: https://kryptoenix.github.io/blog/demystifying-CVE-2025-47987/...

CVE-2025-55182-Researching-process

CVE-2025-55182 Forschungs-Repository Ethischer Haftungsausschluss Dieses Repository ist ausschließlich der defensiven Cybersicherheitsforschung und Bildungszwecken gewidmet. Alle Inhalte konzentrieren sich auf: Verständnis von Schwachstellen für defensive Zwecke Entwicklung von...

CVE-2025-55182-Researching-process

Repository di ricerca per CVE-2025-55182 Dichiarazione etica Questo repository è dedicato esclusivamente alla ricerca difensiva in cybersecurity e a scopi educativi. Tutti i contenuti sono focalizzati su: Comprendere le vulnerabilità a fini difensivi Sviluppare meccanismi di rilevamento...

CVE-2024-0258

CVE-2024-0258 Analisi tecnica e documentazione pubblica relative a CVE-2024-0258 , una vulnerabilità Apple libxpc. Questo repository contiene note di ricerca, osservazioni tecniche, risultati di reverse engineering e riferimenti pubblici intesi a documentare la vulnerabilità e le sue implicazioni...

CVE-2025-55182-Researching-process

Repository di Ricerca CVE-2025-55182 Dichiarazione Etica Questo repository è dedicato esclusivamente alla ricerca difensiva sulla cybersecurity e a scopi educativi. Tutti i contenuti sono focalizzati su: Comprendere le vulnerabilità a fini difensivi Sviluppare meccanismi di rilevamento Implementa...

WordPress BookingPress Appointment Booking Pro 5.7.2 Authentication Bypass

WordPress BookingPress Appointment Booking Pro plugin version 5.7.2 contains an authentication bypass vulnerability in its REST API that may allow an unauthenticated attacker to bypass authentication and gain unauthorized access. The repository contains technical analysis, threat intelligence...

Exploit for CVE-2026-26555

🔍 Vulnerability Research A curated collection of in-depth vul...

Hidden Malware Discovered in jQuery Migrate: A Stealthy Supply Chain Threat

Hidden Malware Discovered in jQuery Migrate: A Stealthy Supply Chain Threat By Trellix · June 18, 2025 This blog was also written by Trishaan Kalra Introduction What happens when a trusted open source library becomes a conduit for stealthy malware delivery? That question became reality when the...

The Qualcomm DSP Driver - Unexpectedly Excavating an Exploit

Posted by Seth Jenkins, Google Project Zero This blog post provides a technical analysis of exploit artifacts provided to us by Google's Threat Analysis Group TAG from Amnesty International. Amnesty’s report on these exploits is available here. Thanks to both Amnesty International and Google's...

Palo Alto Networks PAN-OS Management Interface Unauthenticated Remote Code Execution

This module exploits an authentication bypass vulnerability CVE-2024-0012 and a command injection vulnerability CVE-2024-9474 in the PAN-OS management web interface. An unauthenticated attacker can execute arbitrary code with root privileges. The following versions are affected: PAN-OS 11.2 up to...

Exploit for Path Traversal in Progress Whatsup_Gold

CVE-2024-4885 PoC for CVE-2024-4885 Progress WhatsUp Gold GetF...

Exploit for CVE-2024-2961

CNEXT exploits Exploits for CNEXT CVE-2024-2961, a buffer o...

Suspected Exploitation of Apache ActiveMQ CVE-2023-46604

Tom Elkins, John Fenninger, Evan McCann, Matthew Smith, and Micah Young contributed attacker behavior insights to this blog. Beginning Friday, October 27, Rapid7 Managed Detection and Response MDR identified suspected exploitation of Apache ActiveMQ CVE-2023-46604 in two different customer...

How Kopeechka, an Automated Social Media Accounts Creation Service, Can Facilitate Cybercrime

This report explores the Kopeechka service and gives a detailed technical analysis of the service’s features and capabilities and how it can help cybercriminals to achieve their goals...

Rhysida Ransomware

Rhysida Ransomware By Leandro Velasco · October 9, 2023 This blog was also written by Alexandre Mundo and Max Kersten New ransomware victims are made every day by ransom gangs with a variety of ransomware malware families, one of which is the Rhysida ransomware family. Within this blog, an...

Exploit for Improper Input Validation in Lexmark Cxtpc_Firmware

CVE-2023-34362 POCs for credential dumping, reverse shells, an...

WordPress BookIt 2.3.7 Authentication Bypass

On May 22, 2023, our Wordfence Threat Intelligence team identified and began the responsible disclosure process for an Authentication Bypass vulnerability in StylemixThemes’s BookIt plugin, which is actively installed on more than 10,000 WordPress websites. The vulnerability makes it possible for...

Mercenary mayhem: A technical analysis of Intellexa's PREDATOR spyware

We would like to thank The Citizen Lab for their cooperation, support and inputs into this research. Commercial spyware use is on the rise, with actors leveraging these sophisticated tools to conduct surveillance operations against a growing number of targets. Cisco Talos has new details of a...

FortiRecorder 6.4.3 - Denial of Service

Exploit Title: FortiRecorder 6.4.3 - Denial of Service Google Dork: N/A Date: 13/03/2023 Exploit Author: Mohammed Adel Vendor Homepage: https://www.fortinet.com/ Software Link: https://www.fortinet.com/products/network-based-video-security/forticam-fortirecorder Version: 6.4.3 and below && 6.0.11...