CVE-2021-44228---Log4Shell-Analysis

🔥 Log4Shell CVE-2021-44228 विश्लेषण Log4Shell कमजोरी CVE-2021-44228 का एक व्यापक तकनीकी विश्लेषण, जो आधुनिक सॉफ्टवेयर इतिहास की सबसे गंभीर कमजोरियों में से एक है। 📖 अवलोकन इस रिपॉजिटरी में Apache Log4j2 में Log4Shell कमजोरी का गहन विश्लेषण शामिल है, जिसमें शामिल हैं: कमजोरी तंत्र की तकनीकी गहराई ...

CVE-2025-47987_PoC

analyse technique: https://kryptoenix.github.io/blog/demystifying-CVE-2025-47987/...

CVE-2025-55182-Researching-process

Repositório de Pesquisa CVE-2025-55182 Aviso Ético Este repositório é dedicado exclusivamente à pesquisa defensiva em cibersegurança e a fins educacionais. Todo o conteúdo está focado em: Compreender vulnerabilidades para fins defensivos Desenvolver mecanismos de detecção Implementar estratégias ...

CVE-2025-55182-Researching-process

مستودع أبحاث CVE-2025-55182 إخلاء مسؤولية أخلاقي هذا المستودع مخصص لأبحاث الأمن السيبراني الدفاعية والأغراض التعليمية فقط. جميع المحتويات تركز على: فهم الثغرات لأغراض دفاعية تطوير آليات الكشف تنفيذ استراتيجيات التخفيف تحسين الوعي الأمني لا تستخدم هذه المعلومات للوصول غير المصرح به، أو الأنشطة...

CVE-2024-0258

CVE-2024-0258 تحليل تقني وتوثيق عام يتعلق بـ CVE-2024-0258 ، وهي ثغرة أمنية في libxpc من Apple. يحتوي هذا المستودع على ملاحظات بحثية، وملاحظات تقنية، ونتائج هندسة عكسية، ومراجع عامة تهدف إلى توثيق الثغرة الأمنية وآثارها الأمنية. التقدير شكر وتقدير من Apple Security الباحث: Ali Yabuz المراجع نشرة...

CVE-2025-55182-Researching-process

CVE-2025-55182 अनुसंधान रिपॉजिटरी नैतिक अस्वीकरण यह रिपॉजिटरी केवल रक्षात्मक साइबर सुरक्षा अनुसंधान और शैक्षिक उद्देश्यों के लिए समर्पित है। सभी सामग्री निम्नलिखित पर केंद्रित है: रक्षात्मक उद्देश्यों के लिए भेद्यताओं को समझना पहचान तंत्र विकसित करना शमन रणनीतियाँ लागू करना सुरक्षा जागरूकता में...

WordPress BookingPress Appointment Booking Pro 5.7.2 Authentication Bypass

WordPress BookingPress Appointment Booking Pro plugin version 5.7.2 contains an authentication bypass vulnerability in its REST API that may allow an unauthenticated attacker to bypass authentication and gain unauthorized access. The repository contains technical analysis, threat intelligence...

Exploit for CVE-2026-26555

🔍 Vulnerability Research A curated collection of in-depth vul...

Hidden Malware Discovered in jQuery Migrate: A Stealthy Supply Chain Threat

Hidden Malware Discovered in jQuery Migrate: A Stealthy Supply Chain Threat By Trellix · June 18, 2025 This blog was also written by Trishaan Kalra Introduction What happens when a trusted open source library becomes a conduit for stealthy malware delivery? That question became reality when the...

The Qualcomm DSP Driver - Unexpectedly Excavating an Exploit

Posted by Seth Jenkins, Google Project Zero This blog post provides a technical analysis of exploit artifacts provided to us by Google's Threat Analysis Group TAG from Amnesty International. Amnesty’s report on these exploits is available here. Thanks to both Amnesty International and Google's...

Palo Alto Networks PAN-OS Management Interface Unauthenticated Remote Code Execution

This module exploits an authentication bypass vulnerability CVE-2024-0012 and a command injection vulnerability CVE-2024-9474 in the PAN-OS management web interface. An unauthenticated attacker can execute arbitrary code with root privileges. The following versions are affected: PAN-OS 11.2 up to...

Exploit for Path Traversal in Progress Whatsup_Gold

CVE-2024-4885 PoC for CVE-2024-4885 Progress WhatsUp Gold GetF...

Exploit for CVE-2024-2961

CNEXT exploits Exploits for CNEXT CVE-2024-2961, a buffer o...

Suspected Exploitation of Apache ActiveMQ CVE-2023-46604

Tom Elkins, John Fenninger, Evan McCann, Matthew Smith, and Micah Young contributed attacker behavior insights to this blog. Beginning Friday, October 27, Rapid7 Managed Detection and Response MDR identified suspected exploitation of Apache ActiveMQ CVE-2023-46604 in two different customer...

How Kopeechka, an Automated Social Media Accounts Creation Service, Can Facilitate Cybercrime

This report explores the Kopeechka service and gives a detailed technical analysis of the service’s features and capabilities and how it can help cybercriminals to achieve their goals...

Rhysida Ransomware

Rhysida Ransomware By Leandro Velasco · October 9, 2023 This blog was also written by Alexandre Mundo and Max Kersten New ransomware victims are made every day by ransom gangs with a variety of ransomware malware families, one of which is the Rhysida ransomware family. Within this blog, an...

Exploit for Improper Input Validation in Lexmark Cxtpc_Firmware

CVE-2023-34362 POCs for credential dumping, reverse shells, an...

WordPress BookIt 2.3.7 Authentication Bypass

On May 22, 2023, our Wordfence Threat Intelligence team identified and began the responsible disclosure process for an Authentication Bypass vulnerability in StylemixThemes’s BookIt plugin, which is actively installed on more than 10,000 WordPress websites. The vulnerability makes it possible for...

Mercenary mayhem: A technical analysis of Intellexa's PREDATOR spyware

We would like to thank The Citizen Lab for their cooperation, support and inputs into this research. Commercial spyware use is on the rise, with actors leveraging these sophisticated tools to conduct surveillance operations against a growing number of targets. Cisco Talos has new details of a...

FortiRecorder 6.4.3 - Denial of Service

Exploit Title: FortiRecorder 6.4.3 - Denial of Service Google Dork: N/A Date: 13/03/2023 Exploit Author: Mohammed Adel Vendor Homepage: https://www.fortinet.com/ Software Link: https://www.fortinet.com/products/network-based-video-security/forticam-fortirecorder Version: 6.4.3 and below && 6.0.11...