CVE-2024-29824

I have made some optimizations to the scripts in horizon3ai actually, it is just adding a verification mechanism to ensure accuracy Original project address: https://github.com/horizon3ai/CVE-2024-29824 add "-f / --file" and ThreadPool...

reapoc

reapoc OpenSource Poc && Vulnerable-Target Storage Box. We are aming to collect different normalized poc and the vulerable target to verify it. Now reapoc support these poc: pocsploit: My new simple, smart poc framework, welcome! nuclei: Famous in the world, yaml-based xray: yaml-based pocsuite3:...

CVE-2025-54782

Basic Usage: 1.use python posttest.py urls.txt 2. Custom Command: 2.command python posttest.py urls.txt -c "whoami" python posttest.py urls.txt -c "ls -la /tmp" python posttest.py urls.txt -c "cat /etc/passwd" 3. Specify Thread Count: python posttest.py urls.txt -c "id" -t 10 📁 URL File Format...

CLEANSTART-2024-ZR94862 In unusual circumstances, an individual thread may outlive the thread's manager during shutdown

Security vulnerability affects the librewolf package. In unusual circumstances, an individual thread may outlive the thread's manager during shutdown...

CLEANSTART-2025-WC96717 With the aid of the diagnostics_channel utility, an event can be hooked into whenever a worker thread is created

Security vulnerability affects the nodejs package. With the aid of the diagnosticschannel utility, an event can be hooked into whenever a worker thread is created...

Driver-HideKernelThread-IoCancelIrp

Driver-HideKernelThread-IoCancelIrp not my code. only for saving https://bbs.pediy.com/thread-272795.htm Principle Set the thread entry address to IoCancelIrp and the context to the irp you created. Then the thread will call IoCancelIrp. when called, will perform the operation of canlcelling the...

CVE-2025-5287

Description: It is an exploit code that works for multiple urls and multi thread for Unauth Sql Injection on Wp plugin with CVE-2025-5287 Example usage: usage: CVE-2025-5287.py -h --file FILE --fudge FUDGE --timeout TIMEOUT --threads THREADS --proxy PROXY Time-Based SQLi Checker Clean, Threaded,...

vulns

vulnerability reports HN Security's advisories. https://hnsecurity.it/ Solaris HNS-2022-01-dtprintinfo. Multiple vulnerabilities in Solaris dtprintinfo and libXm/libXpm CVE-2022-46285, CVE-2023-24039, CVE-2023-24040. Zyxel HNS-2022-02-zyxel-zysh. Multiple vulnerabilities in Zyxel zysh...

Remote-DLL-Injection-with-Timer-based-Shellcode-Execution

Remote DLL Injection with Timer-based Shellcode Execution Documentation updated from previous mistake proces injection title! ⚠ Educational Research Only This repository contains security research for educational purposes and authorized use only. Use responsibly and in accordance with all...

CVE-2026-35584

CVE-2026-35584 POC - CVE-2026-35584 FreeScout Description Summary The endpoint GET /thread/read/conversationid/threadid does not require authentication and does not validate whether the given threadid belongs to the given conversationid. This allows any unauthenticated attacker to: Mark any threa...

CVE_2026_40369

CVE202640369 Exploit poc and exp for CVE202640369, related to my analyze, use cmake. Debug code, poc and exp files for reproducing CVE202640369, written with cmake. As before, you can compile it directly using the regular cmake commands. About the analysis article: WeChat Official Account:...

CVE-2021-45046

tejas-nagchandi/CVE-2021-45046 Attack Description It was found that the fix to address CVE-2021-44228 in Apache Log4j 2.15.0 was incomplete in certain non-default configurations. This could allows attackers with control over Thread Context Map MDC input data when the logging configuration uses a...

CVE-2024-24919

Takes in a ip list and you can specify threads with -t python3 exploit.py -i ips.txt -t 15 -o output.txt For educational purposes only...

Revenant

CVE-2026-74943 · Use-after-free in Firefox RasterImage surface discard This directory holds an honest reproduction scaffold for a cross-thread use-after-free in mozilla::image::RasterImage::OnSurfaceDiscarded. It is meant to be run against a locally downloaded vulnerable Firefox build using only...

CVE-2026-84181

CVE-2026-84181 — camel-shiro: authentication bypass via a thread-bound subject Runnable proof-of-concept reproducer for the Apache Camel vulnerability where the Shiro security processor skipped credential verification when the Shiro Subject already bound to the current thread carried the same...

CVE-2026-11961

CVE-2026-11961 Mass Exploit tool for CVE-2026-11961 affecting the WordPress User Registration & Membership plugin. Features Plugin version detection Single target support Batch target processing Multi-thread support Random or custom credentials HTTP/HTTPS proxy support Request timeout configurati...

CLEANSTART-2024-YS32357 Concurrent use of the URL parser with non-UTF-8 data was not thread-safe

Security vulnerability affects the firefox-esr package. Concurrent use of the URL parser with non-UTF-8 data was not thread-safe...

CLEANSTART-2024-WS73678 In unusual circumstances, an individual thread may outlive the thread's manager during shutdown

Security vulnerability affects the firefox package. In unusual circumstances, an individual thread may outlive the thread's manager during shutdown...

CLEANSTART-2024-DI93631 background script invoking <code>requestFullscreen</code> and then blocking the main thread could force the browser into fullscreen mode indefinitely, resulting in potential user confusion or spoof...

Security vulnerability affects the firefox-esr package. A background script invoking requestFullscreen and then blocking the main thread could force the browser into fullscreen mode indefinitely, resulting in potential user confusion or spoofing attacks...

external_zlib-1.2.7_CVE-2018-25032

ZLIB DATA COMPRESSION LIBRARY zlib 1.2.7 is a general purpose data compression library. All the code is thread safe. The data format used by the zlib library is described by RFCs Request for Comments 1950 to 1952 in the files http://tools.ietf.org/html/rfc1950 zlib format, rfc1951 deflate format...