five-nights-at-follina-s

Five Nights at Follina's 一个Fullstack Academy网络安全项目，研究Follina漏洞（CVE-2022-30190）的完整生命周期，从利用到检测与防御。 团队： Brian Aldrich YoungWa Kim Jay O'Neill Binyang Jeffrey Xu 这套工具假定你有一个网络主机，或者可以使用Python搭建一个简单的Web服务器来托管生成或示例的payload文件。 免责声明 "Example...

Moniker-Link--CVE-2024-21413-

🔗 Moniker Link CVE-2024-21413 — A Practical Guide to the Outlook Zero-Click Vulnerability 📌 1. Introduction CVE-2024-21413 , commonly referred to as the Moniker Link vulnerability , is a critical security flaw in Microsoft Outlook that enables attackers to leak user credentials without requiring...

msdt-CVE-2022-30190

msdt-follina-office CVE-2022-30190 - Vulnerabilidad RCE de cero clics en MSDT...

SOC336-Windows-OLE-Zero-Click-RCE-Exploitation-Detected-CVE-2025-21298

SOC336 - Windows OLE Zero-Click RCE Exploitation Detected CVE-2025-21298 Walkthrough 🔎 Table of Content 1. Situation 2...

aisecplus-week01-danielossai

🔐 AISec Plus — Semana 1: Mapa de la Amenaza Investigador: Daniel Ossai Repositorio: aisecplus-week01-danielossai Entregado: Semana 1 · AISec Plus Bootcamp 📌 Nombre del Incidente y Fecha EchoLeak CVE-2025-32711 Descubierto: Enero 2025 · Divulgado: Junio 2025 · Parcheado: Junio 2025 📝 ¿Qué Sucedió?...

CVE-2024-42009-roundcube-xss

CVE-2024-42009 — Roundcube Webmail 1.6.6 Stored XSS PoC For authorised security testing, CTF environments, and educational research only. Using this tool against systems you do not own or have written permission to test is illegal under the Computer Misuse Act 1990 UK, the CFAA US, and equivalent...

CVE-2025-43300

CVE-2025-43300 CVE-2025-43300: Corrupción de memoria en el procesamiento de imágenes DNG en iOS/macOS Resumen Una vulnerabilidad en el procesamiento de imágenes de Apple RawCamera.bundle afecta a iOS 18.6.1 y macOS. El problema ocurre cuando los archivos DNG contienen metadatos TIFF y parámetros...

Blackash-CVE-2025-48593

🚨 CVE-2025-48593 Zero-Click Remote Code Execution in Android System 🚨 "A single malicious packet can own your device." — Android Security Team, Nov 2025 🎯 Vulnerability Snapshot Attribute| Details ---|--- CVE ID| CVE-2025-48593 Severity| 🔴 Critical RCE, Zero-Click CVSS Est.| 9.8 Pending NVD...

LetsDefend-SOC336-Windows-OLE-Zero-Click-RCE-Exploitation-Detected-CVE-2025-21298

LetsDefend SOC336: Windows OLE Zero-Click RCE Exploitation Detected This repository documents my investigation of a LetsDefend alert involving a Windows OLE zero-click remote code execution exploit tied to CVE-2025-21298. The goal is to show the reasoning behind the conclusion, from email triage ...

glass-cage-i18-2025-24085-and-cve-2025-24201

Original Fork Network Left Glass Cage: Zero-Click PNG Exploit Chain for iOS 18.2.1 CVE-2025-24201 – WebKit Remote Code Execution CVE-2025-24085 – Core Media Privilege Escalation Reported to Apple: January 9, 2025 Patched: February–March 2025 Tested On: iPhone 14 Pro Max iOS 18.2.1 CVSS Base Score...

cisco-CVE-2023-31488

Acerca de Investigador de seguridad: ly1g3, ly1g3attuta.io Huella GPG: https://keys.openpgp.org/vks/v1/by-fingerprint/5FE85CE4E8F675F5ABD2C0A33CE8BE447ED6D586 Resumen: Correo electrónico a RCE de cero clics como root - Ejecución remota de código/Corrupción de memoria/Cadena ROP CVE: CVE-2023-3148...

Glass-Cage-iOS18-CVE-2025-24085-CVE-2025-24201

Glass Cage: Cadena de explotación PNG de cero clics para iOS 18.2.1 CVE-2025-43300: Escritura fuera de límites en ImageIO CVE-2025-24201: Ejecución remota de código en WebKit CVE-2025-24085: Escalada de privilegios en Core Media Parcheado: Enero-marzo 2025 Probado en: iPhone 14 Pro Max iOS 18.2.1...

CVE-2025-48593

CVE-2025-48593 "Un solo paquete malicioso puede comprometer tu dispositivo." — Equipo de Seguridad de Android, Nov 2025 Ejecución Remota de Código Zero-Click en el Sistema Android Subsistema Bluetooth ⚠️ Aclaración Crítica del Alcance Actualizado Abr 2026 Los teléfonos y tabletas estándar NO son...

CVE-2025-31200-iOS-AudioConverter-RCE

CVE-2025-31200 – RCE Zero-Click en iOS AudioConverterService Divulgación pública de CVE-2025-31200 – una vulnerabilidad de ejecución remota de código RCE zero-click en iOS 18.X de Apple, específicamente dentro del componente AudioConverterService. La vulnerabilidad se desencadena mediante un...

CVE-2020-1349

CVE-2020-1349 This vulnerability occurs in Outlook 2019 16.0.12624.20424 installed on Korean Windows 10 1909 x64, codepage 949. TLDR; I have not been able to bypass aslr using this vulnerability, but I have written an outlook 2019 32bit exploit that pops up a calculator using the address of a...

iOS-Attack-Chain-CVE-2025-31200-CVE-2025-31201

CVE-2025-31200 y CVE-2025-31201 | Cadena RCE zero-click de iMessage Resumen Este repositorio documenta la investigación de una cadena de explotación remota zero-click que afecta a iOS 18.x y versiones posteriores. Un archivo de audio AMR malformado enviado a través de iMessage desencadena: 1...

CVE-2020-1493

CVE-2020-1493 This vulnerability occurs in Outlook 2019 16.0.12624.20424 installed on Windows 10 1909 x64, Also This vulnerability is zero click vulnerability. TLDR; I found this bug usng winafl fuzzer. This bug occured when parsing ms-tnef file. that attachement of eml file. vulnerable method re...

zero-click-exploit-analysis

Zero-Click, Old Tricks Anatomy of the 2025 WhatsApp/ImageIO zero-click exploit chain CVE-2025-55177 + CVE-2025-43300. Research paper plus an interactive web companion with CVE walkthroughs, patch diffs, and hands-on heap/stack labs. Live site: https://mcs.danielwagner.ro Paper PDF:...

-BuL

DEDSECBKIF DEDSECBKIF 是一款针对 Android、Linux 和 iOS 的按键注入工具。借助 CVE-2023-45866，它赋予用户对目标系统前所未有的控制能力，实现从按键注入到高级系统操作等多种功能。 描述 DEDSECBKIF 是一款强大的蓝牙漏洞利用工具，利用 CVE-2023-45866...

samsung-exynos-sms-stack-overflow-cve-2025-54328-critical-zero-click-baseband-rce

CVE-2025-54328 — Samsung Exynos SMS RP-DATA Stack Buffer Overflow Conceptual PoC for CVE-2025-54328, a CVSS 10.0 Critical stack-based buffer overflow in Samsung Exynos baseband firmware's SMS RP-DATA parser. Article Full write-up: Samsung Exynos SMS Stack Overflow: CVE-2025-54328 — Critical...