0dayex-checker

0dayex-checker Zeroday Microsoft Exchange Server checker Virtual Patching checker...

cve-2024-0012_9474-panos_authbypass_reproduction

CVE-2024-0012 / CVE-2024-9474 — PAN-OS Authentication Bypass → Privilege Escalation Chain CVE| Description| CVSS ---|---|--- CVE-2024-0012| PAN-OS Management Interface Authentication Bypass| 9.3 CVE-2024-9474| PAN-OS Privilege Escalation| 6.9 When chained, these vulnerabilities allow...

CVE-2023-23397

CVE-2023-23397 Vulnerability Details 🚨💻 Microsoft has recently addressed a set of critical security vulnerabilities, including this zero-day exploits: CVE-2023-23397. The Common Vulnerability Scoring System CVSS assigned score of 9.8 to this exploit. CVE-2023-23397: Elevation of Privilege in...

CVE-2021-1675

CVE-2021-1675 CVE-2021-1675: ZERO-DAY VULNERABILITY IN WINDOWS PRINTER SERVICE WITH AN EXPLOIT AVAILABLE IN ALL OPERATING SYSTEM VERSIONS Let me provide a onf the method I found in order to mitigate that waitting for MS release a official patches. Run as Administrator in Windows Powershell Note:...

malware-samples

malware-samples A collection of malware samples and relevant dissection information, most probably referenced from http://blog.inquest.net or https://twitter.com/inquest. Be sure to also check out the Deep File Inspection DFI portion of https://labs.inquest.net for an interactive searchable...

sonos

sonos/amlogic haxx here you will find some exploit & tool code that was part of my presentation about the Sonos One @ Hack in the Box amsterdam 2023. the EL3 exploit can be used to dump your OTP/eFUSE data. sonostool can be used to get decryption keys for Sonos LUKS volumes as well as fetch and...

SECURITY-218

This mitigation is obsolete as of Jenkins 2.54 and Jenkins LTS 2.46.2. If you have installed a 2.54+/LTS 2.46.2+ version of Jenkins anew, the Remoting-based CLI is disabled out of the box. If you installed an older version of Jenkins and upgraded to 2.54+ or LTS 2.46.2+, you will be prompted by a...

CVE-2026-85046-Patch-confusion-zero-day-vulnerability-in-Google-Chrome-s-V8-engine

CVE-2026-85046: Chrome V8 Type Confusion Patch This repository contains the conceptual C++ patch for the critical zero-day vulnerability in Google Chrome's V8 JavaScript and WebAssembly engine CVE-2026-85046. Overview The vulnerability is a high-severity type confusion bug in V8's Maglev and...

CVE-2026-85046

CVE-2026-85046 Chrome Zero-Day Vulnerability Exploited in the Wild Donate Help maintain this project If you find this project useful, please consider supporting its ongoing maintenance through PayPal or ABA Mobile. ❤️ ១០% នៃការបរិច្ចាគរបស់អ្នក នឹងត្រូវបានបរិច្ចាគជូនមន្ទីរពេទ្យគន្ធបុប្ផា។ ❤️ Ten...

Event-ID-193-Rule-Name-SOC231-Cisco-IOS-XE-Web-UI-ZeroDay-CVE-2023-20198-

This repository does not have a README...

cve-2025-62215-exploit-poc

CVE-2025-62215 Proof-of-Concept ⚠️ WARNING - LEGAL AND ETHICAL NOTICE THIS CODE IS FOR EDUCATIONAL AND SECURITY RESEARCH PURPOSES ONLY. DO NOT use this code on systems you do not own or have explicit written permission to test DO NOT use this code for malicious purposes Unauthorized access to...

CVE-2026-83548-checker

SonicWall SMA 1000 — CVE-2026-83548 / CVE-2026-83549 Exposure Detector A non-intrusive detection script for SonicWall Secure Mobile Access SMA 1000 series appliances affected by CVE-2026-83548 pre-auth SSRF in the Work Place interface, CVSS 10.0 and CVE-2026-83549 post-auth OS command injection i...

msdt-disable

NOTE : This tool is now obsolete! The Follina exploit is now fixed as of June 14, 2022. Which means: if you used this tool, you can now enable the MSDT protocol again... if you still have the backup .reg file, of course. The MSDT Protocol Disabler is a tool that disables the MSDT protocol...

0days-for-latest-kernel

This repository does not have a README...

CVE-2026-85046

CVE-2026-85046 V8 type confusion in inline Array.prototype.sort Maglev + Turbofan. Chrome 6th zero-day of 2026. Field| Value ---|--- CVSS| 8.8 High CWE| CWE-843 Type Confusion Component| V8 JavaScript Engine -- Maglev/Turbofan inline sort Affected| Chrome 152.0.7977.82, all Chromium-based browser...

CVE-2026-20131-Post-Incident-Written-Report

CVE-2026-20131-Post-Incident-Written-Report This post-incident report analyzes the exploitation of CVE-2026-20131, a critical zero-day unauthenticated Remote Code Execution RCE vulnerability in Cisco Secure Firewall Management Center FMC. The document covers the initial intrusion vector via Java...

FuzzingBrain-Bench

FuzzingBrain Bench A benchmark for LLM-driven vulnerability reproduction on 77 real zero-day bugs across 43 open-source projects C / C++ / Java. Each challenge gives the agent only the fuzz harness the target and the project source at the vulnerable revision — no patch, no fix commit, no target...

CVE-2026-20131-POC

CVE-2026-20131---Cisco-SD-WAN-Preauth-RCE Cisco SD-WAN Zero-Day CVE-2026-20131 Exploited Since 2023 for Admin Access. This repository contains a working proof-of-concept exploit for CVE-2026-20131, a critical pre-authentication vulnerability in Cisco Catalyst SD-WAN Controller formerly vSmart and...

IOBitUnlockerUnlocker

Intro 0 day Moves or Copies any file. Bypasses previous patch with a checksum trick. Writup: https://nathan2.com/files/iobit.pdf Overall info: https://nathan2.com/posts/iobit/ I discovered this without knowing that this there was another previous exploit that discovered this first. However, this...

Ashwesker-CVE-2026-21509

🛡️ CVE-2026-21509 — Microsoft Office Zero-Day Status: Actively exploited → Emergency patch released Severity: 🔴 High Risk Type: Security Feature Bypass 🔍 What is it? CVE-2026-21509 is a serious vulnerability in Microsoft Office that allows attackers to bypass built-in security protections by...