5782 matches found
CVE-2026-11645
šØ CVE-2026-11645 šØ š Google Chrome V8 Zero-Day Memory Corruption Vulnerability š„ Actively Exploited Zero-Day ā” V8 Engine Memory Corruption š”ļø Patch Immediately š Overview ā ļø CVE-2026-11645 is a high-severity zero-day vulnerability affecting the Google Chrome V8 JavaScript engine. The flaw allows...
T3MP3ST
š©ļø T3MP3ST š©ļø āāāāāāāāāāāāāāā āāāā āāāāā āāāāāā āāāāāā āāāāāā āāāāāāāāā ā āāā āāāā ā āāāāāāā āāāāāāā āāāāā ā āāā ā ā āāā āā ā āāāā āāāāāā āāā āāāāāāāā āāāāāāāā ā āāāā ā āāāā āā ā āāāā ā āāā ā āāā āāā āāāāāāā āāāā ā ā āāāā āāāā ā āāāā ā āāāāāāāāāāā āāāāāāāā ā āāāāāāāāāāāāāāāāā āāāā ā ā āā āā āā āā...
anamnesis-release
Anamnesis: LLM Exploit Generation Evaluation This repository contains the evaluation framework for studying how LLM agents generate exploits from vulnerability reports in the presence of exploit mitigations. Given a bug report and proof-of-concept trigger, agents analyze vulnerable software and...
threat-team
Google Threat Intelligence Group Notice: This repository is no longer maintained. For the latest Indicators of Compromise IOCs and threat research, please refer to the Google Cloud Threat Intelligence blog and free Google Threat Intelligence / VirusTotal collections. This repository contains...
nano-analyzer
Nano-analyzer A minimal LLM-powered zero-day vulnerability scanner byAISLE. Research prototype for demonstration purposes. This is a simple, single-file harness that is able to detect real zero-day vulnerabilities. Note that it is a prototype, biased towards C/C++ memory safety bugs, and will...
evil-ssdp
Overview This tool responds to SSDP multicast discover requests, posing as a generic UPNP device. Your spoofed device will magically appear in Windows Explorer on machines in your local network. Users who are tempted to open the device are shown a configurable phishing page. This page can load a...
CVE-2025-53770-SharePoint-Zero-Day-Variant-Exploited-for-Full-RCE
šØ CVEā2025ā53770 ā SharePoint Zero-Day Variant Exploited for Full RCE A Critical Escalation from CVEā2025ā49706 By Aditya Bhatt ā Red Team | VAPT š TL;DR CVEā2025ā53770 is a critical CVSS 9.8 zero-auth RCE vulnerability in Microsoft SharePoint now actively exploited in the wild. This isnāt a...
CVE-2025-57819
CVE-2025-57819 Overview of this vulnerability quoted from @jfinstrom here Around 2025-08-21 multiple FreePBX systems began showing errors and later confirmed compromises. Vendor Sangoma/FreePBX Security Team published an advisory on 2025-08-26 urging administrators to restrict public access to th...
mass_cve-2021-41773
masscve-2021-41773 MASS CVE-2021-41773 Screenshot Usage ! python3 -m pip install requests pyyhon3 cve-2021-41773.py urlist.txt pool Note ! results will be automatically saved in vuln.txt u can add a common dir on...
CVE-2022-30190-Zero-Click-Zero-Day-in-msdt
This repository does not have a README...
LetsDefend-SOC342-CVE-2025-53770-SharePoint-ToolShell-Auth-Bypass-andRCE-EventID-320
š§ LetsDefend SharePoint Zero-Day Analysis ToolShell - SOC342-CVE-2025-53770 š Introduction I investigated a SharePoint zero-day called ToolShell CVE-2025-53770 in the LetsDefend cyber lab. The exercise mimicked a real-world zero-day RCE attack where a malicious POST request bypassed authenticatio...
cve-2015-0313
CVE-2015-0313 Adobe Flash vulnerability source code cve-2015-0313 from Angler Exploit Kit Reference: http://blog.trendmicro.com/trendlabs-security-intelligence/trend-micro-discovers-new-adobe-flash-zero-day-exploit-used-in-malvertisements/...
APT_REPORT
APTREPORT collected by @blackorbird https://x.com/blackorbird Interesting apt report & sample & malware & technology & intellegence collection APT Group for country Threat Actor Groups Tracked by Palo Alto Networks Unit 42...
CVE-2020-6519
Chromium 83 Zero Day Full CSP Bypass Cross Platforms CVE-2020-6519 Technical Article POC as reported to the chromium project DEMO Vids!...
-CVE-2025-8088
-CVE-2025-8088 POWERSHEL script to check if your device is affected or no šØ CVE-2025-8088: WinRAR Zero-Day Alert! šØ A critical WinRAR vulnerability CVE-2025-8088 is making headlines ā attackers can exploit this flaw in versions 7.13 to execute malicious code just by tricking users into opening a...
CVE-2023-35078
CVE-2023-35078 shodan dorks You can use the following shodan dorks to find public targets. http.favicon.hash:362091310 http.favicon.hash:545827989 path=/mifs You can use the following to transform data from shodan API to format suitable for the checking script: jq -cr 'select.http.favicon.hash ==...
CVE-2018-15982
CVE-2018-15982 Flash sources for CVE-2018-15982 used by NK this is a dump of a fully weaponized activex obj used by NK https://threatpost.com/adobe-patches-zero-day-vulnerability-in-flash-player/139629/ Payloads are in Class 6 and 7...
Cisco_CVE-2023-20198
CiscoCVE-2023-20198 Cisco CVE-2023-20198 š Cisco warned of a critical authentication bypass zero-day vulnerability CVE-2023-20198 in its IOS XE software that allows unauthenticated attackers to gain full administrative privileges. šØāš» The vulnerability only affects devices with the Web User...
CVE-2025-53770
Divine Absolute - CVE-2025-53770 Exploit Tool Overview Divine Absolute is a sophisticated, wizard-driven Python exploit tool targeting CVE-2025-53770 , a critical CVSS 9.8 unauthenticated remote code execution RCE vulnerability in on-premises Microsoft SharePoint Server 2016, 2019, Subscription...
cve-2025-0282-ivanti_rce_reproduction
CVE-2025-0282 ā Ivanti Connect Secure / Policy Secure / ZTA Gateways Stack-Based Buffer Overflow RCE CVSS 9.0 ā CRITICAL | Actively Exploited Zero-Day | Discovered January 2025 Overview CVE-2025-0282 is a stack-based buffer overflow vulnerability CWE-121 / CWE-787 in the IFT/TLS handling componen...