skeleton

Skeleton but pronounced like Peloton A Zero-Click RCE exploit for CVE-2021-0326 on the Peloton Bike And also every other unpatched Android Device PoC requires ASLR to be disabled. Associated blog post:...

CVE-2020-1349

CVE-2020-1349 This vulnerability occurs in Outlook 2019 16.0.12624.20424 installed on Korean Windows 10 1909 x64, codepage 949. TLDR; I have not been able to bypass aslr using this vulnerability, but I have written an outlook 2019 32bit exploit that pops up a calculator using the address of a...

five-nights-at-follina-s

Five Nights at Follina's A Fullstack Academy Cybersecurity project examining the full cycle of the Follina CVE-2022-30190 vulnerability, from exploit to detection and defense. Team: Brian Aldrich YoungWa Kim Jay O'Neill Binyang Jeffrey Xu This set of tools assumes that you have a web host or can...

CVE-2020-1493

CVE-2020-1493 This vulnerability occurs in Outlook 2019 16.0.12624.20424 installed on Windows 10 1909 x64, Also This vulnerability is zero click vulnerability. TLDR; I found this bug usng winafl fuzzer. This bug occured when parsing ms-tnef file. that attachement of eml file. vulnerable method re...

CVE-2026-0049

CVE-2026-0049 — Android DNG zero-click DoS dngsdk MapTable add-overflow Full research material and PoC. Narrative analysis: 🇮🇹BLOG.md · 🇬🇧BLOG.en.md. Bug : unsigned integer overflow on fAreaSpec.Plane + fAreaSpec.Planes in dngopcodeMapTable::ProcessArea dngsdk/source/dngmiscopcodes.cpp:388. Impact...

Zero-Click-RCE-Incident-Response-CVE-2025-21298

Incident Response: Windows OLE Zero-Click RCE CVE-2025-21298 Project Overview This project documents the end-to-end investigation and containment of a Critical-severity Zero-Click Remote Code Execution RCE attempt. Using EDR telemetry and threat intelligence, I identified a "Living off the Land"...

msdt-CVE-2022-30190

msdt-follina-office CVE-2022-30190- A Zero-Click RCE Vulnerability In MSDT...

CVE-2026-32202

Zero-click forced authentication: viewing a folder with the crafted .lnk triggers UNC resolution during icon render, coercing the victim into an attacker-directed outbound connection that leaks and enables relay of their Net-NTLMv2 credentials. Emerged due to an incomplete patch of CVE-2026-21510...

CVE-2026-28956-jxl-messages-surface

JPEG XL auto-decodes in the iOS Messages preview path A delivery-surface finding for CVE-2026-28956 AppleJPEGXL, plus the patch-diff attribution and a reliability reality-check on the public PoC. TL;DR — Conventional wisdom and our own prior measurement with EXR is that iOS Messages renders...

CVE-2020-0022

CVE-2020-0022 vulnerability exploitation on Bouygues BBox Miami Android TV 8.0 - ARM32 Cortex A9 By Polo35 - 2020/08/24 "Usage: python poloexploit.py targetbtmac targetadbip, shellcommand, disablereboot, verbose" Based on scripts by Jan Ruge CVE-2020-0022 an Android 8.0-9.0 Bluetooth Zero-Click R...

-BuL

DEDSECBKIF DEDSECBKIF is a keystroke injection tool for Android, Linux, and iOS. With the help of CVE-2023-45866, it grants users unprecedented control over targeted systems, enabling various functions from keystroke injection to advanced system manipulations. DESCRIPTION DEDSECBKIF is a potent...

CVE-2021-1965

CVE-2021-1965 CVE-2021-1965 WiFi Zero Click RCE Trigger PoC This is a quick&dirty Proof-of-Concept code to verify if your phone is vulnerable. After running the poc code, your phone is supposed to crash&reboot within seconds. In case you need more info about the bug & vulnerable code, here you ar...

CVE-2024-38063

CVE-2024-38063 - Windows TCP/IP Remote Code Execution Vulnerability Research Comprehensive research to save you time, energy, sanity, & understanding. I want to start this off by saying that this specific CVE is like many in that due to its high severity score, it has gained an enormous amount...

Moniker-Link--CVE-2024-21413-

🔗 Moniker Link CVE-2024-21413 — A Practical Guide to the Outlook Zero-Click Vulnerability 📌 1. Introduction CVE-2024-21413 , commonly referred to as the Moniker Link vulnerability , is a critical security flaw in Microsoft Outlook that enables attackers to leak user credentials without requiring...

iOS-Attack-Chain-CVE-2025-31200-CVE-2025-31201

CVE-2025-31200 & CVE-2025-31201 | iMessage Zero-Click RCE Chain Summary This repository documents research into a zero-click remote exploit chain affecting iOS 18.x and beyond. A malformed AMR audio file delivered via iMessage triggers: 1. Heap corruption in CoreAudio CVE-2025-31200 — in...

CVE-2026-28289

🚨 CVE-2026-28289 — “Mail2Shell” Zero-Click Unauthenticated RCE in FreeScout via Email Attachment Bypass 📖 Overview CVE-2026-28289 , nicknamed Mail2Shell , is a critical zero-click Remote Code Execution RCE vulnerability affecting FreeScout. An attacker can send a specially crafted email to a...

CVE-2025-24132-Scanner

EN | KR 📄 Overview This tool discovers AirPlay-capable devices on your local network via mDNS Zeroconf and tests them for the CVE-2025-24132 “zero-click” HTTP RCE vulnerability. Discovered devices are listed in a simple GUI; click a device to view all retrieved properties. Prerequisites Python 3....

CVE-2021-46398_Chamilo-LMS-RCE

CVE-2021-46398 Chamilo-LMS 1.11.14 RCE Chamilo LMS v1.11.14 was discovered to contain a zero click code injection vulnerability which allows attackers to execute arbitrary code via a crafted plugin. This vulnerability is triggered through user interaction with the attacker's profile page. One-Cli...

CVE-2025-31200-iOS-AudioConverter-RCE

CVE-2025-31200 – iOS AudioConverterService Zero-Click RCE Public disclosure of CVE-2025-31200 – a zero-click remote code execution RCE vulnerability in Apple's iOS 18.X, specifically within the AudioConverterService component. The vulnerability is triggered by a malicious audio file delivered via...

aisecplus-week01-danielossai

🔐 AISec Plus — Week 1: Map the Threat Researcher: Daniel Ossai Repo: aisecplus-week01-danielossai Submitted: Week 1 · AISec Plus Bootcamp 📌 Incident Name & Date EchoLeak CVE-2025-32711 Discovered: January 2025 · Disclosed: June 2025 · Patched: June 2025 📝 What Happened Researchers at Aim Security...