CVE-2023-38831-POC

Description Name : CVE-2023-38831 CVSS Score : 7.8 Affected Versions : Winrar 6.23 CVE-2023-38831 is a zero-day vulnerability affecting WinRAR all versions prior to 6.23. The issue is in the processing of ZIP format which could allow attackers to utilize affected archives to distribute malware. B...

HiddenSteps

Core crates — implementation status This is the honest, current-state complement to docs/design/02-system-architecture.md's target module map. It says what's actually built, what's verified against a real backend vs. a mock, and what's still genuinely missing — not what's planned that's...

SoftwareSystemSecurity-2019

SoftwareSystemSecurity-2019 Software System Security Final Assignment: Vulnerability Reproduction CVE-2018-4878 Flash 0day...

chithi

Chithi Documentation · Landing Page · Public Instances Chithi pronounced: chee-thee | IPA: /ˈtʃiː θiː/ is an open source end-to-end encrypted file sharing system with a zero trust backend server architecture. Contributing Contributions are welcome. Please open issues for bugs or feature requests,...

five-nights-at-follina-s

Five Nights at Follina's A Fullstack Academy Cybersecurity project examining the full cycle of the Follina CVE-2022-30190 vulnerability, from exploit to detection and defense. Team: Brian Aldrich YoungWa Kim Jay O'Neill Binyang Jeffrey Xu This set of tools assumes that you have a web host or can...

CVE-2026-20127---Cisco-SD-WAN-Preauth-RCE

CVE-2026-20127---Cisco-SD-WAN-Preauth-RCE Cisco SD-WAN Zero-Day CVE-2026-20127 Exploited Since 2023 for Admin Access. This repository contains a working proof-of-concept exploit for CVE-2026-20127, a critical pre-authentication vulnerability in Cisco Catalyst SD-WAN Controller formerly vSmart and...

CVE-2024-42009-roundcube-xss

CVE-2024-42009 — Roundcube Webmail 1.6.6 Stored XSS PoC For authorised security testing, CTF environments, and educational research only. Using this tool against systems you do not own or have written permission to test is illegal under the Computer Misuse Act 1990 UK, the CFAA US, and equivalent...

frida-interception-and-unpinning

Frida Mobile Interception Scripts !Funded by NLnet - NGI Zero...

Zero-Day-Legacy

🎓 Proyecto de Graduación — Universidad Nacional de Ajloun UNA Facultad de TI · Ciberseguridad y Computación en la Nube · Año Académico 2026 🏆 Nota más alta de la universidad: 97% 📖 Descripción General Zero-Day Legacy es una máquina de laboratorio Boot-to-Root CTF Capture The Flag realista e...

CVE-2021-3122-Details

CVE-2021-3122-Details Blog Post on how we found a CVE in AlohaPOS. https://www.sentinelone.com/blog/cve-2021-3122-how-we-caught-a-threat-actor-exploiting-ncr-pos-zero-day/...

CVE-2024-26170-extended

CVE-2024-26170-extended researching for CVE-2024-26170 or cimfs.sys to find overflows or bugs that is considered a zero-day...

WindowsMDM-LPE-0Day

WindowsMDM-LPE-0Day Works best on Windows 11 CVE-2021-24084 Windows Local Privilege Escalation Left officially unpatched since 2020. Hence, its still a zero day Screenshots: Youtube : https://youtu.be/lhT9m68GgL4 Affected Windows Versions Windows 10 1803 Windows 10 1809 Windows 10 1909 Windows 10...

elfloader

Summary elfloader is a super simple loader for ELF files that generates a flat in-memory representation of the ELF. Pair this with Rust and now you can write your shellcode in a proper, safe, high-level language. Any target that LLVM can target can be used, including custom target specifications...

P4wnP1_aloa

P4wnP1 A.L.O.A. P4wnP1 A.L.O.A. por MaMe82 es un framework que convierte una Raspberry Pi Zero W en una plataforma flexible y de bajo costo para pentesting, red teaming y compromisos físicos ... o en "A Little Offensive Appliance". 0. Cómo instalar La imagen más reciente se puede encontrar en la...

CVE-2023-28252

Since February 2022 was reported a new ransomware that appears to be using a Windows 0-day vulnerability, according to the research conducted by Trend Micro. More information about this ransomware can be found at this link. According to analysis by Kaspersky, the Nokoyawa ransomware group has use...

chrome_v8_cve_checker

How to use Open https://itsshotgun.github.io/chromecve-2025-5419checker/ in Chrome The page will detect your Chrome version and tell you if you’re vulnerable. If vulnerable, it’ll show a link to update Chrome immediately. Why This zero-day lets malicious websites run baaaaaaad code on your machin...

CVE-2023-23397

CVE-2023-23397 Simple and dirty PoC of the CVE-2023-23397 vulnerability impacting the Outlook thick client. Description Outlook suffers from a lack of control over the user input that allows to configure the sound of a meeting and appointment reminder. Indeed, an attacker is able to force a victi...

CVE-2025-43300

CVE-2025-43300 CVE-2025-43300: iOS/macOS DNG Image Processing Memory Corruption Summary A vulnerability in Apple’s image processing RawCamera.bundle affects iOS 18.6.1 and macOS. The issue occurs when DNG files contain mismatched TIFF metadata and JPEG Lossless parameters , leading to memory...

Citrix_Secure_Access_LPE_0DAY

Citric Secure Access Local privilege escalation I have discovered a local privilege escalation vulnerability in the Citrix Secure Access Windows Client. This vulnerability allows a privileged administrator to inject a malicious payload to gain NT Authority privileges. The affected versions of...

CVE-2024-21413

CVE-2024-21413 - Critical Remote Code Execution Vulnerability in Microsoft Outlook Setup 1. Create a config.ini file in the same directory as the script with the following format: emailcredentials senderemail = [email protected] senderpassword = yourapppassword smtpserver = smtp.gmail.com...