cve-2025-62215-exploit-poc

CVE-2025-62215 Proof-of-Concept ⚠️ WARNING - LEGAL AND ETHICAL NOTICE THIS CODE IS FOR EDUCATIONAL AND SECURITY RESEARCH PURPOSES ONLY. DO NOT use this code on systems you do not own or have explicit written permission to test DO NOT use this code for malicious purposes Unauthorized access to...

mp-flipper

MicroPython Flipper Zero Allows you to use the power of Python natively on your Flipper Zero. The application is available on the official Flipper Lab. For details on how to programm your Flipper with Python, check out the documentation on GitHub pages. Disclaimer This FAP version requires about ...

local-mcp

local-mcp Zero-dependency MCP server for local file operations. 13 filesystem tools + 3 meta-tools for progressive discovery — no SDKs, no frameworks, no npm install needed. MCP Protocol: 2024-11-05 · Transport: stdio + Streamable HTTP · Runtime: Node.js ≥ 22.0.0 Architecture local-mcp.mjs — 595...

CVE-2026-83548-checker

SonicWall SMA 1000 — Детектор уязвимостей CVE-2026-83548 / CVE-2026-83549 Неинтрузивный скрипт обнаружения для устройств SonicWall Secure Mobile Access SMA 1000, затронутых уязвимостями CVE-2026-83548 SSRF до аутентификации в интерфейсе Work Place, CVSS 10.0 и CVE-2026-83549 внедрение OS-команд...

Kentico Xperience 13 CMS - Staging Service Authentication Bypass (WT-2025-0006)

An authentication bypass vulnerability in Kentico Xperience allows authentication bypass via the Staging Sync Server component password handling for the server defined None type. Authentication bypass allows an attacker to control administrative objects.This issue affects Xperience through...

SUSE SLES16: ImageMagick / ImageMagick-config-7-SUSE / etc (SUSE-SU-2026:23948-1)

The remote SUSE Linux SLES16 / SLESSAP16 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:23948-1 advisory. - CVE-2026-93586: use-after-free in the ImagesToBlob method can lead to a process crash bsc1281912. - CVE-2026-93587: policy bypas...

Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS : libXpm vulnerability (USN-8862-1)

The remote Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-8862-1 advisory. It was discovered that libXpm did not correctly handle XPM images with zero-dimension values. A local attacker could possibly use this iss...

msdt-disable

NOTE : This tool is now obsolete! The Follina exploit is now fixed as of June 14, 2022. Which means: if you used this tool, you can now enable the MSDT protocol again... if you still have the backup .reg file, of course. The MSDT Protocol Disabler is a tool that disables the MSDT protocol...

agentZ

제로 트러스트 에이전틱 AI 플랫폼 AI 에이전트를 구축하고, 실행하고, 관리하세요. 설계 단계부터 안전하게. 모든 에이전트는 기본 거부 샌드박스 내에서 실행되며 자격 증명을 절대 받지 않습니다. 모든 에이전트 작업은 추적 가능합니다. AgentZ는 AI 에이전트를 실행하기 위한 멀티테넌트 플랫폼입니다. 강력한 격리 보장, 에이전트에 대한 자격 증명 노출 제로, 기본 거부 네트워크 태세, 그리고 에이전트가 접근할 수 있는 소프트웨어 패키지에 대한 제어를 제공합니다. 웹사이트 : AgentZ 랜딩 페이지. DeepWiki :...

ncloader

Ncloader A simple dll injection utility The current design implements the well-known DLL injection technique: VirtualAllocEx allocates memory for string in remote process WriteProcessMemory writes the "path/to/dll/file" in remotely allocated memory CreateRemoteThread with start address of...

CVE-2026-28289

🚨 CVE-2026-28289 — “Mail2Shell” Zero-Click Unauthenticated RCE in FreeScout via Email Attachment Bypass 📖 Overview CVE-2026-28289 , nicknamed Mail2Shell , is a critical zero-click Remote Code Execution RCE vulnerability affecting FreeScout. An attacker can send a specially crafted email to a...

0days-for-latest-kernel

This repository does not have a README...

BHPAI

ДОКУМЕНТАЦИЯ ПРОЕКТА: BHPAI Версия системы : V1.6 Enterprise Edition Комплексное обновление функций системы Автор : Rin449 Языки и ключевые технологии : C++17 MinGW-w64 / MSYS2, Python 3.9+, PyQt6, MinHook, Capstone Engine, Intel PT Processor Trace, PyTorch, LightGBM, OpenSSL 3.x, zlib, Argon2id,...

CVE-2026-85046

CVE-2026-85046 Путаница типов type confusion в V8 при инлайн-оптимизации Array.prototype.sort Maglev + Turbofan. Шестой zero-day Chrome в 2026 году. Поле| Значение ---|--- CVSS| 8.8 High CWE| CWE-843 Type Confusion Компонент| V8 JavaScript Engine -- Maglev/Turbofan inline sort Затронуты| Chrome...

POC-CVE-2026-0769

Description Proof of concept exploit code for CVE-2026-0769 Usage python3 poc.py -u -c Without bash command proof of code exec via Divide By Zero Error With bash command NOTE: Bash output isn't returned because the endpoint only returns the component template and metadata. The bash output is stor...

criPPLe

criPPLe 프로세스 보호PP 및 프로세스 보호 라이트PPL를 제거하는 Windows 커널 드라이버입니다. 이 프로젝트는 Zero-Point Security의 "Offensive Driver Development 과정"의 도움으로 제작되었습니다. 이 커널 드라이버는 주어진 pid에서 프로세스 보호를 제거하며, 프로세스의 PSPROTECTION 구조체에 대한 포인터를 얻어 해당 값을 0으로 설정합니다. PSPROTECTION +0x000 Level : UChar +0x000 Type : Pos 0, 3 Bits +0x000...

CVE-2026-20131-Post-Incident-Written-Report

CVE-2026-20131-사후-사고-보고서 이 사후 사고 보고서는 Cisco Secure Firewall Management CenterFMC의 치명적인 제로데이 무인증 원격 코드 실행RCE 취약점인 CVE-2026-20131의 악용을 분석합니다. 이 문서는 Java 객체 역직렬화CWE-502를 통한 초기 침입 경로, Interlock 랜섬웨어 그룹이 사용한 위협 행위자 전술, 네트워크 열거 워크플로우, 포렌식 타임라인을 다룹니다. 또한 근본 원인 분석 결과, 네트워크 세분화에 관한 교훈, 즉각적인 패치 적용, 계정 감사, ...

FuzzingBrain-Bench

FuzzingBrain Bench Бенчмарк для воспроизведения уязвимостей с помощью LLM на 77 реальных zero-day багах в 43 open-source проектах C / C++ / Java. Каждое задание даёт агенту только фаззинг-харнесс цель и исходники проекта на уязвимой ревизии — без патча, без фикс-коммита, без целевой строки. Агент...

adbHijacker

CVE-2026-0073 — Обход аутентификации TLS в Android ADB Эксплойт proof-of-concept и сетевой сканер для CVE-2026-0073 — критической уязвимости удалённого выполнения кода с нулевым кликом и без взаимодействия в пути аутентификации ADB-over-TCP в Android adbd. Уязвимость представляет собой логическую...

CVE-2026-31431-Check

CVE-2026-31431 Copy Fail скрипт проверки уязвимости Обзор уязвимости CVE-2026-31431 Copy Fail — это уязвимость локального повышения привилегий в ядре Linux, которая через сокеты AFALG address family 38 в сочетании с системным вызовом нулевого копирования splice обходит права на запись в файлы и...