Pribado

🔐 Pribado Private API Key Management & Zero-Knowledge Infrastructure Pribado is a self-hostable, zero-knowledge platform for managing API keys, encrypted secrets, and private communications. Built on Oasis Sapphire for hardware-backed confidential computing. ✨ Features 🔑 Private API Proxy Store A...

provisioner

Provisioner Resumen Provisioner es un asistente de aprovisionamiento orientado a desarrolladores para ordenadores de placa única SBCs, particularmente plataformas basadas en U-Boot. Proporciona un entorno autocontenido para: Acceder a placas de forma remota Automatizar flujos de trabajo de puesta...

CVE-2024-50498

CVE-2024-50498 Description Improper Control of Generation of Code 'Code Injection' vulnerability in LUBUS WP Query Console allows Code Injection.This issue affects WP Query Console: from n/a through 1.0. Setup Netcat Listener: Open a terminal on your machine and start a Netcat listener to wait fo...

CVE-2020-11978

CVE-2020-11978: Remote code execution in Apache Airflow's Example DAGs Information Description: This vulnerability allows RCE when Airflow's example DAGs are loaded, potentially unauthenticated with CVE-2020-13927 CVE Credit : xuxiang of DtDream security Versions Affected: On CVE-2020-13927 If...

jboss-_CVE-2017-12149

jboss-CVE-2017-12149 verifyCVE-2017-12149.jar provides command-line mode to verify the vulnerability. If the vulnerability exists, it returns a characteristic string. Simply execute the command: $ java -jar verifyCVE-2017-12149.jar http://xxx:8080 成功返回: vuln6581362514513155613jboss...

CVE-2023-37800

Unquoted-Service Path in the Fortect - 5.0.0.7 - CVE-2023-37800 Unquoted Service Path in the Fortect - 5.0.0.7 Discoverer: Idan Malihi Description The component MainService.exe is vulnerable to unquoted service path: C:\Program Files\Fortect\MainService.exe Steps to Reproduce To exploit the...

CVE-2020-11179-Adreno-Qualcomm-GPU

My independent work from the poc created by P0 researcher Ben Hawkes Original article: https://googleprojectzero.blogspot.com/2020/09/attacking-qualcomm-adreno-gpu.html My goal is to convert his poc to C, and continue where he left off and turn the poc into either a root shell, or a kernel r/w, a...

CVE-2022-36804

CVE-2022-36804 Atlassian Bitbucket Server and Data Center - Command Injection Vulnerability CVE-2022-36804 In affected versions of Atlassian Bitbucket Server and Data Center a Command Injection Vulnerability exists in multiple API endpoints where an attacker with access to a public repository or...

log4shell_sentinel

Log4Shell Sentinel - A Smart CVE-2021-44228 Scanner Introduction While there have some excellent tools released to help organizations scan their environments for applications vulnerable to the critical Log4J / CVE-2021-44228 vulnerability, I felt that: none of the tools I ran into were made for...

CVE-2024-56426

Exynos 990 / Exynos9830 Unified BootROM Exploit Unified CVE-2024-56426 tooling for the Exynos 990 Galaxy S20, S20 FE, and Note20 families. The exploit accepts all ten model names and maps them onto six verified stock bootloader families. !CAUTION The tracked key bundle and generated images are...

lazylist-cve-poc

CVE-2022-36944 payload generator This mini-project is created to demonstrate proof of concept of CVE-2022-36944 vulnerability. It is similar to ysoserial, but generates payload only for this CVE with LazyList class. Quick FAQ What artifacts bring the vulnerability? org.scala-lang:scala-library wi...

CVE-2025-49113

CVE-2025-49113 – Exploit RCE de Roundcube Webmail PoC en Python ID de CVE: CVE-2025-49113 Tipo de Exploit: Ejecución Remota de Código mediante Inyección de Objetos PHP Aplicación: Roundcube Webmail ≤ 1.5.9 y ≤ 1.6.10 Lenguaje del Exploit: Python Autor: 00xCanelo Estado: Probado y Funcionando en...

0xKern3lCrush

💀 0xKern3lCrush-M4te-CVE-2026-0828 Windows BYOVD Research & Endpoint Recon Notes Strictly educational / security research repository. Goal: Document and understand Bring-Your-Own-Vulnerable-Driver BYOVD techniques via public disclosures — zero working exploits included. This repo collects: Safe...

CVE-2026-86330

An OS command injection flaw was found in the sethostnameinternal function of NooBaa's clusterinternalapi. This component is responsible for managing the Multi-Cloud Object Gateway in OpenShift Data Foundation. The vulnerability occurs because the hostname parameter is passed directly to a shell...

CVE-2024-4577-EXPLOIT

CVE-2024-4577 - PHP CGI Argument Injection Remote Code Execution RCE In certain versions of PHP 8.1. before 8.1.29, 8.2. before 8.2.20, and 8.3. before 8.3.8, a critical vulnerability exists when using PHP with Apache and PHP-CGI on Windows. If the system is configured to use specific code pages,...

CVE-2023-41772

CVE-2023-41772 / UIFuckUp UIFuckUp exploit to gain system privileges as user on Windows 10 1809 and up and 11. How To: 1. Compile uiaccessexploit.exe and uiaccessexploit.dll 2. Create directory C:\exploit 3. Place uiaccessexploit.exe, uiaccessexploit.dll and JuciyPotatoNG.exe in C:\exploit 4. Run...

CVE-2026-39987

POC del Exploit CVE-2026-39987 Descripción general Este repositorio contiene un script de Prueba de Concepto POC para CVE-2026-39987, una vulnerabilidad de Ejecución Remota de Código RCE previa a la autenticación en Marimo. El exploit aprovecha un endpoint WebSocket para ejecutar comandos...

cve-2023-23397

CVE-2023-23397 Este script permite crear correos electrónicos de Outlook codificados en TNEF con la carga útil del exploit CVE-2023-23397 y enviarlos a través de SMTP puro, sin necesidad de objetos COM ni EWS. No pude lograr que la clase de mensaje IPM.Schedule.Meeting.Request funcionara...

EUVD-2026-88252

Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in Iron Mountain Archiving Services Inc. EnVision allows SQL Injection. This issue affects enVision: before 260655...

CVE-2026-86595 SQLi in Iron Mountain's enVision

Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in Iron Mountain Archiving Services Inc. EnVision allows SQL Injection. This issue affects enVision: before 260655...