cve-2024-21683-rce

cve-2024-21683-rce CVE-2024-21683 is a critical remote code execution RCE vulnerability affecting Atlassian's Confluence Server and Data Center. This vulnerability has a CVSS score of 8.3, placing it in the high-severity category. Attackers can exploit this vulnerability to execute remote code by...

RCity-CVE-2024-27198

RCity - CVE-2024-27198 RCE & Admin Account Creation & CVE-2024-27199 Auth Bypass Exploiting CVE-2024-27198 & CVE-2024-27199 RCity is a Python script that interacts with a vulnerable TeamCity server. The CVE facilitates for unauthorised admin account creation, bypassing 403's on the domain. Whilst...

dredge-cargo

This is NOT a password manager. NOT a notes app. And definetely NOT a deep-sea benthic abberant specimen taxonomic provenance registry. But it does the first two better than either. Just kidding not really. Install • Quick Start • Features • The Link Command • Commands • How It Works • Security •...

CVE-2026-85048-the-gpu-died

CVE-2026-85048 — viz surface UAF GPU process Another one that triggers a very difficult to use UAF. The BackupRefPtr will swat it. Also this being in the stage 2, you have to patch to see it happen. Re-entrancy in Surface::UpdateActivationDependencies stores a stale allocation-group pointer...

GitLeaks

GitLeaks Container Image Opinionated gitleaks build for secret scanning in local workflows and pipelines. Features Builds gitleaks from the tagged upstream source with pinned Go toolchains for reproducible binaries. GitLab CI Component at niclas-zone/ci/gitleaks. Usage Pull the image podman pull...

zeek-community-id

"Community ID" flow hashing for Zeek This Zeek package provides support for Community ID flow hashing, a standardized way of labeling traffic flows in network monitors. When loaded, the package adds a communityid string field to conn.log. Note Zeek 6 and later versions include Community ID suppor...

geolocation-tool

Latency based IP Geolocation A simple tool that uses Globalping to resolve an IP to a physical location based on latency. Learn more about this tool and why it exists in our blog: We have ipinfo at home or how to geolocate IPs in your CLI using latency Install git clone...

aura-inspector

aura-inspector This is not an officially supported Google product. This project is not eligible for the Google Open Source Software Vulnerability Rewards Program. Introduction aura-inspector is a Swiss Army knife of Salesforce Experience Cloud testing. It facilitates in discovering misconfigured...

squid

SQUID Web Proxy Cache http://www.squid-cache.org/ Copyright C 1996-2026 The Squid Software Foundation and contributors Squid software is distributed under GPLv2+ license and includes contributions from numerous individuals and organizations. Please see the COPYING and CONTRIBUTORS files for...

Google-Nest-Cam-Bug-Disclosures

Google-Nest-Cam-Bug-Disclosures Affected: Dropcam Pro, Nest Cam Indoor/Outdoor models Latest Build Affected: 205-600052 Partial Fixed Build: 205-600055 UPDATE The latest fw version 205-600055 does not fix the WiFi dissassociation vulnerability in the Dropcam Pro. If the supplied WiFi network does...

HintInject

HintInject HintInject is a shellcode embedder and loader that I developed while playing with the PE file and Import Directory Table structures. It takes a raw shellcode file and puts the shellcode in chunks into the Hint/Name Table entries which are reachable via the Import Lookup Table of a fake...

CrystalSliver

crystal-kit-sliver Crystal Palace evasion kit ported to Sliver C2. This is the first public port of rasta-mouse's Crystal-Kit Cobalt Strike to Sliver. It follows the same cross-C2 pattern proven by Crystal-Kit-Xenon Mythic. License: MIT — Copyright c 2026 Simone Licitra Target: Windows x64 only...

shim

shim, a first-stage UEFI bootloader shim is a trivial EFI application that, when run, attempts to open and execute another application. It will initially attempt to do this via the standard EFI LoadImage and StartImage calls. If these fail because Secure Boot is enabled and the binary is not sign...

awesome-web-security

Awesome Web Security 🐶 Curated list of Web Security materials and resources. Needless to say, most websites suffer from various types of bugs which may eventually lead to vulnerabilities. Why would this happen so often? There can be many factors involved including misconfiguration, shortage of...

CVE-2025-24071

Security Vulnerability Report: CVE-2025-24071 - Windows File Explorer Spoofing Vulnerability Overview NSFOCUS CERT has detected that Microsoft recently released a security update to address a critical spoofing vulnerability in Windows File Explorer, identified as CVE-2025-24071. This vulnerabilit...

CVE-2022-22063

CVE-2022-22063 CVE-2022-22063 is a security issue in the hypervisor firmware of some older Qualcomm chipsets. An unprotected hardware component the "boot remapper" can be abused to gain full read/write access to the hypervisor from a modified operating system privilege escalation. Exploiting the...

CVE-2022-24834

Improvement of CVE-2022-24834 public exploit Author Conviso Research Team Description The team at Ricerca Security @RicercaSec discovered and successfully exploited a interesting vulnerability CVE-2022-24834 in the Lua interpreter included with Redis. This vulnerability is a heap overflow in the...

WhoWasI

WhoWasI This application is able to impersonate any logged in user and execute commands under the context of the impersonated user. Released as open source by NCC Group Plc - http://www.nccgroup.com/ Developed By: Chris Thomas, chris dot Thomas at nccgroup dot com...

Specter-FlipperZero

The waveform is not a graphic. It is 128 columns of 13.56 MHz carrier that Specter recorded off a real polling reader at 8 ms per column, read back out of the screenshot beside it. Its duty measures 28% where the device's own counter printed 27%, and both numbers are on the banner. Sweep for the...

SecAssessment-GapDetection-Thesis

D3FENDer - Security Assessment & Gap Detection Tool Using MITRE ATT&CK & D3FEND Frameworks D3FENDer is a rule-based CLI tool developed by Michael for his thesis titled Development of a security assessment and gap detection system using the MITRE ATT&CK and D3FEND Frameworks. It is designed to...