snapshot-demo

Snapshot Attack Demo This is the original demo of Unanticipated Snapshot Attack found by us. Thanks Intel for the Security Advisory. Build the demo Install Intel SGX SDK and Occlum First of all, anyone willing to run the demo must install Intel SGX SDK and Occlum you can choose to use our modifie...

CVE-2024-7593

CVE-2024-7593 Description: CVE-2024-7593 is a critical vulnerability affecting multiple Pulse Secure products, including Pulse Secure VPN. This vulnerability allows an authenticated attacker with access to the management interface to execute arbitrary commands on the affected server. This can lea...

CVE-2026-94035

A vulnerability was determined in SourceCodester Drug Recommendation System 1.0. Impacted is an unknown function of the file /drugrecommender/index.php. Executing a manipulation of the argument full name can lead to cross site scripting. The attack can be launched remotely. The exploit has been...

Kaspersky_CVE-2024-3094

Security Review: CVE-2024-3094 XZ Utils Backdoor Author: Sushin Ivan Date: March 2026 1. Project Description This repository contains the results of a full security review of the vulnerability CVE-2024-3094 Supply Chain Attack in the XZ Utils library. Objective: Conduct threat analysis Threat...

iDict

Disclaimer: Do whatever you want with this code as long as you give me credit @Pr0x13 Check and make sure its legal in your country to use this tool before doing so. I'm not responsible for any damage done whatsoever to anyones iCloud account or iDevice. I Didn't exploit any accounts while writin...

JFrog_CVE-2026-65615-ByGLM

JFrog Artifactory 预认证 RCE 全链复现（CVE-2026-42018 / CVE-2026-65616 / CVE-2026-65615） 仅供授权安全测试、防御研究与安全教学使用。该漏洞链已被厂商修复（建议升级至 7.161.15+），请仅在一次性的隔离实验环境中复现。未经授权对他人系统实施本仓库所述任何操作均属违法行为，由此产生的一切后果由操作者自行承担。 本仓库为 edrabb.fr 披露的 JFrog Artifactory 预认证 RCE 漏洞链的完整复现交付物：基于官方镜像...

CVE-2025-50675-GPMAW-Permissions

CVE-2025-50675 – Insecure Permissions in GPMAW 14.2 Summary CVE-2025-50675 affects GPMAW 14.2, a bioinformatics software developed by Lighthouse Data. The installer creates the folder C:\Program Files\gpmaw with full control granted to the 'Everyone' group , allowing any local user to modify file...

CVE-2020-28415

CVE-2020-28415 Suggested description A reflected cross-site scripting XSS vulnerability exists in the TranzWare Payment Gateway 3.1.12.3.2. A remote unauthenticated attacker is able to execute arbitrary HTML code via crafted url different vector than CVE-2020-28414. Vulnerability Type Cross Site...

Azure_Workshop

Azure Red Team Attack and Detect Workshop This is a vulnerable-by-design Azure lab containing 2 x attack paths with common misconfigurations. These vulnerabilities are intended to represent those found in live production environments and the attack vectors are intended to be as realistic as...

Blackhat-USA-2022-Materials

Black Hat USA 2022 Presentation Materials Presentation materials for my Black Hat USA 2022 Briefing and Arsenal talks Black Hat USA Briefing - Controlling the Source: Abusing Source Code Management Systems Description...

CVE-2026-94032

A flaw has been found in itsourcecode Leave Management System 1.0. This affects an unknown part of the file /module/department/index.php. This manipulation of the argument ID causes sql injection. It is possible to initiate the attack remotely. The exploit has been published and may be used...

OverlayFS-PrivEsc-CVE-2022-0944

CVE-2022-0944: Privilege Escalation Vulnerability in OverlayFS 🛡️ Security advisory and mitigation guide for the Linux kernel privilege escalation vulnerability in OverlayFS. 📜 Overview CVE-2022-0944 is a security vulnerability in the Linux kernel's OverlayFS subsystem that allows local attackers...

AtomicTestHarnesses

AtomicTestHarnesses AtomicTestHarnesses is a library that simulates and validates attack technique execution. It consists of a Powershell module for running attack techniques on Windows and also a Python package for running on macOS and Linux The details of a technique can vary from attack to...

drawio-threatmodeling

Draw.io libraries for threat modeling This is a collection of custom libraries to turn the free and cross-platform Draw.io diagramming application into the perfect tool for threat modeling. Data Flow Diagrams Data Flow Diagramming is a simple diagramming technique used to gain an understanding of...

CVE-2024-32399

CVE-2024-32399 Vulnerability Overview Directory Traversal vulnerability in RaidenMAILD Mail Server v.4.9.4 and before allows a remote attacker to obtain sensitive information via the /webeditor/ component Vulnerability Type Directory Traversal Vendor of Product RaidenMAILD Mail Server Affected...

CVE-2026-94034

A cross-site scripting (XSS) vulnerability exists in SourceCodester Drug Recommendation System 1.0 , specifically in the Password Change component (file /drug_recommender/Admin/change_password). Manipulating the txtoldpassword/txtnewpassword parameters leads to XSS, with the attack vector being r...

CVE-2023-47459

CVE-2023-47459 Description A vulnerability was discovered in Knovos Discovery v.22.67.0 that allows a remote attacker to access confidential information using the components: /DiscoveryReview/Service/CaseManagement.svc/GetProductSiteName,...

Security Bulletin: IBM Event Endpoint Management is effected by Multiple Vulnerabilities

Summary IBM Event Endpoint Management is affected by Multiple Vulnerabilities and was addressed in IBM Event Endpoint Management 11.8.2 Vulnerability Details CVEID:CVE-2026-41907 DESCRIPTION: uuid is for the creation of RFC9562 formerly RFC4122 UUIDs. Prior to 14.0.0, v3, v5, and v6 accept extern...

EUVD-2026-83749

A vulnerability has been found in SourceCodester Drug Recommendation System 1.0. This vulnerability affects unknown code of the file /drugrecommender/Admin/adduser of the component User Management. Such manipulation of the argument txtname/txtemail/txtpassword leads to cross site scripting. It is...

CVE-2021-3138

..| Discourse 2.7.0 - CVE-2021-3138 |.. Description : Rate limit Bypass which leads to 2FA Bypass Tested Version : 2.7.0 Attack Type: Remote Impact : 2FA Bypass Vendor of Product : https://www.discourse.org Additional Information : Discourse is discussion platform built for the next decade of the...