5839 matches found
intercept
Support the developer of this open-source project Signal Intelligence Platform A web-based interface for software-defined radio tools. Features Pager Decoding - POCSAG/FLEX via rtlfm + multimon-ng 433MHz Sensors - Weather stations, TPMS, IoT devices via rtl433 Sub-GHz Analyzer - RF capture and...
CVE-2025-55182-research
CVE-2025-55182 - React Server Components RCE NOTE: Written by AI/Claude https://github.com/ejpir/CVE-2025-55182-bypass TL;DR CVE-2025-55182 is a critical RCE vulnerability in React's Flight Protocol. The attack chains path traversal + fake chunk injection + $B handler abuse to execute...
Malicious code in @s4yhiitestpoc/r2-https-b (npm)
Source: amazon-inspector e89449bafb4f816bd8605f45cedf0fec8ec0cff9088007a7a38aaea0a9db91ec On npm install, postinstall.js automatically collects installer-side identifying data — hostname, username, home directory, non-internal network interface addresses, DNS servers, current working directory,...
B-XSSRF
B-XSSRF Toolkit to detect and keep track on Blind XSS, XXE & SSRF SETUP Upload the files to your server. Create a Database and upload database.sql file to it. Change the DB Credentials in db.php file. Ready. USAGE BLIND XSS BLIND XXE %ext; SSRF GET /testssrf.php=http://mysite.com/bxssrf/request.p...
Malicious code in @s4yhiitestpoc/r2-https-b (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e89449bafb4f816bd8605f45cedf0fec8ec0cff9088007a7a38aaea0a9db91ec On npm install, postinstall.js automatically collects installer-side identifying data — hostname, username, home directory, non-internal network...
W&B Weave Server - Remote Arbitrary File Leak
The Weave server API allows remote users to fetch files from a specific directory, but due to a lack of input validation, it is possible to traverse and leak arbitrary files remotely. In various common scenarios, this allows a low-privileged user to assume the role of the server admin. id:...
Joomla! Component Address Book 1.5.0 - Local File Inclusion
A directory traversal vulnerability in the AddressBook comaddressbook component 1.5.0 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php. id: CVE-2010-1471 info: name: Joomla! Component Address Book 1.5.0 - Local File Inclusion...
CVE-2025-25163
CVE-2025-25163 Plugin A/B Image Optimizer = 3.3 - Authenticated Subscriber+ Arbitrary File Download Description The Plugin A/B Image Optimizer plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 3.3. This makes it possible for authenticated attackers,...
CVE-2025-25163-Nuclei-Template
Nuclei Template for CVE-2025-25163 🚀 Overview This repository features a Nuclei template specifically designed to detect the Path Traversal vulnerability CVE-2025-25163 in the Plugin A/B Image Optimizer for WordPress. This vulnerability poses a critical security risk, allowing unauthorized access...
ubl-itel-s23
Unlock Bootloader — Itel S23 S665L / Unisoc T606 Guide to unlock the bootloader on the Itel S23 S665L using the CVE-2022-38694 exploit on the Unisoc T606 UMS9230 chipset. Device Info Property| Value ---|--- Brand| Itel Model| S665L S23 Android| 12 SDK 31 Build|...
CVE-2024-30973
CVE-2024-30973 - V-SOL G/EPON ONU - HG323AC-B Description Item: Item: G/EPON ONU Specification: HG323AC-B Device model XPON+2GE+1POTS+2WIFI+USB Device SN 70B64F-1234570B64F0C2C0C Hardware Version V1.0 Firmware Version V2.0.08-210715 PON S/N GPON000C2C0C Vulnerability Type: Incorrect...
Agentic-CLIP-Benchmark
Agentic-CLIP-Benchmark: Zero-Shot Evaluation on CIFAR-10 -green.svg This project implements a robust, automated pipeline for evaluating OpenAI's CLIP ViT-B/32 model on the full CIFAR-10 test set 10,000 images. Developed using an AI Native workflow Trae IDE , it achieves a high-precision zero-shot...
CVE-2026-43682
Proof of concept This proof of concept is expected to kernel-panic and reboot an affected Mac. Use it only on a disposable test system. The evidence capture used Apple silicon running macOS Tahoe 26.3 25D125. Apple fixed CVE-2026-43682 in Tahoe 26.6, Sequoia 15.7.8, and Sonoma 14.8.8. The PoC is ...
sparkplugFuzzer
Sparkplug B MQTT Security Fuzzer A comprehensive security assessment tool for testing Sparkplug B MQTT protocol implementations. The fuzzer systematically tests all protocol fields across all 9 message types, discovers live devices on the network, and produces detailed logs for analysis...
CVE-2026-98384
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix out-of-bounds read of skprotocol in bpfsockdestroy skprotocol lives in struct sock, not in struct sockcommon. A timewait or request sock handed to bpfsockdestroy by the tcp iterator is neither, so reading sk-skprotocol...
signalops
Signal OPS A full-spectrum, all-source signal intelligence fusion platform for security research and training. Signal OPS pulls dozens of open collection sources — WiFi/Bluetooth/cell-tower databases, internet-exposure scanners, camera indexes, ADS-B flight feeds, satellite TLE tracking, and...
CVE-2025-45422---Bbox
CVE-2025-45422: Proximus b-box UPnP Persistence & Access Control Bypass https://vulners.com/cve/CVE-2025-45422 This script demonstrates CVE-2025-45422 affecting Proximus b-box routers running firmware version 8c.725A. It leverages the router’s UPnP functionality to create arbitrary port forwardin...
ubl-itel-s23
Unlock Bootloader — Itel S23 S665L / Unisoc T606 Guide to unlock the bootloader on the Itel S23 S665L using the CVE-2022-38694 exploit on the Unisoc T606 UMS9230 chipset. Device Info Property| Value ---|--- Brand| Itel Model| S665L S23 Android| 12 SDK 31 Build|...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Added a depth limit to indxfindbuffer to prevent stack overflow. indxfindbuffer recursively descends the B+ tree index without a depth limit. A malicious NTFS image with circular index node references causes unbounded...
