1041094 matches found
CVE-2023-6875
CVE-2023-6875 CVE-2023-6875 PoC This is the original proof of concept given to Wordfence for my participation in its Holiday Bug Bonanza An extra was given for this proof of concept code Thank you to Wordfence for the opportunity! I had a lot of fun during the Bug Bonanza and hope that it happens...
tryhackme-monikerlink-writeup
TryHackMe: Moniker Link — CVE-2024-21413 Walkthrough A full walkthrough of TryHackMe's "Moniker Link" room: weaponizing CVE-2024-21413, a 2024 Microsoft Outlook vulnerability, to steal a victim's NTLMv2 hash the moment they click a link in a phishing email — no macro, no attachment, no obvious...
tbhm
The Bug Hunter's Methodology TBHM Welcome! This repo is a collection of tips tricks tools data analysis and notes related to web application security assessments and more specifically towards bug hunting in bug bounties. The current sections are divided as follows: Before You Get Hacking Learning...
NotQuite0DayFriday
This repository documents real bugs in real software. At the time of disclosure the most recent versions were patched. Seeing mistakes that were made in the past can be a useful tool for seeing trends of bugs which make it past all the quality control processes. Understanding what happened, is th...
Chrome-CVE-2024-2887-RCE-POC
Chrome-CVE-2024-2887-RCE-Poc Overview Vulnerability Name：Google Chrome Type Confusion Threat Type：Code Execution Exploitation Likelihood：High POC Status：Publicly Disclosed In-the-Wild Exploitation Status：Not Disclosed EXP Status：Publicly Disclosed Technical Details Status：Publicly Disclosed This...
CVE-2019-9053-Exploit-in-Python-3
CVE-2019-9053-Exploit-in-Python-3 This is an exploit used in TryHackMe's EasyCTF However the code that is installed within Kali Linux or going to exploitDB has outdated Python 2 code. This is a rewrite of that, and some revisions were made when cracking the password's hash, since there was a bug...
-vercel-prod.yml-application-is-vulnerable-to-CVE-2025-66478.
-vercel-prod.yml-application-is-vulnerable-to-CVE-2025-66478. bug bounty...
Important: Red Hat Security Advisory: Red Hat Ceph Storage 8.1 security and bug fix updates
An update is now available for Red Hat Ceph Storage 8.1. Red Hat Ceph Storage is a scalable, open, software-defined storage platform that combines the most stable version of the Ceph storage system with a Ceph management platform, deployment utilities, and support services. These new packages...
CVE-2025-55182-Simple-Scanner-main
CVE-2025-55182: React Server Components RCE Scanner A comprehensive toolkit for detecting and exploiting CVE-2025-55182 , a Critical Remote Code Execution vulnerability in Next.js applications using React Server Components. This repository features a unified Bash scanner Single & Mass mode,...
cve-2021-29627
CVE-2021-29627 Some code to trigger the bug incl. macsetfd spray. Need some spray target, though...
Important: Red Hat Security Advisory: OpenShift Container Platform 4.16.72 bug fix and security update
Red Hat OpenShift Container Platform release 4.16.72 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.16. Red Hat Product Security has rated this update as having a...
Important: Red Hat Security Advisory: OpenShift Container Platform 4.14.75 bug fix and security update
Red Hat OpenShift Container Platform release 4.14.75 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.14. Red Hat Product Security has rated this update as having a...
bugbounty-arsenal-resources
BugBounty Arsenal Resources Curated workflows, tools and references for bug bounty hunters and web security researchers. What is BugBounty Arsenal? BugBounty Arsenal is a practical web testing platform focused on recon workflows, endpoint discovery and security testing utilities. The goal is to...
reconvault
ReconVault 🔍 El organizador de notas de reconocimiento que los cazadores de bugs realmente pidieron. ReconVault es una aplicación de escritorio de estética terminal con tema oscuro para Linux, construida para investigadores de seguridad, cazadores de bugs y jugadores de CTF. Deja atrás los archiv...
Mongo-Express - Remote Code Execution
Mongo-Express before 1.0.0 is susceptible to remote code execution because it uses safer-eval to validate user supplied javascript. Unfortunately safer-eval sandboxing capabilities are easily bypassed leading to remote code execution in the context of the node server. id: CVE-2020-24391 info: nam...
CVE-2026-43494-PinTheft-PoC
SLEY — إثبات المفهوم لـ PinTheft CVE-2026-43494 إثبات المفهوم — uid=1000raken → uid=0root بعد تشغيل ./sley على WSL2 6.6.87.2-microsoft-standard-WSL2 إثبات مفهوم بملف واحد لـ CVE-2026-43494 PinTheft: تصعيد صلاحيات محلي في نواة لينكس يدمج خلل عدّاد المراجع في RDS zerocopy مع المخازن المؤقتة الثابتة...
Important: Red Hat Security Advisory: OpenShift Container Platform 4.19.50 bug fix and security update
Red Hat OpenShift Container Platform release 4.19.50 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.19. Red Hat Product Security has rated this update as having a...
CVE-2021-30573
CVE-2021-30573-PoC-Google-Chrome Google Chrome Use After Free vulnerability reported Total Bug Bounty Reward: $6.000 This is Proof of Concept for: Google SecuritySeverity CVE. HIGH CVE-2021-30573 https://vulners.com/cve/CVE-2021-30573 Google Blog post:...
kernel: ip6: vti: Use ip6_tnl.net in vti6_changelink()
A flaw was found in the Linux kernel's IPv6 Virtual Tunnel Interface vti6 component. An unprivileged local user, particularly within a user namespace, could exploit a vulnerability related to incorrect network namespace handling during the movement of a vti6 tunnel. This issue can lead to a kerne...