CVE-2019-2215

CVE-2019-2215 The following issue exists in the android-msm-wahoo-4.4-pie branch of https://android.googlesource.com/kernel/msm and possibly others: There is a use-after-free of the wait member in the binderthread struct in the binder driver at /drivers/android/binder.c. As described in the...

phuip-fpizdam

PHuiP-FPizdaM What's this This is an exploit for a bug in php-fpm CVE-2019-11043. In certain nginx + php-fpm configurations, the bug is possible to trigger from the outside. This means that a web user may get code execution if you have vulnerable config see below. Writeup While we were too lazy t...

CVE-2024-38816-PoC

CVE-2024-38816 Proof of Concept PoC This is a proof of concept for the CVE-2024-38816 vulnerability, demonstrating a path traversal exploit. Execution Steps 1. Build the Docker image: Spring Boot 3.0.13, based on Spring Framework 6.0.3 docker build -t cve-2024-38816-poc . 2. Run the container and...

weblogicScanner

source: https://github.com/rabbitmask/WeblogicScan weblogicScaner 简体中文 | English As of November 27, 2020, weblogic Vulnerability Scanning Tool. If there is an unrecorded and open POC vulnerability, please submit issue. Some bug fixes were made, some POC did not take effect, or configuration error...

WebKit-CVE-2016-4622

WebKit CVE-2016-4622 Analysis: Deep Dive into the Slice ValueOf Fastpath Vulnerability Comprehensive analysis and exploitation of the WebKit JavaScript Core vulnerability that enables memory disclosure through Array.slice manipulation Table of Contents Executive Summary Vulnerability Overview...

lua_CVE-2020-24370_AfterPatch

Lua 5.3 readme blockquote, .display border: solid a0a0a0 2px ; border-radius: 8px ; padding: 1em ; margin: 0px ; .display word-spacing: 0.25em ; dl.display dd padding-bottom: 0.2em ; tt, kbd, code font-size: 12pt ; Welcome to Lua 5.3 about · installation · changes · license · reference manual Abo...

CVE-2026-90782-s2opc-status-clobber

CVE-2026-90782 — S2OPC Status-Clobbering NULL Dereference Standalone proof-of-concept for CVE-2026-90782 in S2OPC Safe & Secure OPC. Vulnerability In allocnotificationmessageitems S2OPC 1.7.3 and earlier: A single shared status variable is used for both DataChange and Event allocations. If the...

stoq

Get Started Documentation Installation Plugin Repository Plugin Documentation Overview stoQ is an automation framework that helps to simplify the mundane and repetitive tasks an analyst is required to do. It enables analysts and DevSecOps teams to quickly transition between different data sources...

PrestaShop-CVE-2018-19126

PrestaShop Back Office Remote Code Execution CVE-2018-19126 This is the PoC for CVE-2018-19126, chaining multiple vulnerabilities in PrestaShop Back Office to trigger deserialization via phar to achieve remote code execution. Prerequisite: PrestaShop 1.6.x before 1.6.1.23 or 1.7.x before 1.7.4.4...

EUVD-2026-97353

A weakness has been identified in meetecho janus-gateway up to 1.4.2. This affects an unknown part of the file src/plugins/janusvideoroom.c of the component VideoRoom. This manipulation causes race condition. Remote exploitation of the attack is possible. The attack's complexity is rated as high...

CVE-2026-108830 meetecho janus-gateway VideoRoom janus_videoroom.c race condition

A weakness has been identified in meetecho janus-gateway up to 1.4.2. This affects an unknown part of the file src/plugins/janusvideoroom.c of the component VideoRoom. This manipulation causes race condition. Remote exploitation of the attack is possible. The attack's complexity is rated as high...

CVE-2026-108830

A race condition vulnerability exists in meetecho janus-gateway up to version 1.4.2 . The flaw is located within an unspecified part of the src/plugins/janus_videoroom.c file in the VideoRoom component. This vulnerability allows for potential remote exploitation , although the attack complexity i...

Security Bulletin: Multiple vulnerabilities in rpm.rte affect AIX.

Summary Multiple Vulnerabilities in RPM could allow an attacker to cause denial of service CVE-2026-41992, CVE-2026-56288, CVE-2026-18739, crash or remote code execution CVE-2026-18743, CVE-2026-56289, CVE-2026-18839. RPM is used by AIX for package management. Vulnerability Details...

Threaded-CVE-2018-15473

CVE-2018-15473 — SSH Username Enumeration Tool A Python 3 reimplementation of the classic CVE-2018-15473 OpenSSH user enumeration exploit, extended with multi-threading, wordlist support, automatic vulnerability detection, and thread-safe exploit patching. Table of Contents About the Vulnerabilit...

CVE-2023-0297_Pre-auth_RCE_in_pyLoad

CVE-2023-0297: Pre-auth RCE in pyLoad The Story of Finding Pre-auth RCE in pyLoad TL;DR A code injection vulnerability in pyLoad versions prior to 0.5.0b3.dev31 leads to pre-auth RCE by abusing js2py's functionality. You can find the report here and exploit code here. Details pyLoad is an OSS...

zelos

Zelos Zelos Z eropoint E mulated L ightweight O perating S ystem is a python-based binary emulation platform. One use of zelos is to quickly assess the dynamic behavior of binaries via command-line or python scripts. All syscalls are emulated to isolate the target binary. Linux x8664 32- and...

tornado

tornado anonymously reverse shell over onion network using hidden services without portfortwarding Explore the docs fully undetectable reverse shell · View Demo · bulletproof anonymity Table of Contents 1. What is tornado? 2. Built With 3. Getting Started Installation 4. Usage 5. Roadmap 6...

unfurl

unfurl Pull out bits of URLs provided on stdin Install If you have Go installed and configured: ▶ go install github.com/tomnomnom/unfurl@latest Otherwise download the latest binary for your platform, extract it and move it to somewhere in your $PATH e.g. /usr/bin/: ▶ wget...

CVE-2021-22192

CVE-2021-22192 CVE-2021-22192 Range: Unauthorized User RCE Vulnerability 0x10 Range Environment 0x20 Directory Structure CVE-2021-22192 ├── README.md ............... This README ├── imgs .................... Images for README ├── gitlab .................. Gitlab container mount directory │ ├──...

Azure-Sentinel

Microsoft Sentinel and Microsoft 365 Defender Welcome to the unified Microsoft Sentinel and Microsoft 365 Defender repository! This repository contains out of the box detections, exploration queries, hunting queries, workbooks, playbooks and much more to help you get ramped up with Microsoft...