19289 matches found
CVE-2025-41419
creationtimestamp| type| source ---|---|--- 2025-07-31 06:16:31+00:00| published-proof-of-concept| https://github.com/modelscope/ms-swift/security/advisories/GHSA-7c78-rm87-5673...
CVE-2025-54586
creationtimestamp| type| source ---|---|--- 2025-07-30 15:27:15+00:00| published-proof-of-concept| https://github.com/finos/git-proxy/security/advisories/GHSA-v98g-8rqx-g93g...
CVE-2025-50460
creationtimestamp| type| source ---|---|--- 2025-07-30 03:05:19+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/45882 2025-07-30 15:00:07+00:00| published-proof-of-concept| Telegram/C5Uti98yNMibrytNOYJF3eWZ7TSU5JhC3eF6W16WxddRY4 2025-07-31 06:07:06+00:00| published-proof-of-concept|...
Empirical Evaluation of Concept Drift in ML-Based Android Malware Detection
Despite outstanding results, machine learning-based Android malware detection models struggle with concept drift, where rapidly evolving malware characteristics degrade model effectiveness. This study examines the impact of concept drift on Android malware detection, evaluating two datasets and...
CVE-2001-1473
creationtimestamp| type| source ---|---|--- 2025-07-29 21:00:04+00:00| published-proof-of-concept| Telegram/ujDzFFrET3ZH5xQdQMIqDWCAd6Ask0YbS48UdaKK1nCHgf0...
GHSA-JGMV-J7WW-JX2X Koa Open Redirect via Referrer Header (User-Controlled)
Summary In the latest version of Koa, the back method used for redirect operations adopts an insecure implementation, which uses the user-controllable referrer header as the redirect target. Details on the API document https://www.koajs.net/api/responseresponseredirecturl-alt, we can see:...
Understanding Concept Drift with Deprecated Permissions in Android Malware Detection
Permission analysis is a widely used method for Android malware detection. It involves examining the permissions requested by an application to access sensitive data or perform potentially malicious actions. In recent years, various machine learning ML algorithms have been applied to Android...
CVE-2025-50866
creationtimestamp| type| source ---|---|--- 2025-07-28 21:00:05+00:00| published-proof-of-concept| Telegram/yClP7ID2sv33ZU8LKP82OuDHMHI-3r8bUmurim2SHQMJTmY...
GHSA-VR59-GM53-V7CQ
creationtimestamp| type| source ---|---|--- 2025-07-28 20:53:07+00:00| published-proof-of-concept| https://t.me/cybersecplayground/274...
Exploit for CVE-2025-8191
CVE-2025-8191 – Swagger UI XSS Injection Description :...
CVE-2025-54590
creationtimestamp| type| source ---|---|--- 2025-07-27 17:38:06+00:00| published-proof-of-concept| https://github.com/silverbucket/webfinger.js/security/advisories/GHSA-8xq3-w9fx-74rv...
MS17-010
This repository is for public analysis of the MS17-010 vulnerability. The repository contains various PoCs Proof of Concept and exploits for the vulnerability, which affects the Windows SMB protocol. The vulnerability is a buffer overflow in the SMB protocol, allowing an attacker to execute...
Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Microsoft
CVE-2020-0796 PoC aka CoronaBlue aka SMBGhost Usage ./CVE-2020-0796.py servername This script connects to the target host, and compresses the authentication request with a bad offset field set in the transformation header, causing the decompressor to buffer overflow and crash the target. This...
Exploit for OS Command Injection in Gnu Bash
Exploits Miscellaneous proof of concept exploit code written at Xiphos Research for testing purposes. Current Exploits index may be out of date phpMoAdmin Remote Code Execution CVE-2015-2208 LotusCMS Remote Code Execution OSVDB-75095 ElasticSearch Remote Code Execution CVE-2015-1427 ShellShock...
IOHIDeous
IOHIDeous A macOS kernel exploit based on an IOHIDFamily 0day. Write-up here. Notice The prefetch timing attack I'm using for hid for some reason doesn't work on High Sierra 10.13.2 anymore, and I don't feel like investigating that. Maybe patched, maybe just the consequence of a random change, I...
Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Google Android
This repository contains a PoC Proof of Concept code for the BlueBorne vulnerabilities. The BlueBorne vulnerabilities are a set of vulnerabilities in Bluetooth devices that allow an attacker to remotely execute code on a device. The PoC code is written in Python and uses the PyBluez library to...
Exploit for CVE-2020-0609
BlueGate Proof of Concept Denial of Service + scanner for CVE-2020-0609 and CVE-2020-0610. These vulnerabilities allows an unauthenticated attacker to gain remote code execution with highest privileges via RD Gateway for RDP. Please use for research and educational purpose only. Usage Make sure y...
CVE-2025-8220
creationtimestamp| type| source ---|---|--- 2025-07-27 03:00:05+00:00| published-proof-of-concept| Telegram/cFf3nf01Jtskw4JUcMDQ8X2aYFQSVN6Id1bXBoqDA3vOsA 2025-07-27 11:00:09+00:00| published-proof-of-concept| Telegram/AfTJKcZEqQRiwkgCxUS4ELJ1Qe5RhSl-9xmB44se0uu3--o...
Trivial Trojans: How Minimal MCP Servers Enable Cross-Tool Exfiltration of Sensitive Data
The Model Context Protocol MCP represents a significant advancement in AI-tool integration, enabling seamless communication between AI agents and external services. However, this connectivity introduces novel attack vectors that remain largely unexplored. This paper demonstrates how unsophisticat...