CVE-2017-3881

CVE-2017-3881 Cisco IOS remote code execution This repository contains Proof-Of-Concept code for exploiting remote code execution vulnerability disclosed by Cisco Systems on March 17th 2017 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170317-cmp Description...

CVE-2018-3639-specter-v4-

CVE-2018-3639-specter-v4 spectre v4 : Speculative Store Bypass CVE-2018-3639 proof of concept for Linux build: gcc spectre-v4.cpp -o spectre run: ./spectre result: --------attack-------- low than threshold:155 low than threshold:144 low than threshold:133 low than threshold:0 low than threshold:1...

cisco-rce

CVE-2017-3881 Cisco IOS remote code execution This repository contains Proof-Of-Concept code for exploiting remote code execution vulnerability disclosed by Cisco Systems on March 17th 2017 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170317-cmp Description...

cve-2022-42475

cve-2022-42475 POC code to exploit the Heap overflow in Fortinet's SSLVPN daemon Notes This is a quick and dirty POC that will probably not work anywhere unless you are extremely lucky. It is version dependent and contains some hardcoded offsets which will most likely change from one system to...

cve-2021-41773

CVE-2021-41773 – Apache Path Traversal Report Summary Vulnerability found in Apache HTTP Server 2.4.49 that can expose sensitive files on the system through a Path Traversal attack depending on the web server configuration Path Traversal: An attacker can access files outside the web root using...

PoC-CVE-2017-3881

PoC-CVE-2017-3881 Cisco Catalyst Remote Code Execution PoC This repository contains Proof-Of-Concept code for exploiting remote code execution vulnerability disclosed by Cisco Systems on March 17th 2017 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170317-cmp...

CVE-2026-24733

CVE-2026-24733 What is CVE-2026-24733? Apache Tomcat incorrectly handled an HTTP/0.9-style HEAD request under certain security-constraint configurations. CVE-2026-24733 Defensive Verifier A lightweight, dependency-free Python security verifier for CVE-2026-24733 , an Apache Tomcat HTTP/0.9 HEAD...

CVE-2026-120975

Platforms running Arista EOS are vulnerable to a Denial of Service (DoS) condition where a malicious packet can cause the AutoCertMgmt process to terminate unexpectedly. This occurs on systems with automatic certificate management and automatic Certificate Authority (CA) certificate retrieval ena...

Malicious code in dependent-final (npm)

Part of a self-republishing campaign: the package ships test.js, which in a loop gives the package a new random name, bumps its version, rewrites package.json and runs npm publish to publish the package again under the new name. Self-replicating publication is the propagation step of a registry...

Malicious code in @dmangal/curse-dependent-ecto (npm)

Source: amazon-inspector 28b6b5c8c100680386dbcbbd51dd409f67f0d54701eb0e50232934acc53bf397 The package's binding.gyp contains a GYP command-expansion action that is executed automatically by node-gyp during npm install. The embedded node -e script runs grep -rl 'HTB' /workspace/ /root/ /tmp/ /opt/...

Malicious code in @dmangal/curse-dependent-ecto (npm)

@dmangal/curse-dependent-ecto contains no library code index.js in 99999.0.0 and 99999.0.2 only exports its name and version and was published on 2026-10-28 between 21:59 and 22:19 UTC with inflated version numbers 99999.0.0 to 99999.0.2. It ships a binding.gyp and package.json sets "gypfile":...

MAL-2026-18375 Malicious code in @dmangal/curse-dependent-ecto (npm)

@dmangal/curse-dependent-ecto contains no library code index.js in 99999.0.0 and 99999.0.2 only exports its name and version and was published on 2026-10-28 between 21:59 and 22:19 UTC with inflated version numbers 99999.0.0 to 99999.0.2. It ships a binding.gyp and package.json sets "gypfile":...

RV2GC: Reconstructing the Garbling Boundary in a RISC-V Garbled Processor

Programmable garbled-circuit execution must balance the benefits of cross-program reuse against the cost of repeated work during secure execution. A complete garbled processor provides a fixed circuit for many programs, but its evaluator repeatedly visits processor-wide structures even when only ...

SecDMP: Provably Secure Data Memory-Dependent Prefetching (Extended Version)

Data memory-dependent prefetchers DMPs are a microarchitectural optimization recently introduced in mainstream desktop and server CPUs. Although DMPs offer performance improvements, they have been shown to enable side-channel leakage of secrets, even from constant-time code that has been hardened...

camel-netty-http Apache Camel Bypass Security

The vulnerability of the camel-netty-http component of the Apache Camel framework is related to deficiencies in the mechanism for handling registry-dependent data. Exploiting this vulnerability could allow a malicious actor to bypass existing security measures remotely...

Hugo Static Site Generator Bypass

The vulnerability of the Hugo static site generator is related to deficiencies in the mechanism for processing register-dependent data. Exploiting this vulnerability allows an attacker to bypass existing security measures...

A Multi-Cloud View of Internet Background Radiation

As services are increasingly centralized in public clouds, understanding the nature of Internet Background Radiation IBR hitting these particular environments is an important part of understanding their overall security posture. Classical network telescopes, long the cornerstone of IBR research,...

Flask-Reuploaded File Loading Code Execution

The vulnerability of the Flask-Reuploaded file loading library is related to deficiencies in the mechanism for processing registry-dependent data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2026-92087

@fastify/auth is a Fastify plugin that composes multiple authentication and authorization strategies into a single route guard. In versions 5.0.0 through 5.1.0, when strategies are composed with the relation "or" option together with the run "all" option and one entry is a nested array acting as ...

CVE-2026-92087

@fastify/auth (a Fastify plugin for composing authentication and authorization strategies) is vulnerable to authorization bypass in versions 5.0.0 through 5.1.0 . When strategies are composed using the or relation with the run: "all" option and a nested array acting as an AND group, the group is ...