4485 matches found
CVE-2026-17511 This Power System update is being released to address
IBM PowerVM Hypervisor FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, FW1060.00 through FW1060.81, and FW950.00 through FW950.H3 is affected by a vulnerability in the partition resource dump interface. An attacker with authenticated administrator-level access to the HMC or service...
CVE-2024-30052
This repository hosts materials related to CVE-2024-30052. More details about the vulnerability can be found in my blog post. structure builder folder contains source files for a program that crafts a dump file that exploits the vulnerability. poc folder contains three proof-of-concept files that...
Blackash-CVE-2025-12762
🔐 CVE-2025-12762 — Vulnerabilidad Crítica de RCE en pgAdmin 4 🚨 ¿Cuál es el problema? Existe una falla de Ejecución Remota de Código RCE en pgAdmin 4 versiones ≤ 9.9. Los atacantes pueden ejecutar comandos arbitrarios en el host cuando pgAdmin se ejecuta en modo servidor y procesa un volcado SQL ...
CVE-2026-88369
The zserge jsmn library, specifically commit 25647e6 , contains a Buffer Overflow vulnerability within the dump() function located in example/jsondump.c. No specific impact details, exploitation status, or remediation steps are provided in the documents.
EUVD-2026-86268
zserge jsmn commit 25647e6 is vulnerable to Buffer Overflow in example/jsondump.c dump...
Security Bulletin: This Power System update is being released to address CVE-2026-17511
Summary Power Systems Firmware is affected by a vulnerability in the partition resource dump interface. An attacker with authenticated administrator-level access to the HMC or service processor can obtain a limited snapshot of partition processor state. Successful exploitation results in a...
CVE-2025-20260
CVE-2025-20260 - ClamAV PDF Scanning Buffer Overflow First Public PoC First public proof-of-concept for CVE-2025-20260 CVSS 3.1 base score 9.8, Critical, a buffer-overflow vulnerability in the PDF scanning path of ClamAV. This repository contains a generator for the malicious PDF that triggers th...
Fortigate-Belsen-Leak-Dump-CVE-2022-40684-
Fortigate-Belsen-Leak-Dump-CVE-2022-40684 Cómo funciona este script: 1. El script recorre todas las subcarpetas dentro de rootfolder y busca vpn-passwords.txt. 2.Salta cualquier línea que contenga el banner '-=-= Belsen Group -=-=.' 3. Para las líneas con el formato usuario:contraseña Extrae la...
KsDumper-11
KsDumper-11 https://github.com/mastercodeon314/KsDumper-11/assets/78676320/9452970c-27cf-44df-b091-0d18a07937e5 Whats new v1.3.4 Added new feature Anti Anti Debugging Tools Detection Randomized MainWindow Title, most Control Titles, and the exe file name during runtime The process name is reverte...
CVE-2023-34598
CVE-2023-34598 - Gibbon v25.0.0 LFI Exploit This repository contains a Python script that helps identify and exploit a local file inclusion LFI vulnerability CVE-2023-34598 in Gibbon v25.0.0. The script can scan a target website for potential vulnerability and, if successful, download the SQL dum...
CVE-2026-31024
CVE-2026-31024 Informe de Vulnerabilidad: Desbordamiento de Búfer Basado en Pila y Divulgación de Información en Steghide Campo| Valor ---|--- Aplicación Objetivo| Steghide Binario Linux Versión Afectada| 0.5.1 Confirmado; versiones anteriores probablemente afectadas Tipo de Vulnerabilidad|...
CVE-2014-160
CVE-2014-160 exploit Use like this: ./cve-2014-160 dvwa.local https && strings datadump.bin...
CVE202015808
CVE-2020-15808 A proof of concept of CVE-2020-15808 vulnerability exploit on STM32F4 Discovery board Requirements Firmware version older than 1.25.2 Board with VCP ex. STM32F4 discovery arm-none-eabi toolchain Steps to reproduce the exploit 1. Move to VulnerableFirmwareF4 and compile through make...
CVE-2026-81886 radare2: Uncontrolled memory allocation in radare2 dmp64 parser
radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's Windows 64-bit crash-dump dmp64 parser was vulnerable because the Windows dmp64 parser used an input-controlled physical-memory-run PageCount directly as the bound of a per-page allocation loo...
ztewaste
ZTE Diagnostics Dump Proof of Concept Extract a concerning amount of user information from Unisoc ZTE devices using CVE-2022-38694. !CAUTION Please do not permalink here!!!!! The repo name is almost certainly going to change in the future. Instead, provide a link to my writeup on my blog. Writeup...
Advanced-SQL-Injection-Cheatsheet
MySQL Error based SQL Injection Cheatsheet This is probably the easiest vulnerability along the SQL Injection attack. An attacker can enumerate and dump the MySQL database by using the SQL error messages to his advantage. Detecting the vulnerability http://domain.com/index.php?id=1 Website loads...
ShiningAppMask-ReverseEngineering
ShiningAppMask-IngenieríaInversa Introducción Después de comprar recientemente una Shining App Mask, sentí curiosidad por la aplicación Shining Mask y la máscara y cómo funcionaban. Decidí aplicar ingeniería inversa para entender cómo funcionaba. El viaje comenzó con el hardware. La aplicación...
CiscoRV320Dump
CiscoRV320Dump CVE-2019-1653/CVE-2019-1652 Exploits For Dumping Cisco RV320 Configurations and getting RCE Implementations of the CVE-2019-1652 and CVE-2019-1653 exploits disclosed by Red Team Pentesting GmbH. I only tested these on an RV320, but according to the Cisco advisory, the RV325 is also...
CVE-2023-30367-mRemoteNG-password-dumper
mRemoteNG = v1.77.3.1784-NB Password Dumper CVE-2023-30367 Multi-Remote Next Generation Connection Manager mRemoteNG es un software libre que permite a los usuarios almacenar y gestionar configuraciones de conexión multiprotocolo para conectarse remotamente a sistemas. Los archivos de configuraci...
CVE-2022-0739
CVE-2022-0739 Python PoC Exploit para CVE-2022-0739 Características Búsqueda de metadatos de base de datos Volcado de credenciales de usuario de Wordpress Inyección arbitraria de consultas ciegas 💉 Uso root@kitploit: usage: cve-2022-0739 -h -u URL -e EXEC options: -h, --help show this help messag...