Exploit for Improperly Implemented Security Check for Standard in Thekelleys Dnsmasq

dnspooq DNSpooq PoC - dnsmasq cache poisoning CVE-2020-25686,...

New Educational Video Series for CISOs with Small Security Teams

Cybersecurity is hard. For a CISO that faces the cyber threat landscape with a small security team, the challenge is compounded. Compared to CISOs at large enterprises, CISOs small to medium-sized enterprises SMEs have smaller teams with less expertise, smaller budgets for technology and outside...

Tencent Penguin Tutoring PC version suffers from DLL hijacking vulnerability

Tencent Penguin Tutoring for PC is an educational software, is a tutoring application launched by Tencent for primary and secondary school students to learn. Tencent Penguin Tutoring PC version of the existence of DLL hijacking vulnerability, attackers can use this vulnerability to obtain control...

Tencent Penguin Tutoring PC version suffers from DLL hijacking vulnerability (CNVD-2021-05483)

Tencent Penguin Tutoring for PC is an educational software, is a tutoring application launched by Tencent for primary and secondary school students to learn. Tencent Penguin Tutoring PC version of the existence of DLL hijacking vulnerability, attackers can use this vulnerability to obtain control...

Tencent Penguin Tutoring PC version suffers from DLL hijacking vulnerability (CNVD-2021-05482)

Tencent Penguin Tutoring for PC is an educational software, is a tutoring application launched by Tencent for primary and secondary school students to learn. Tencent Penguin Tutoring PC version of the existence of DLL hijacking vulnerability, attackers can use this vulnerability to obtain control...

Tencent Penguin Tutoring PC version suffers from DLL hijacking vulnerability (CNVD-2021-05485)

Tencent Penguin Tutoring for PC is an educational software, is a tutoring application launched by Tencent for primary and secondary school students to learn. Tencent Penguin Tutoring PC version of the existence of DLL hijacking vulnerability, attackers can use this vulnerability to obtain control...

vulhub_v2

It is an offensive tool for web application security training. The repository contains a collection of vulnerable Docker environments for web application security training. The tool is designed to be easy to use, requiring only two simple commands to set up a vulnerable environment. The tool is n...

SQL Injection Vulnerability in CSC VIPExam Exam Study Resources Database

Zhongke VIPExam Exam Learning Resources Database is a set of educational resources database integrating the functions of daily study, review and preparation for exams, online paperless exams and so on. A SQL injection vulnerability exists in the ZK VIPExam Exam Learning Resources Database. An...

How to Increase Your Security Posture with Fewer Resources

With the number of COVID-19 cases increasing, another round of attacks is looming over schools and universities as they move into holiday break and prepare for the spring semester. According to a recent article the Wall Street Journal, there have been “nearly three dozen ransomware attacks agains...

vulhub

It is an offensive tool for Docker environments. The primary vulnerability is not specified, but the repository contains a collection of vulnerable Docker environments, including CouchDB, FFmpeg, Git, InfluxDB, and others. The environments are designed to be vulnerable to various attacks, allowin...

vulhub

This repository is an open-source collection of pre-built vulnerable docker environments, known as Vulhub. It is an offensive tool for testing and demonstrating vulnerabilities in various software and systems. The primary purpose of Vulhub is to provide a simple and easy-to-use platform for...

Education predictions 2021

Changes in the education system have been brewing for a long time, with digitalization as the main direction of this transformation. The breakthrough came this year as about 1.5 billion students were unable to attend school due to the COVID-19 pandemic. As a result, educational systems all over t...

Admin-Scanner - This Tool Is Design To Find Admin Panel Of Any Website By Using Custom Wordlist Or Default Wordlist Easily

WebsiteAdmin Panel Finder How To Install Linux/pc sudo apt install python3 sudo apt install python3-pip sudo apt install git git clone https://github.com/alienwhatever/Admin-Scanner.git cd Admin-Scanner How to Install Termux/Android pkg update && pkg upgrade pkg install python3 pkg install git gi...

vulhub

It is an offensive tool for web application security testing. The repository contains a collection of pre-built vulnerable docker environments for testing web application security. The tool is designed to be easy to use, requiring only two simple commands to compile and run a vulnerable...

Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Microsoft

Usage: Make sure Python is installed, then run poc.py. Window...

vulhub

It is an offensive tool for Vulnerability Environment Based on Docker-Compose. The repository contains a collection of pre-built vulnerable docker environments, allowing users to easily create and test vulnerable environments without requiring prior knowledge of docker. The tool includes various...

Exploit for Deserialization of Untrusted Data in Laravel

Laravel exploit for CVE-2018-15133 This code exploit CVE-201...

marshalsec

This is a Java-based tool called "marshalsec" that exploits Java object deserialization vulnerabilities in various marshalling libraries. The tool is designed to test and demonstrate the exploitation of these vulnerabilities, which can lead to remote code execution RCE and other security issues...

marshalsec

This repository is an offensive tool for Java deserialization exploitation. It is a Java-based tool for exploiting Java object deserialization vulnerabilities, which can lead to remote code execution RCE and other security issues. The tool includes various payload generators for different Java...

vulhub1

It is an offensive tool for web application exploitation. The primary vulnerability targeted is a Server-Side Template Injection SSTI in Flask, as evidenced by the presence of the flask/ssti directory. The tool is likely designed to exploit this vulnerability, allowing an attacker to inject...