vbox-lsilogic-sas-config

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · vbox-lsilogic-sas-config Write-up: https://abraxaslabs.tech/research/virtualbox-7-2-20-leftovers vbox-lsilogic-sas-config Class: Type confusion / arb R/W Reach: Local guest Oracle VM VirtualBox OSS 7.2.20...

CVE-2024-31317-PoC-Deployer

CVE-2024-31317-PoC-Deployer A deployment tool for CVE-2024-31317 proof-of-concept exploit targeting Android 9 through 13 devices. 📝 Project Description CVE-2024-31317-PoC-Deployer is an automated deployment script for quickly generating and configuring all the files required for exploiting...

noia

Noia Noia is a web-based tool whose main aim is to ease the process of browsing mobile applications sandbox and directly previewing SQLite databases, images, and more. Powered by frida.re. Please note that I'm not a programmer, but I'm probably above the median in code-savyness. Try it out, open ...

MEA-Bench

MEA-Bench: A Benchmark for Model Extraction Attacks This repository provides a unified benchmark for model extraction attacks, defenses, adaptive attacks, and evaluation. The public interface is organized around a small number of portable commands. Method-specific Python modules and legacy run...

CLEANSTART-2026-PK53377 brace-expansion library generates arbitrary strings containing a common prefix and suffix

CVE-2026-102276 affects multiple packages. The brace-expansion library generates arbitrary strings containing a common prefix and suffix. See references for individual vulnerability details...

CLEANSTART-2026-AK67994 brace-expansion library generates arbitrary strings containing a common prefix and suffix

CVE-2026-102277 affects multiple packages. The brace-expansion library generates arbitrary strings containing a common prefix and suffix. See references for individual vulnerability details...

CLEANSTART-2026-MM30083 brace-expansion library generates arbitrary strings containing a common prefix and suffix

CVE-2026-102278 affects multiple packages. The brace-expansion library generates arbitrary strings containing a common prefix and suffix. See references for individual vulnerability details...

CVE-2025-60710

CVE-2025-60710 This is PoC for local privilege escalation vulnerability in \Microsoft\Windows\WindowsAI\Recall\PolicyConfiguration scheduled task. When this scheduled task is started the taskhostw.exe process whill try to open the C:\Users%username%\AppData\Local\CoreAIPlatform.00\UKP directory...

SharPersist

SharPersist Windows persistence toolkit written in C. For detailed usage information on each technique, see theWiki. Author - Brett Hawkins @h4wkst3r Release Public version 1.0.1 of SharPersist can be found in the Releases section Installation/Building Pre-Compiled Use the pre-compiled binary in...

CVE-2021-3129

Remote Code Execution: Laravel CVE-2021-3129 📜 Description This script is designed to exploit the Remote Code Execution RCE vulnerability identified in several Laravel versions, known as CVE-2021-3129. By leveraging this vulnerability, the script allows users to write and execute commands on a...

CIMCown

CIMCown CVE-2026-20200 Argument Injection in Cisco IMC with RCE Christoph Peil @ NSIDE ATTACK LOGIC 2026 CVE: CVE-2026-20200 CVSS v3.1 CISCO: 8.8 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS v3.1 NSIDE: 9.9 AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H Advisory: NSIDE-SA-2026-003 Blogpost:...

SharkTooth

SharkTooth In Development SharkTooth is a port scanner with TCP and UDP support. Suitable for basic network auditing and training. What does “In Development” mean: New features are being added while existing ones are refactored or removed. New features: SYN-Scan, sniffer Manual Packet Assembly:...

CVE-2023-28252

Since February 2022 was reported a new ransomware that appears to be using a Windows 0-day vulnerability, according to the research conducted by Trend Micro. More information about this ransomware can be found at this link. According to analysis by Kaspersky, the Nokoyawa ransomware group has use...

tools-python

Python library to parse, validate and create SPDX documents CI status Linux, macOS and Windows: Breaking changes v0.7 - v0.8 Please be aware that the upcoming 0.8 release has undergone a significant refactoring in preparation for the upcoming SPDX v3.0 release, leading to breaking changes in the...

CVE-2023-50164-PoC

CVE-2023-50164 PoC This repository is a proof of concept PoC of the CVE-2023-50164 vulnerability. 1. About CVE-2023-50164 CVE-2023-50164 is a file path traversal vulnerability that occurs in Apache Struts web application. An attacker could exploit this vulnerability to upload malicious file...

capability-sdk

Capability SDK Shared Go SDK for building security capabilities for the Guard platform. Packages pkg/capability - Capability Interface Defines the standardized interface that security scanners implement. Types: // Target - what a capability scans type Target struct Type TargetType // domain, ip,...

CVE-2026-19478

-b91c1c?style=flat-square CVE-2026-19478 — Nuclei Template Non-destructive Nuclei detection template for CVE-2026-19478 , a critical CVSS 9.4 unauthenticated arbitrary method invocation flaw in the GitLab GraphQL API, patched by GitLab on August 17, 2026. TL;DR GitLab's GraphQL schema supports a...

CVE-2026-15013

CVE-2026-15013 — miniOrange SAML SSO = 5.4.3 Auth Bypass PoC Proof-of-concept for CVE-2026-15013 : unauthenticated authentication bypass via SAML Signature Algorithm Confusion HMAC-SHA1 in the miniOrange SAML Single Sign On – SSO Login WordPress plugin versions up to and including 5.4.3. Authoriz...

CVE-2019-9193

EN GenPostgresRCEExploit is a PoC tool designed to exploit an authenticated Remote Code Execution RCE vulnerability in specific versions of PostgreSQL 9.3 - 11.7. It allows authenticated users to execute system commands on a PostgreSQL database server that is vulnerable to CVE-2019-9193. Features...

Yasso

Yasso Powerful intranet penetration auxiliary toolset - let Yasso be like the wind. Supports brute-forcing of RDP, SSH, Redis, PostgreSQL, MongoDB, MSSQL, MySQL, WinRM and other services, fast port scanning, powerful web fingerprint recognition, one-click exploitation of various built-in services...