CVE-2020-9496

CVE-2020-9496 - RCE Because the 2 xmlrpc related requets in webtools xmlrpc and ping are not using authentication they are vulnerable to unsafe deserialization. This issue was reported to the security team by Alvaro Munoz [email protected] from the GitHub Security Lab team. This vulnerabilit...

tmux

欢迎使用 tmux！ tmux 是一个终端复用器：它可以在单个屏幕上创建、访问和控制多个终端。tmux 可以从屏幕分离并在后台继续运行，之后可重新连接。 此版本可在 OpenBSD、FreeBSD、NetBSD、Linux、macOS 和 Solaris 上运行。 依赖项 tmux 依赖 libevent 2.x，可从此页面获取。 它还依赖 ncurses，可从此页面获取。 构建 tmux 需要 C 编译器（例如 gcc 或 clang）、make、pkg-config 以及合适的 yacc（yacc 或 bison）。 安装 二进制包 一些平台提供 tmux...

intercept v2.33.0

Support the developer of this open-source project Signal Intelligence Platform A web-based interface for software-defined radio tools. Features Pager Decoding - POCSAG/FLEX via rtlfm + multimon-ng 433MHz Sensors - Weather stations, TPMS, IoT devices via rtl433 Sub-GHz Analyzer - RF capture and...

USN-8709-1: ncurses vulnerability

It was discovered that ncurses incorrectly handled specially crafted terminfo database entries. A local attacker could possibly use this issue to cause applications using ncurses to crash, resulting in a denial of service...

memdumper

memdumper memdumper reads the memory of a running macOS process under another signed binary's debugger entitlement. The aim is that taskforpid and ptrace run as that entitled binary, so an EDR records it rather than memdumper. by cenobyte [email protected] 2026...

sbom-sentinel

sbom-sentinel !CIhttps://github.com/MUGHEESM/sbom-sentine...

Dirty-Pipe-CVE-2022-0847-POCs

Dirty-Pipe-CVE-2022-0847-POCs Author: Max Kellermann [email protected] Contributor: Bl4sty https://twitter.com/bl4sty A new Linux vulnerability known as 'Dirty Pipe' allows local users to gain root privileges through publicly available exploits. Today, security researcher Max Kellermann...

CVE-2025-32463

CVE-2025-32463 Detection Framework A comprehensive security monitoring and detection framework designed to identify exploitation attempts targeting the sudo chroot privilege escalation vulnerability CVE-2025-32463. This project demonstrates advanced threat detection methodologies, incident respon...

CVE-2026-43499_OPPO-MT6835

CVE-2026-43499 / GhostLock PoC for OPPO MT6835 This repository preserves a compact research snapshot for the GhostLock-style exploit chain targeting an OPPO MT6835-based device. Scope Exploit source tree under exploit Minimal proof-of-concept under poc Supporting analysis notes and build artifact...

CVE-2026-53694-NoMachine-LPE

CVE-2026-53694: NoMachine Local Privilege Escalation via Argument Injection Overview This repository contains the write-up and Proof of Concept PoC for CVE-2026-53694, a Local Privilege Escalation LPE vulnerability in NoMachine for Linux. Due to improper neutralization of argument delimiters in t...

arduino-pico

Arduino-Pico Raspberry Pi Pico Arduino core, for all RP2040 and RP2350 boards This is a port of Arduino to the RP2040 Raspberry Pi Pico processor and RP2350 Raspberry Pi Pico 2 processor. It uses the bare Raspberry Pi Pico SDK and a custom GCC 14.3/Newlib 4.5 toolchain and supports ARM and RISC-V...

xwiki-cve-2025-24893

XWiki SolrSearch Unauthenticated RCE CVE-2025-24893 Contribuyentes 4.ª promoción, clase 25 de la Escuela Whitehat 임두연@endusdksla Resumen XWiki interpreta y renderiza la sintaxis wiki y las macros en el lado del servidor. El problema es que la página Main.SolrSearch está abierta a los invitados y,...

msfpc

MSFvenom Payload Creator MSFPC A quick way to generate various "basic" Meterpreter payloads via msfvenom part of the Metasploit framework. About MSFvenom Payload Creator MSFPC is a wrapper to generate multiple types of payloads, based on users choice. The idea is to be as simple as possible only...

Chamilo-CVE-2023-4220-Exploit

Chamilo-LMS-CVE-2023-4220-Exploit This is an Exploit for Unrestricted file upload in big file upload functionality in Chamilo-LMS for this location /main/inc/lib/javascript/bigupload/inc/bigUpload.php in Chamilo LMS = v1.11.24, and Attackers can obtain remote code execution via uploading of web...

CVE-2021-3493

CVE-2021-3493 — Ubuntu OverlayFS Local Privilege Escalation A working proof-of-concept for CVE-2021-3493 , a local privilege escalation vulnerability in the Ubuntu kernel's OverlayFS implementation. An unprivileged user can mount an overlay filesystem inside a user namespace and set arbitrary fil...

wifi-framework

Marco de Trabajo Wi-Fi Presentamos un marco de trabajo para realizar experimentos Wi-Fi de manera más sencilla. Se puede utilizar para crear fuzzers, implementar nuevos ataques, crear pruebas de concepto para detectar vulnerabilidades, automatizar experimentos, implementar suites de prueba, etc. ...

CloudFlair

CloudFlair Nota importante: A partir de finales de 2024, Censys ya no proporciona acceso a la API para cuentas gratuitas. Esto significa que CloudFlair ya no funciona con cuentas gratuitas de Censys. CloudFlair es una herramienta para encontrar servidores de origen de sitios web protegidos por...

crawlergo

crawlergo Un potente rastreador de navegadores para escáneres de vulnerabilidades web Documento en inglés | 中文文档 crawlergo es un rastreador de navegadores que utiliza el modo chrome headless para la recolección de URLs. Engancha posiciones clave de toda la página web en la etapa de renderizado de...

bscan

:mag: an asynchronous target enumeration tool :magright: Synopsis bscan is a command-line utility to perform active information gathering and service enumeration. At its core, bscan asynchronously spawns processes of well-known scanning utilities, repurposing scan results into highlighted console...

bscan

:mag: una herramienta asíncrona de enumeración de objetivos :magright: Sinopsis bscan es una utilidad de línea de comandos para realizar recolección activa de información y enumeración de servicios. En esencia, bscan lanza de forma asíncrona procesos de utilidades de escaneo bien conocidas,...