232403 matches found
external-c2-experiments
External C2: SSH A go-exploit external C2 module that supports reverse SSH shells. It additionally acts as a demonstration of how to integrate external C2 profiles to your favorite payloads. The goal is not to provide a fully weaponized payload with evasion and advanced techniques, but show how t...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
PHP CVE-2026-109618/109619 资产排查工具（源码 GUI 单文件exe）...
Exploit for CVE-2022-30190
CVE-2022-30190-Follina-Research A def...
Exploit for CVE-2026-109619
php2shell...
bileiwaf
勤加壁垒waf，简称：壁垒WAF bileiwaf 演示站点：demo.bileiwaf.com...
Exploit for CVE-2026-109618
PHP2Shell — CVE-2026-109618 / CVE-2026-109619 Proof of Co...
ClawPanel - OpenClaw管理面板！
🦞 OpenClaw & Hermes Agent 多引擎 AI 管理面板 — 内置 AI 助手（工具调用 + 图片识别 + 多模态），一键安装 | Tauri v2 跨平台桌面应用 | 11 种语言 | Built-in AI Assistant with tool calling & image recognition...
MEGALODON
MEGALODON Automated w...
Data-Void Exploits in Web-Searching LLMs
Web-searching Large Language Models LLMs have changed how users seek online information: instead of sifting through ranked lists of links, users read synthesized answers. This shift creates a new LLM vulnerability: a data-void exploit. Disinformers publish their narratives in search spaces where...
iOS安全攻防研究
现代 iOS 纵深防御体系系列研究笔记：SPTM/TXM/Exclaves 架构、沙箱逃逸攻防、Coruna 与 DarkSword 漏洞链、WebKit 到内核提权、OTA 固件更新安全、后台驻留与持久化检测。内容为防御性研究与公开资料整理。...
undici
An HTTP/1.1 client, written from scratch for Node.js...
firejail
Linux namespaces and seccomp-bpf sandbox...
Pegasus Spyware Infection Confirmed on Serbian University Rector's iPhone Days Before Election
The iPhone of Vladan Đokić, rector of the University of Belgrade and a prominent supporter of Serbia's student protest movement, was infected with NSO Group's Pegasus spyware in 2026, the Citizen Lab said on October 19. The finding came six days before Serbia's October 25 snap parliamentary...
vulnclaw
基于 LLM Agent + MCP 工具链 + 渗透 Skill 编排， 配合 OpenAI / MiniMax / DeepSeek 等兼容模型， 自然语言输入 → 自动完成「...
EUVD-2025-26338
A vulnerability has been found in RemoteClinic up to 2.0. This issue affects some unknown processing of the file /patients/edit-patient.php. The manipulation of the argument Email leads to information disclosure. The attack may be initiated remotely. The exploit has been disclosed to the public a...
store-api
RESTful API auto-generation for common-store data layer fastify + fastapi adapters over GQL, spec-driven dual-runtime parity...
EUVD-2025-26308
A security flaw has been discovered in code-projects Human Resource Integrated System 1.0. Impacted is an unknown function of the file loginattendance2.php. Performing manipulation of the argument employeeid/date results in sql injection. The attack can be initiated remotely. The exploit has been...
EUVD-2025-26311
A vulnerability was determined in Tenda CH22 1.0.0.1. Affected by this issue is the function fromIpsecitem of the file /goform/IPSECsave of the component httpd. Executing manipulation of the argument ipsecno can lead to stack-based buffer overflow. The attack may be performed from remote...