EUVD-2025-26345

A vulnerability has been found in TOTOLINK A702R 4.0.0-B20211108.1423. This affects the function sub4162DC of the file /boafrm/formFilter. Such manipulation of the argument ip6addr leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may ...

EUVD-2025-26343

A vulnerability was detected in TOTOLINK A702R 4.0.0-B20211108.1423. Affected by this vulnerability is the function sub4162DC of the file /boafrm/formFilter. The manipulation of the argument ip6addr results in buffer overflow. It is possible to launch the attack remotely. The exploit is now publi...

EUVD-2025-26346

A vulnerability was determined in TOTOLINK A702R 4.0.0-B20211108.1423. This issue affects the function sub418030 of the file /boafrm/formParentControl. Executing manipulation of the argument submit-url can lead to buffer overflow. The attack may be launched remotely. The exploit has been publicly...

EUVD-2025-26402

A flaw has been found in TOTOLINK A702R 4.0.0-B20211108.1423. Affected by this issue is the function sub419BE0 of the file /boafrm/formIpQoS. This manipulation of the argument mac causes buffer overflow. The attack can be initiated remotely. The exploit has been published and may be used...

Nagios-XI-s-CVE-2023-40931-Exploit

이 저장소에는 README가 없습니다...

Webmin <= 1.920 - Unauthenticated Remote Command Execution

Webmin =1.920. is vulnerable to an unauthenticated remote command execution via the parameter 'old' in passwordchange.cgi. id: CVE-2019-15107 info: name: Webmin = 1.920 - Unauthenticated Remote Command Execution author: bp0lr severity: critical description: Webmin =1.920. is vulnerable to an...

CVE-2026-97152

Nanomsg versions 0.5-beta through 1.x before 1.2.3 has a remotely exploitable buffer overflow in the WebSocket transport, due to an unchecked copy of the Sec-WebSocket-Version header, through snprintf...

multi

PS4 GoldHEN Host 7.00 - 13.52 by OGH A custom, high-perform...

Dark Web Roast - August 2026 Edition

Dark Web Roast – August 2026 Edition By Trellix Advanced Research Center · September 24, 2026 Executive Summary August 2026 was another month where the underground did most of our investigative work for us, and this time it barely required a magnifying glass. The headline act was comedyclub on...

CVE-2026-82406

Klever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.20, the native marketplace function core/kapp/market/market.go Buy does not check IsClaimed before accepting a bid. A seller can use the Claim seller-accept branch to settle a resting-bid auction while leaving the...

Chinese Hackers Exploit Chrome-Windows Zero-Day Chain to Deploy CLEANGULP Malware

A Chinese threat actor codenamed UTA0565 has been observed exploiting the recently disclosed Google Chrome-Microsoft Windows exploit chain as zero-days through fake websites. The attacks, detected on September 3 and 4, 2026, involved the chaining of two vulnerabilities in Chrome CVE-2026-85046,...

security-kit

Security Kit — offensive security, testing & debugging for sit...

Windows-exploit-suggester

windows-exploit-suggester.ps1 A local privilege-escalation L...

XMEye Sofia WFS Use-After-Free

XMEye Sofia contains a potential use-after-free vulnerability in its WFS block buffer cache due to unsynchronized reference count operations. Concurrent access can cause a buffer that is still referenced by one thread to be treated as free and repurposed for another block, resulting in a stale...

hackexploit-dark

hackexploit-dark A dark hacking tool coded and built to assis...

CVE-2020-1971

CVE-2020-1971 CVE-2020-1971 Auto Scan & Remote Exploit Script. Auto Local Scan & Patch Script. Currently in development Patched Source Code of OpenSSL 1.1.1i Install from source/Update .deb Script Currently in development 5:38pm Completed 5:50pm Install from source/Update Windows Currently in...

React-2-Shell

This is a security exploit tool targeting CVE-2025-55182. It exploits a Remote Code Execution RCE vulnerability in React Server Components 🔥 CVE-2025-55182 Background CVE-2025-55182 also widely referred to as “React2Shell” is a critical remote code execution RCE vulnerability found in React Serve...

Oracle Critical Patch Update Advisory - July 2026

This Critical Patch Update contains 19 new security patches, plus additional third party patches noted below, for Oracle Java SE. 17 of these vulnerabilities may be remotely exploitable without authentication, i.e., may be exploited over a network without requiring user credentials. CVE-2026-6257...

poc-gerador-apr-ia

poc-gerador...

fish-live-in-trees

Fish Live in Trees Production LLM Runtime Alignment Context Injection RACI Author: Sean Kavanagh Date: 2026-02-16 Environment: Gemini 3 Flash Free Tier - Public Production Interface Exploit Type: Contextual Pivot Factual Accuracy → Interpersonal Authenticity No jailbreak payloads. No special tool...