CVE-2022-26809

CVE description CVE-2022-26809 - weakness in a core Windows component RPC earned a CVSS score of 9.8 not without a reason, as the attack does not require authentication and can be executed remotely over a network, and can result in remote code execution RCE with the privileges of the RPC service,...

qark

Quick Android Review Kit This tool is designed to look for several security related Android application vulnerabilities, either in source code or packaged APKs. The tool is also capable of creating "Proof-of-Concept" deployable APKs and/or ADB commands, capable of exploiting many of the...

yasuo

YASUO @0xsauby Description Yasuo is a ruby script that scans for vulnerable 3rd-party web applications. While working on a network security assessment internal, external, redteam gigs etc., we often come across vulnerable 3rd-party web applications or web front-ends that allow us to compromise th...

Oracle WebLogic Server - Remote Code Execution

The Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: WLS - Web Services is susceptible to a remote code execution vulnerability that is easily exploitable and could allow unauthenticated attackers with network access via HTTP to compromise the server. Supported versions...

PaperCut NG - Authentication Bypass

This vulnerability allows remote attackers to bypass authentication on affected installations of PaperCut NG 22.0.5 Build 63914. Authentication is not required to exploit this vulnerability. The specific flaw exists within the SecurityRequestFilter class. The issue results from improper...

mi-x

Am I Exploitable? Autor: 2022 - Now, Rezilion Beschreibung: Schwachstellenvalidierung Entwicklung: Januar 2022 - Now Dokumentation: Siehe Website, README Einführung Beschreibung ‘Am I Exploitable?’ ist ein python Open-Source-Projekt, das dem Bedarf gerecht wird, zu validieren, ob Ihr System für...

cves-2025-11187_15467_69418

Non è una mia scoperta. Non ho mai trovato il tempo per una catena completa, anche se è sfruttabile all'80%; bfcanary richiede un bersaglio reale. glhf CVE...

CVE-2019-0785

CVE-2019-0785 Microsoft Windows DHCP da sfruttare. Per favore aspetta, eh? Sto arrivando!...

CVE-2024-21345

Usage - python3 CVE-2024-21345.py Tutti i kernel sono sfruttabili. Ottieni facilmente accesso root...

blackbox-fuzzing

Fuzzing de Caixa Preta de Dispositivos IoT Usando o Roteador TL-WR902AC como Exemplo Esta é a versão em HTML do meu trabalho acadêmico, que pode ser baixado como PDF aqui. Introdução O fuzzing tornou-se "uma das maneiras mais eficazes" de encontrar bugs em software. Com esta ou alegações...

Advisories

Sicherheitshinweise Dieses Repository enthält mehrere Schwachstellen, die während Penetrationstests entdeckt und gemeldet wurden. Der gesamte Inhalt dieses Repositorys dient ausschließlich zu Bildungszwecken. Links...

Exploits + Shellcode + GHDB

The Exploit Database Git Repository This is an official repository of The Exploit Database, a project sponsored by Offensive Security. Our repositories are: Exploits & Shellcodes: gitlab.com/exploit-database/exploitdb Binary Exploits: gitlab.com/exploit-database/exploitdb-bin-sploits Papers:...

node-ip-vex

node-ip-vex Dieses Beispielprojekt hängt vom npm-Paket node-ip ab, das für CVE-2024-29415 anfällig ist. Da unser Projekt die anfällige Funktion .isPublic jedoch nicht direkt verwendet, ist es für CVE-2024-29415 nicht ausnutzbar. Führen Sie eine Analyse mit Docker Scout durch Ich kann mein Projekt...

Astra Linux – Vulnerability in Firefox

The incorrect use of the '' method could lead to a “user-after-poison” situation and potentially cause a exploitable crash. This vulnerability affects Firefox versions earlier than 85...

Astra Linux – Vulnerability in Firefox

If multiple instances of resource exhaustion occur at the wrong time, the garbage collector could cause memory corruption and potentially exploitable crashes. This vulnerability affects Firefox for Android 112, Firefox 112, and Focus for Android 112...

Astra Linux – Vulnerability in Firefox and Thunderbird

While implementing AudioWorklets, some code may have converted one type to another, resulting in an invalid, dynamic type. This could lead to a potentially exploitable crash. This vulnerability affects Firefox 111, Firefox ESR 102.9, and Thunderbird 102.9...

Astra Linux – Vulnerability in Firefox

By causing a transition on a parent node by removing a CSS rule, an invalid property for a marker could be applied, leading to memory corruption and potentially exploitable crashes. This vulnerability affects Firefox versions less than 87...

Astra Linux – Vulnerability in Firefox and Thunderbird

After a Garbage Collector compaction, weak maps might have been accessed before they were properly traced. This led to memory corruption and potentially exploitable crashes. This vulnerability affects Firefox 112, Focus for Android 112, Firefox ESR 102.10, Firefox for Android 112, and Thunderbird...

Astra Linux – Vulnerability in Firefox and Thunderbird

A use-after-free vulnerability in media channels could lead to memory corruption and potentially exploitable crashes. This vulnerability affects Thunderbird 78.13, Thunderbird 91, Firefox ESR 78.13, and Firefox 91...

firefox: thunderbird: Internally found bugs fixed in Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1 and Firefox 154

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Internally found bugs present in Thunderbird ESR 140.13, Thunderbird ESR 153.0 and Thunderbird 153. Some of these bugs showed evidence of memory corruption or another...