yasuo

YASUO @0xsauby Description Yasuo is a ruby script that scans for vulnerable 3rd-party web applications. While working on a network security assessment internal, external, redteam gigs etc., we often come across vulnerable 3rd-party web applications or web front-ends that allow us to compromise th...

Binary Exploits

Exploit Database's Binary Exploits Binary exploits are located in the /bin-sploits/ directory. This is an official repository of The Exploit Database, a project sponsored by Offensive Security. Our repositories are: Exploits & Shellcodes: https://gitlab.com/exploit-database/exploitdb Binary...

CVE-2019-0785

CVE-2019-0785 Microsoft Windows DHCP 공격을 위해. 잠시 기다려 주시겠습니까? 저는 지금 오고 있습니다!...

qark

Quick Android Review Kit This tool is designed to look for several security related Android application vulnerabilities, either in source code or packaged APKs. The tool is also capable of creating "Proof-of-Concept" deployable APKs and/or ADB commands, capable of exploiting many of the...

Oracle WebLogic Server - Remote Code Execution

The Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: WLS - Web Services is susceptible to a remote code execution vulnerability that is easily exploitable and could allow unauthenticated attackers with network access via HTTP to compromise the server. Supported versions...

blackbox-fuzzing

ルーター TL-WR902AC を例とした IoT デバイスのブラックボックスファジング これは、私のタームペーパーのHTML版であり、PDFとしてダウンロードできます ここ。 はじめに ファジングは、ソフトウェアのバグを見つける「最も効果的な方法の1つ」となっています。このような主張や 類似した主張で、現在のファジング関連の論文の多くが始まります google-scholar。 「Internet of Vulnerable Things」というトピックに関する前回のタームペーパーの主な目標は、メモリ関連のバグを見つけて、...

CVE-2022-26809

CVE 설명 CVE-2022-26809 - 핵심 Windows 구성 요소RPC의 취약점으로, CVSS 점수 9.8을 받은 데에는 이유가 있습니다. 공격에 인증이 필요하지 않고 네트워크를 통해 원격으로 실행될 수 있으며, RPC 서비스의 권한으로 원격 코드 실행RCE이 가능합니다. RPC 서비스의 권한은 RPC 런타임을 호스팅하는 프로세스에 따라 달라집니다. 약간의 운이 따르는 이 치명적인 버그는 패치되지 않은 SMB를 실행하는 Windows 호스트에 접근할 수 있게 해줍니다. 이 취약점은 네트워크 외부에서 침입하기 위해, 그리...

node-ip-vex

node-ip-vex このサンプルプロジェクトは、CVE-2024-29415 の脆弱性がある node-ip npm パッケージに依存しています。 しかし、私たちのプロジェクトは脆弱な関数 .isPublic を直接使用していないため、CVE-2024-29415 に対して悪用可能ではありません。 Docker Scout を使用した分析の実行 プロジェクトを Docker イメージとしてパッケージ化できます。 docker buildx build -t felipecruz1638514/node-ip-vex:v1 . そして、Docker Scout...

mi-x

Am I Exploitable? Author: 2022年 - 現在, Rezilion Description: 脆弱性の検証 Development: 2022年1月 - 現在 Documentation: ウェブサイト、READMEを参照 はじめに 説明 ' Am I Exploitable?' は、システムが特定の脆弱性に対して悪用可能かどうかを検証するニーズに応えるために作られたPythonオープンソースプロジェクトです。...

PaperCut NG - Authentication Bypass

This vulnerability allows remote attackers to bypass authentication on affected installations of PaperCut NG 22.0.5 Build 63914. Authentication is not required to exploit this vulnerability. The specific flaw exists within the SecurityRequestFilter class. The issue results from improper...

Advisories

보안 권고 이 저장소에는 침투 테스트 중 발견되어 보고된 여러 취약점이 포함되어 있습니다. 이 저장소의 모든 콘텐츠는 교육 목적으로만 제공됩니다. 링크 https://www.securityweek.com/organizations-notified-of-remotely-exploitable-vulnerabilities-in-aveva-hmi-scada-products/ https://www.cisa.gov/news-events/ics-advisories/icsa-22-342-02...

cves-2025-11187_15467_69418

제가 발견한 것이 아닙니다. 제대로 된 체인을 만들지는 못했지만, 약 80%는 뚫을 수 있습니다. bfcanary는 실제 타깃이 필요합니다. glhf CVEs CVE| 유형| 심각도| 설명 ---|---|---|--- CVE-2025-11187| 스택 오버플로| 높음| PKCS12 PBMAC1 keyLength 검증 우회 CVE-2025-15467| 스택 오버플로| 높음| CMS AuthEnvelopedData IV 길이 오버플로 CVE-2025-69418| 정보 유출| 중간| OCB 모드 부분 블록 암호화 실패 빌드 make...

CVE-2024-21345

사용법 - python3 CVE-2024-21345.py 모든 커널이 공격 가능하며, 쉽게 루트 액세스를 얻을 수 있습니다...

PT-2026-97822

Name of the Vulnerable Software and Affected Versions mcp-remote versions 0.1.32 through 0.1.38 Description The software is subject to Server-Side Request Forgery SSRF, a flaw that allows a server to make requests to an unintended location. This occurs because the application trusts and fetches t...

PT-2026-96913

Name of the Vulnerable Software and Affected Versions Adobe Campaign Classic affected versions not specified Description A Server-Side Request Forgery SSRF flaw exists that allows for privilege escalation. This issue is network-exploitable and can be triggered without authentication or user...

CVE-2026-83199

Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM component: Server Infrastructure. Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel CRM Deployment. Successfu...

EUVD-2026-79818

Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite component: Other issue. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Purchasing. Successful attac...

EUVD-2026-79810

Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Product Hub...

CVE-2026-83322

This vulnerability affects Oracle Business Intelligence Enterprise Edition (part of Oracle Analytics), specifically the Platform Security component, in supported versions 8.2.0.0.0 and 26.01.0.0.0 . A high-privileged attacker with network access via HTTP can exploit it with low complexity and no ...

PT-2026-92585

Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware component: OID LDAP Server. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via LDAP to compromise Oracle...