drow

drow Description TL;DR drow is a command-line utility that is used to inject code and hook the entrypoint of ELF executables post-build. It takes unmodified ELF executables as input and exports a modified ELF contianing an embedded user-supplied payload that executes at runtime. Slightly more...

PoolParty

PoolParty A collection of fully-undetectable process injection techniques abusing Windows Thread Pools. Presented at Black Hat EU 2023 Briefings under the title - The Pool Party You Will Never Forget: New Process Injection Techniques Using Windows Thread Pools PoolParty Variants Variant ID| Varie...

CVE-Factory

CVE-Factory: Escalando Tareas Agénticas de Nivel Experto para Vulnerabilidades de Seguridad en Código CVE-Factory es un sistema Multi-Agente para la reproducción de CVEs totalmente automatizada y de extremo a extremo. Dados los registros CVE, el sistema investiga automáticamente los detalles,...

CVE-2020-23592

CVE-2020-23592 OPTILINK E-PON "MODEL NO: OP-XT71000N" with "HARDWARE VERSION: V2.2"; & "FIRMWARE VERSION: OPV3.3.1-191028" Found vulnerability in the "OPTILINK OP-XT71000N Hardware Version: V2.2 , Firmware Version: OPV3.3.1-191028" allow an unauthenticated, remote attacker to conduct a cross-site...

the-backdoor-factory

¡La nueva versión de BACKDOOR FACTORY está disponible! Obtén acceso aquí: https://github.com/sponsors/secretsquirrel ADVERTENCIA: Las Pull Requests SERÁN IGNORADAS Y CERRADAS. The Backdoor Factory BDF Solo para profesionales de la seguridad e investigadores. El objetivo de BDF es parchear binario...

Joomla! Component Love Factory 1.3.4 - Local File Inclusion

A directory traversal vulnerability in the Love Factory comlovefactory component 1.3.4 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php. id: CVE-2010-1957 info: name: Joomla! Component Love Factory 1.3.4 - Local File Inclusion...

BDFProxy

¡Nueva versión de BDFProxy disponible! Solo para patrocinadores. Obtén acceso aquí: https://github.com/sponsors/secretsquirrel BLOG: http://secureallthethings.blogspot.com/2017/08/closing-door-end-of-backdoor-factory.html The Backdoor Factory Proxy BDFProxy v0.3.8 Solo para profesionales de...

killcast

Manipula dispositivos Chromecast en tu Red Disponible en Inspiración - Miles de dispositivos Google Chromecast secuestrados para promocionar a PewDiePie Esta herramienta es una Prueba de Concepto y solo tiene fines de Investigación. killcast muestra cómo los dispositivos Chromecast pueden ser...

CVE-2025-15679

Under certain circumstances such as reset to factory default operation, the BMC root account is made active without a password on BullSequana XH3406 and XH3515...

CVE-2025-15679 BMC root account active without password on BullSequana XH3406 and XH3515

Under certain circumstances such as reset to factory default operation, the BMC root account is made active without a password on BullSequana XH3406 and XH3515...

EUVD-2025-210890

Under certain circumstances such as reset to factory default operation, the BMC root account is made active without a password on BullSequana XH3406 and XH3515...

CVE-2025-15679

CVE-2025-15679 affects the BMC (Baseboard Management Controller) root account , which can become active without a password under certain circumstances such as a reset to factory default operation. This grants unauthenticated local access with HIGH impact on confidentiality, integrity, and availab...

CVE-2026-21006-Zigbee-Light-Link-Factory-Reset-Exploit

CVE-2026-21006 – Zigbee Light Link Factory Reset Exploit Program Code Python Zigbee simulation root@kitploit: zigbeefactoryreset.py - Simulated Zigbee coordinator sending factory reset command import time class ZigbeeDevice: def initself: self.networkkey = b'secret' def receivecommandself, cmdid:...

gha-lab-f894926966

Automated research artifact — not the upstream project. This repository is a disposable lab built by an automated harness for a master's thesis at Université Laval on reproducing published GitHub Actions workflow vulnerabilities. It is a verbatim snapshot of astronomer/dag-factory at commit...

CVE-2026-86996

n8n is an open source workflow automation platform. Prior to 2.37.7 and 2.38.2, the workflow setting named This workflow can be called by was enforced by the Execute Workflow node but not when a workflow was attached to an Agent as a tool. A user able to build an Agent could invoke a restricted...

CVE-2012-1803

CVE-2012-1803 Critical vulnerability in Siemens RuggedCom ROS devices allowing attackers to derive a hidden factory account password from the device MAC address and gain unauthorized administrative access via TELNET, rsh, or serial interfaces. Affects ROS 3.10.x and earlier...

llama-factory-webui-rce-cve-2026-58116-trust-remote-code-model-path-injection

CVE-2026-58116 — RCE en WebUI de LLaMA-Factory mediante trustremotecode Prueba de concepto para CVE-2026-58116 CVSS 9.8 Crítico: ejecución remota de código en LLaMA-Factory = v0.9.5. La WebUI de LLaMA-Factory tiene hardcodeado trustremotecode=True al cargar un modelo...

wyze-bulb-color-pwned

wyze-bulb-color-pwned Wireless exploit for the Wyze WLPA19CV2 color bulb Overview The Wyze Color WLPA19CV2 bulbs have a factory test mode which allows a custom OTA image to be flashed wirelessly through a specific sequence of power cycling. This project provides An implementation and guide to...

CVE-2026-85673

LLaMA-Factory contains a server-side request forgery vulnerability in the OpenAI-compatible API multimodal media URL handler that allows unauthenticated attackers to bypass SSRF validation. The checkssrfurl guard validates URLs once but requests.get follows redirects and re-resolves DNS without...

CVE-2026-85673

LLaMA-Factory contains a server-side request forgery (SSRF) vulnerability in its OpenAI-compatible API multimodal media URL handler . The root cause is that the check_ssrf_url guard validates a URL only once, while requests.get subsequently follows HTTP redirects and re-resolves DNS without re-va...