ft9201-libfprint

ft9201-libfprint Linux fingerprint support for the Focal-systems FT9201 USB reader 2808:93a9, sold as a standalone Windows Hello dongle, as a libfprint driver. The sensor is a tiny 96×96 optical reader. libfprint's built-in matcher does a poor job on an image that small, so this driver instead...

howdy

Howdy provides Windows Hello™ style authentication for Linux. Use your built-in IR emitters and camera in combination with facial recognition to prove who you are. Using the central authentication system PAM, this works everywhere you would otherwise need your password: Login, lock screen, sudo,...

Next.js-CVE-2025-29927

Next.js Docker Demo A simple Hello World application built with Next.js 12.2 and Docker. Prerequisites Docker installed on your system Node.js 16 or later for local development Building the Docker Image To build the Docker image, run: docker build -t nextjs-docker-demo . Running the Container To...

Vulnerable-Lab-NextJS-CVE-2025-29927

Next.js Docker Hello World A simple Hello World application using Next.js 12.2 and Docker. Prerequisites Docker Building and Running the Application 1. Build the Docker image: docker build -t nextjs-docker-hello . 2. Run the container: docker run -p 3000:3000 nextjs-docker-hello 3. Open your...

CVE-2017-1000117

Server Launcher for CVE-2017-1000117 Run the following command, then open your web browser and go to http://localhost:8088! $ git clone --recursive https://github.com/0gawa/CVE-2017-1000117 If "Hello World" is displayed, update git! It's vulnerable...

CVE-2024-9224

CVE-2024-9224 Hello World = 2.1.1 - Authenticated Subscriber+ Arbitrary File Read Description The Hello World plugin for WordPress is vulnerable to Arbitrary File Reading in all versions up to, and including, 2.1.1 via the helloworldlyric function. This makes it possible for authenticated...

Shwmae

Shwmae Shwmae shuh-my is a Windows Hello abuse tool that was released during DEF CON 32 as part of the Abusing Windows Hello Without a Severed Hand talk. The purpose of the tool is to abuse Windows Hello from a privileged user context. Shwmae Copyright C 2024 Shwmae enum Default Verb Enumerate...

CLEANSTART-2026-RQ80380 Handshakes which used Encrypted Client Hello could be de-anonymized by a passive network observer due to a disclosure of pre-shared key identities in the unencrypted client hello

CVE-2026-42505 affects multiple packages. Handshakes which used Encrypted Client Hello could be de-anonymized by a passive network observer due to a disclosure of pre-shared key identities in the unencrypted client hello. See references for individual vulnerability details...

CLEANSTART-2026-MS42358 Handshakes which used Encrypted Client Hello could be de-anonymized by a passive network observer due to a disclosure of pre-shared key identities in the unencrypted client hello

CVE-2026-42505 affects multiple packages. Handshakes which used Encrypted Client Hello could be de-anonymized by a passive network observer due to a disclosure of pre-shared key identities in the unencrypted client hello. See references for individual vulnerability details...

CLEANSTART-2026-YT34105 Handshakes which used Encrypted Client Hello could be de-anonymized by a passive network observer due to a disclosure of pre-shared key identities in the unencrypted client hello

CVE-2026-42505 affects multiple packages. Handshakes which used Encrypted Client Hello could be de-anonymized by a passive network observer due to a disclosure of pre-shared key identities in the unencrypted client hello. See references for individual vulnerability details...

CLEANSTART-2026-PH60629 Handshakes which used Encrypted Client Hello could be de-anonymized by a passive network observer due to a disclosure of pre-shared key identities in the unencrypted client hello

CVE-2026-42505 affects multiple packages. Handshakes which used Encrypted Client Hello could be de-anonymized by a passive network observer due to a disclosure of pre-shared key identities in the unencrypted client hello. See references for individual vulnerability details...

CLEANSTART-2026-CD68028 Handshakes which used Encrypted Client Hello could be de-anonymized by a passive network observer due to a disclosure of pre-shared key identities in the unencrypted client hello

CVE-2026-42505 affects multiple packages. Handshakes which used Encrypted Client Hello could be de-anonymized by a passive network observer due to a disclosure of pre-shared key identities in the unencrypted client hello. See references for individual vulnerability details...

CVE-2026-13074

An unauthenticated remote client can cause excessive CPU consumption on a MongoDB server by sending a specific combination of parameters to the awaitable hello command in exhaust mode. The server's handling of this combination results in a response loop that bypasses normal throttling, allowing a...

Hello-VT-rp

Hello-VT-rp A simple hypervisor demonstrating the use of the Intel VT-rp redirect protection technology. This repository is a complement of the Intel VT-rp blog post series and not meant for a general use. For the overview of Intel VT-rp, please read the post. The hypervisor The hypervisor/...

Malicious code in h13t0ry-hello-demo (PyPI)

Source: kam193 e27409f6c0ba5c7e7ba22f21c8b4806686ae8b64f4d7daf2dd9a7e6182bef5ab During import package starts a reverse shell --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2026-10-h13t0ry-hello-demo Reasons based on the campaign: - The package...

MAL-2026-18336 Malicious code in h13t0ry-hello-demo (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34a52ed4e00f54dc99a4b460ad2d881b62a7a85c636085f4166f4062cebea374 On import, the package's top-level module code opens a TCP socket to the hardcoded IP 115.190.210.22:80, duplicates the socket over stdin/stdout/stde...

Malicious code in h13t0ry-hello-demo (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34a52ed4e00f54dc99a4b460ad2d881b62a7a85c636085f4166f4062cebea374 On import, the package's top-level module code opens a TCP socket to the hardcoded IP 115.190.210.22:80, duplicates the socket over stdin/stdout/stde...

CLEANSTART-2026-NN31830 Handshakes which used Encrypted Client Hello could be de-anonymized by a passive network observer due to a disclosure of pre-shared key identities in the unencrypted client hello

CVE-2026-42505 affects multiple packages. Handshakes which used Encrypted Client Hello could be de-anonymized by a passive network observer due to a disclosure of pre-shared key identities in the unencrypted client hello. See references for individual vulnerability details...

Malicious Package

Overview h13t0ry-hello-demo is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

CLEANSTART-2026-RV97727 Handshakes which used Encrypted Client Hello could be de-anonymized by a passive network observer due to a disclosure of pre-shared key identities in the unencrypted client hello

Security vulnerability affects the argo-cd package. Handshakes which used Encrypted Client Hello could be de-anonymized by a passive network observer due to a disclosure of pre-shared key identities in the unencrypted client hello...