SPOILER

SPOILER: Speculative Load Hazards Boost Rowhammer and Cache Attacks CVE-2019-0162 INTEL-SA-00238 https://www.usenix.org/system/files/sec19-islam.pdf @inproceedings 236252, author = Saad Islam and Ahmad Moghimi and Ida Bruhns and Moritz Krebbel and Berk Gulmezoglu and Thomas Eisenbarth and Berk...

CVE-2025-23942-poc

WP Load Gallery Exploit CVE-2025-23942 📌 Description Unrestricted Upload of File with Dangerous Type vulnerability in NgocCode WP Load Gallery allows Upload a Web Shell to a Web Server. This issue affects WP Load Gallery: from n/a through 2.1.6. ⚠️ Vulnerability Details CVE ID: CVE-2025-23942...

CVE-2026-9973-exploit

CVE-2026-9973 Bug fix https://chromium-review.googlesource.com/c/v8/v8/+/7822799 wasmturboshaft Fix Phi handling in Load Elimination some more Multiple Phis can depend on each other, so we have to clear all their replacements up front. Fixed: 509268941 Change-Id:...

linkedin-extension-fingerprinting

LinkedIn Chrome Extension Fingerprinting LinkedIn silently probes for 2,953 Chrome extensions on every page load. Background This repository documents every extension LinkedIn checks for and provides tools to identify them. Data The complete list of extensions with names and Chrome Web Store link...

spd_flasher

CVE-2022-38694 Hardened Exploit — RP2350 USB Host Auto Flasher 中文版 README Tutorial UDX710 Boot Chain Reverse Engineering and RP2350 Hardened Boot Tutorial Exploiting CVE-2022-38694 Unisoc BootROM vulnerability via Raspberry Pi RP2350 USB Host to automatically send SPL Loader on boot and start...

CVE-2023-44487-HTTP-2-Rapid-Reset-Attack

PoC - CVE-2023-44487: HTTP/2 Rapid Reset Attack This repository contains a Proof of Concept PoC to demonstrate the exploitation of the vulnerability CVE-2023-44487 , also known as HTTP/2 Rapid Reset Attack. This vulnerability affects the HTTP/2 protocol and allows an attacker to overload web...

vc5

VC5 This README is currently being updated to reflect recent changes - some information may not reflect the current codebase. This iteration of code is not yet battle ready - use a v0.2 release for production A horizontally scalable Direct Server Return DSR layer 4 load balancer L4LB for Linux...

domain-protect

domain-protect Domain Protect is now an OWASP project moved to: github.com/domain-protect/domain-protect...

CVE-2023-44487

HTTP/2 Rapid Reset: CVE-2023-44487 Description This repository contains proof-of-concept PoC code for the HTTP/2 Rapid Reset vulnerability identified as CVE-2023-44487. Vulnerability Overview CVE ID : CVE-2023-44487 Impact : Denial of Service DoS Affected Protocols : HTTP/2 Affected Components :...

CVE-2026-98857

A flaw was found in the Linux kernel's IP Virtual Server IPVS module. The load-balancing cache fails to enforce strict bounds on table growth when entries remain continuously active. A remote attacker can exploit this vulnerability by transmitting network traffic to unique destination addresses,...

CVE-2018-3639-specter-v4-

CVE-2018-3639-specter-v4 spectre v4 : Speculative Store Bypass CVE-2018-3639 proof of concept for Linux build: gcc spectre-v4.cpp -o spectre run: ./spectre result: --------attack-------- low than threshold:155 low than threshold:144 low than threshold:133 low than threshold:0 low than threshold:1...

foolav

foolav Executable compiled with this code is useful during penetration tests where there is a need to execute some payload meterpreter maybe? while being certain that it will not be detected by antivirus software. The only requirement is to be able to upload two files: binary executable and paylo...

CVE-2026-12295-UXXS-in-my-wasm

CVE-2026-12295 — srcdoc data on a non-about:srcdoc URI Firefox UXSS Proof of concept: a compromised content process forges a PDocumentChannel load whose nsDocShellLoadState carries SrcdocData together with an arbitrary URI. Vulnerable builds serve the attacker HTML as the document at the victim...

Am-I-affected-by-Meltdown

Am I affected by Meltdown?! Meltdown CVE-2017-5754 checker What am I? Proof-of-concept / Exploit / Checks whether system is affected by Variant 3: rogue data cache load CVE-2017-5754, a.k.a MELTDOWN. The basic idea is that user will know whether or not the running system is properly patched with...

wordpress-cve-2018-6389

WordPress-CVE-2018-6389 WordPress Core - 'load-scripts.php' Denial of Service -t PoC cve-2018-6389...

AV-Chaos-Monkey

AV Chaos Monkey Distributed chaos engineering platform for load testing video conferencing systems. Simulates 1500+ WebRTC participants with H.264/Opus streams and injects network chaos spikes to validate system resilience under degraded conditions Architecture 1. Media Processing Pipeline : FFmp...

CVE-2019-12180

CVE-2019-12180 Advisory & PoC SoapUI and ReadyAPI allow you to create or add dynamic contents to test cases for example, to calculate a timestamp on the fly using Apache Groovy Language scripts. Execution of these scripts can be triggered in many ways and they are stored inside the XML "Project...

wordpress-CVE-2018-6389

wordpress-CVE-2018-6389 Metasploit module for WordPress DOS load-scripts.php CVE-2018-638...

Mysql-Readfile

Introduction This project mainly uses load data local infile to obtain any files of the attacker's host Windows platform, and the files to be visited can be listed in file.txt This will be very meaningful when we can control the connection configuration of Mysql in some cases. Project usage Step...

CVE-2019-6446

CVE-2019-6446 Numpy Deserialization Command Execution NumPy is a powerful Python library primarily used for performing computations on multi-dimensional arrays. Experts have analyzed that versions less than or equal to 1.16.0 contain this vulnerability. The fix recommendation is to delete the...