CVE-2021-33959

CVE-2021-33959 It can be seen that Plex service listens to the four udp ports 32410, 32412, 32413 and 32414. Through the analysis of the attack payload and using the message format of the device query request for reference, we write software to send udp packets with the attack payload of M-SEARCH...

CVE-2025-5964-

CVE‑2025‑5964 Path Traversal PoC for M‑Files Author: Byte Reaper Telegram: @ByteReaper0 Overview This repository contains a Proof‑of‑Concept PoC in C for a suspected Path Traversal vulnerability in M‑Files version 25.6.14925.0. The PoC file exploit.c attempts to read sensitive files e.g...

CVE-2026-124758

P-Net before 1.0.4 does not check the record data length of an IODWrite request to a non-user record index against the size of the record block header. The 32-bit length is reduced by the header size before it is passed to the record handlers, so a length smaller than the header underflows and th...

CVE-2012-5960-PoC

CVE-2012-5960-PoC CVE-2012-5960, CVE-2012-5959 Proof of Concept 隨手記錄一下最近玩的東西。 !/usr/bin/python2 -- coding: utf-8 -- Usage: python2 libupnpDoSPoC.py import socket TARGET = 'TARGETIP' ''' normaltraffic = \ 'M-SEARCH HTTP/1.1\r\n' \ 'HOST:239.255.255.250:1900\r\n' \ 'MX:3\r\n' ...

EUVD-2026-125298

P-Net before 1.0.4 does not check the record data length of an IODWrite request to a non-user record index against the size of the record block header. The 32-bit length is reduced by the header size before it is passed to the record handlers, so a length smaller than the header underflows and th...

cve-2026-25676

CVE-2026-25676 Research DLL Search Path Hijacking in M-Track Duo HD Installer Overview This repository contains initial research and a proof-of-concept related to CVE-2026-25676, a DLL search path hijacking vulnerability affecting the installer of M-Track Duo HD 1.0.0. The goal of this project is...

security-portfolio

Skyler M. — Security Portfolio IT Infrastructure & Security Engineer · Offensive security · Detection engineering · Vendor risk USMC veteran · Sole IT & security owner for a 200-user firm across 23 states · Top 2% on TryHackMe LinkedIn · GitHub @Mitsu-bis · HackerOne · TryHackMe · Resume I'm a US...

PT-2026-146838

P-Net before 1.0.4 does not check the record data length of an IODWrite request to a non-user record index against the size of the record block header. The 32-bit length is reduced by the header size before it is passed to the record handlers, so a length smaller than the header underflows and th...

CVE-2026-68549 ClickMigrate has Path Traversal in "revision -m" argument

ClickMigrate is a database migration tool for ClickHouse with automatic SQL migration management and version tracking. Prior to version 1.0.3, a path traversal vulnerability in the revision command allowed a crafted migration name supplied via the -m argument to escape the intended migrations...

CVE-2026-68549

The ClickMigrate database migration tool for ClickHouse is vulnerable to a path traversal vulnerability in the revision command. A crafted migration name provided via the -m argument can escape the intended migrations directory, potentially allowing an attacker to create a .sql file in an arbitra...

CVE-2026-68549 ClickMigrate has Path Traversal in "revision -m" argument

ClickMigrate is a database migration tool for ClickHouse with automatic SQL migration management and version tracking. Prior to version 1.0.3, a path traversal vulnerability in the revision command allowed a crafted migration name supplied via the -m argument to escape the intended migrations...

M-Botnet

M-Botnet Disclaimer1: This tool is used for educational purposes ONLY! Disclaimer2: I wrote this a long time ago, so do not judge my coding skills :D A basic botnet project. It's a C2 that controls a worm. The worm can self-propagate to spread around the network using MS17-010 vuln. To defeat thi...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: bouncycastle (UTSA-2026-150764)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-150764 advisory. Bouncy Castle BC 1.54 - 1.59, BC-FJA 1.0.0, BC-FJA 1.0.1 and earlier have a flaw in the Low-level interface to RSA key pair generator, specifically RSA Key Pairs...

EUVD-2026-118540

Improper handling of non-secure-world input in NSC veneer functions of NXP MCUXpresso SDK TrustZone-M examples trustzoneexamples, affecting versions through 26.06.00-lts and 26.09.00-pvw2, may allow a non-secure caller to supply unvalidated pointers or untrusted data, causing a timing side-channe...

CVE-2026-118785

Improper handling of non-secure-world input in NSC veneer functions of NXP MCUXpresso SDK TrustZone-M examples trustzoneexamples, affecting versions through 26.06.00-lts and 26.09.00-pvw2, may allow a non-secure caller to supply unvalidated pointers or untrusted data, causing a timing side-channe...

CVE-2026-118785 NXP MCUXpresso SDK TrustZone-M Examples before 26.06.01-lts Secure Memory Disclosure via NSC Veneer Functions

Improper handling of non-secure-world input in NSC veneer functions of NXP MCUXpresso SDK TrustZone-M examples trustzoneexamples, affecting versions through 26.06.00-lts and 26.09.00-pvw2, may allow a non-secure caller to supply unvalidated pointers or untrusted data, causing a timing side-channe...

CVE-2026-118785

Improper handling of non-secure-world input in NSC veneer functions of NXP MCUXpresso SDK TrustZone-M examples trustzoneexamples, affecting versions through 26.06.00-lts and 26.09.00-pvw2, may allow a non-secure caller to supply unvalidated pointers or untrusted data, causing a timing side-channe...

CVE-2026-118785 NXP MCUXpresso SDK TrustZone-M Examples before 26.06.01-lts Secure Memory Disclosure via NSC Veneer Functions

Improper handling of non-secure-world input in NSC veneer functions of NXP MCUXpresso SDK TrustZone-M examples trustzoneexamples, affecting versions through 26.06.00-lts and 26.09.00-pvw2, may allow a non-secure caller to supply unvalidated pointers or untrusted data, causing a timing side-channe...

PT-2026-137200

Name of the Vulnerable Software and Affected Versions VitaFit Android application versions prior to 2.8.1.0 Description Insecure session management allows the extraction or interception of unencrypted m session id tokens stored in application backups. These tokens remain valid for ten years,...

Malware in new-code-unlim-ited-jurassic-world-m-od-f-r-e-e-wuo1ky

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...