security-portfolio

Skyler M. — Security Portfolio IT Infrastructure & Security Engineer · Offensive security · Detection engineering · Vendor risk USMC veteran · Sole IT & security owner for a 200-user firm across 23 states · Top 2% on TryHackMe LinkedIn · GitHub @Mitsu-bis · HackerOne · TryHackMe · Resume I'm a US...

CVE-2012-5960-PoC

CVE-2012-5960-PoC CVE-2012-5960, CVE-2012-5959 Proof of Concept 隨手記錄一下最近玩的東西。 !/usr/bin/python2 -- coding: utf-8 -- Usage: python2 libupnpDoSPoC.py import socket TARGET = 'TARGETIP' ''' normaltraffic = \ 'M-SEARCH HTTP/1.1\r\n' \ 'HOST:239.255.255.250:1900\r\n' \ 'MX:3\r\n' ...

CVE-2021-33959

CVE-2021-33959 It can be seen that Plex service listens to the four udp ports 32410, 32412, 32413 and 32414. Through the analysis of the attack payload and using the message format of the device query request for reference, we write software to send udp packets with the attack payload of M-SEARCH...

CVE-2025-5964-

CVE‑2025‑5964 Path Traversal PoC for M‑Files Author: Byte Reaper Telegram: @ByteReaper0 Overview This repository contains a Proof‑of‑Concept PoC in C for a suspected Path Traversal vulnerability in M‑Files version 25.6.14925.0. The PoC file exploit.c attempts to read sensitive files e.g...

cve-2026-25676

CVE-2026-25676 Research DLL Search Path Hijacking in M-Track Duo HD Installer Overview This repository contains initial research and a proof-of-concept related to CVE-2026-25676, a DLL search path hijacking vulnerability affecting the installer of M-Track Duo HD 1.0.0. The goal of this project is...

CVE-2026-98994 statmount: read the parent of an unmounted mount under mount_lock

In the Linux kernel, the following vulnerability has been resolved: statmount: read the parent of an unmounted mount under mountlock statmountmntbasic reads the ids of the parent through m-mntparent with namespacesem held for reading. That's fine for a mount that is in a namespace. Everything abo...

GHSA-5588-RP99-5FJH Moov signedxml: Unauthenticated denial of service in exclusive XML canonicalization

Exclusive XML canonicalization http://www.w3.org/2001/10/xml-exc-c14n in github.com/moov-io/signedxml copied the entire accumulated namespace map at every node during ValidateReferences, before any reference digest or signature check. For a chain of nested elements that each declare many unused...

M-Botnet

M-Botnet Disclaimer1: This tool is used for educational purposes ONLY! Disclaimer2: I wrote this a long time ago, so do not judge my coding skills :D A basic botnet project. It's a C2 that controls a worm. The worm can self-propagate to spread around the network using MS17-010 vuln. To defeat thi...

EUVD-2026-104600

The OSDP Control Panel reply parser cpdecoderesponse in subsys/mgmt/osdp/src/osdpcp.c decodes replies from a Peripheral Device into a stack-allocated struct osdpevent. For the REPLYKEYPPAD and REPLYRAW reply types, the payload length is taken from the received frame and the only validation...

Malware in avail-able-albu-m-down-load-9815-young-americans-vygt4-atskbj

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in avail-able-albu-m-down-load-almanac-tdedm-bajrnj

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in avail-able-albu-m-down-load-6807-yo-bum-rush-the-show-tq11q-lqcaye

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious Package

Overview avail-able-albu-m-down-load-9815-young-americans-vygt4-atskbj is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection...

Malicious Package

Overview avail-able-albu-m-down-load-6807-yo-bum-rush-the-show-tq11q-lqcaye is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connecti...

Malicious Package

Overview avail-able-albu-m-down-load-almanac-tdedm-bajrnj is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that...

CVE-2026-107424

Incorrect Privilege Assignment vulnerability in M A Vinoth Kumar Frontend Dashboard frontend-dashboard allows Privilege Escalation.This issue affects Frontend Dashboard: from n/a through 3.0.7...

CVE-2026-107424 WordPress Frontend Dashboard plugin <= 3.0.7 - Privilege Escalation vulnerability

Incorrect Privilege Assignment vulnerability in M A Vinoth Kumar Frontend Dashboard frontend-dashboard allows Privilege Escalation.This issue affects Frontend Dashboard: from n/a through 3.0.7...

CVE-2026-107424

The Frontend Dashboard plugin for WordPress (versions up to and including 3.0.7 ) is affected by an Incorrect Privilege Assignment vulnerability (CWE-266). This flaw allows for Privilege Escalation , potentially granting an attacker elevated permissions. No specific exploit information or remedia...

EUVD-2026-101013

Incorrect Privilege Assignment vulnerability in M A Vinoth Kumar Frontend Dashboard frontend-dashboard allows Privilege Escalation.This issue affects Frontend Dashboard: from n/a through 3.0.7...

CVE-2026-107424: Incorrect Privilege Assignment

Incorrect Privilege Assignment vulnerability in M A Vinoth Kumar Frontend Dashboard frontend-dashboard allows Privilege Escalation.This issue affects Frontend Dashboard: from n/a through 3.0.7...