Triage-CVE-2017-0144

Triage: CVE-2017-0144 EternalBlue / SMBv1 — associated with WannaCry spread For this lab, the goal was to triage another well-known real-world vulnerability, this time EternalBlue, the SMBv1 flaw that was famously exploited by the WannaCry ransomware outbreak. Step 1: Open the CVE in NVD I went t...

Security Bulletin: A vulnerability within WebSphere Application Server Liberty, affect IBM Tivoli Monitoring.

Summary A vulnerability within KCCI WebSphere Liberty Server which is included as part of IBM Tivoli Monitoring ITM portal server have been addressed. Vulnerability Details CVEID:CVE-2025-36047 DESCRIPTION: IBM WebSphere Application Server Liberty 18.0.0.2 through 25.0.0.8 is vulnerable to a deni...

CVE-2025-49493

Akamai CloudTest XXE Exploit CVE-2025-49493 Overview This is a Python-based exploit for CVE-2025-49493 , which affects Akamai CloudTest versions before 60 2025.06.02 12988. The vulnerability allows for XML External Entity XXE injection through the SOAP service endpoint. Vulnerability Details CVE ...

Triage-CVE-2021-44228-Log4Shell-Log4j-

Triage: CVE-2021-44228 Log4Shell / Log4j For this lab, the goal was to triage another well-known real-world vulnerability, Log4Shell, one of the most widely exploited vulnerabilities in recent years due to how common the affected library was across enterprise software. Step 1: Open the CVE in NVD...

Security Bulletin: A vulnerability within WebSphere Application Server Liberty, affect IBM Tivoli Monitoring.

Summary A vulnerability within KCCI WebSphere Liberty Server which is included as part of IBM Tivoli Monitoring ITM portal server have been addressed. Vulnerability Details CVEID:CVE-2025-14923 DESCRIPTION: IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.2 IBM WebSphere...

CVE-2025-55182-POC

CVE-2025-55182 POC & Detection Collection of exploit and detection tools for React Server Components RSC Unsafe Deserialization vulnerability Vulnerability Information CVE-ID : CVE-2025-55182 Affected Versions : React 19.x, Next.js 15.x/16.x when using App Router Attack Vector : RCE via prototype...

two-dots-and-a-slash-cve-2026-18907-tecno-hi-browser-download-path-traversal

CVE-2026-18907 — Path Traversal in TECNO Hi Browser Download Handler Proof-of-concept for CVE-2026-18907 CVSS 7.5 High, CWE-23, a relative path-traversal vulnerability in the download file feature of TECNO Hi Browser com.talpa.hibrowser version 2.23.1.1. The browser trusted an attacker-controlled...

CVE-2020-12712

CVE-2020-12712: SOS JobScheduler decryption of stored password The script in this repository allows you to decrypt the passwords stored in the SFTP configuration file for a JobScheduler instance. Description SOS JobScheduler is a tool for remote system administration that allows users to call...

CVE-2026-10036-speechbrain-rce

CVE-2026-10036: SpeechBrain Arbitrary Code Execution via CKPT.yaml Parsing Severity: High, CVSS 4.0 8.7 , CVSS 3.1 8.8 assigned by VulnCheck, the CNA Vector v4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N Vector v3.1: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected:...

CVE-2022-46169

CVE-2022-46169 — Cacti 1.2.22 Unauthenticated Command Injection Field| Details ---|--- Product| Cacti Affected version| 1.2.22 Vulnerability| Unauthenticated OS command injection CVE| CVE-2022-46169 CWE| CWE-77 — Command Injection Severity| Critical CVSS v3.1| 9.8 Attack vector| Network...

fastjson-cve

CVE-2026-16723 Reproduction Project Overview This project reproduces CVE-2026-16723 — a critical Remote Code Execution RCE vulnerability in fastjson 1.2.68 through 1.2.83. The vulnerability allows RCE under default configuration without requiring AutoType enablement or pre-existing classpath...

project_bias

projectbias A high-performance, bias-free cryptographic stream engine written in Ada and formally verified with SPARK. The engine guarantees zero statistical bias when mapping raw entropy into custom alphabets by discarding modulo-biased values, drawing security bytes directly from native OS kern...

proxmark3

Deprecated Iceman fork THIS FORK HAS BEEN DEPRECATED, USE RRG/ICEMAN REPO INSTEAD! Ref: Proxmark3 RDV4.0 github repository The RRG/Iceman repo is based upon this repo. Much development has been put into the RRG repo to bring support to all new hardware features. The repo fully support all of them...

K000163638: Linux kernel vulnerability CVE-2026-46181

Security Advisory Description In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx4: Fix mis-use of RCU in mlx4srqevent Sashiko points out the radixtree itself is RCU safe, but nothing ever frees the mlx4srq struct with RCU, and it isn't even accessed within the RCU critic...

scripts-nse

What is it? Some NSE scripts to search information from routers. The author of this scripts are VicenDominguez. He found the 0-Day on Huawei I only modified for two others. The author of this script is not responsible for its use. Huawei HG253s v2 Vodafone-Spain is starting to rent a new Huawei...

acunetix_0day

Acunetix 0day RCE - SYSTEM Acunetix 0day RCE Usage Run script with dzonerzy:dvm dzonerzy$ python /Users/dzonerzy/PycharmProjects/natbypass/acu0day.py 9999 172.16.24.1 Acunetix WVS 10 - SYSTEM Remote Command Execution Daniele Linguaglossa Payload: Meterpreter reverse TCP 4444 Exploit started on po...

pyload-ng: getUserData/get_userdata exposed at Perms.ANY allow any authenticated account to brute-force the administrator password

Summary Api.getUserData legacy and Api.getuserdata are declared with @permissionPerms.ANY and are reachable at /api/getUserData and /api/getuserdata. Because Perms.ANY == 0 and pyLoad's permission check is a bitmask AND, that gate is a no-op: every authenticated account passes, including one...

GHSA-68W4-83FH-F2W8 pyload-ng: getUserData/get_userdata exposed at Perms.ANY allow any authenticated account to brute-force the administrator password

Summary Api.getUserData legacy and Api.getuserdata are declared with @permissionPerms.ANY and are reachable at /api/getUserData and /api/getuserdata. Because Perms.ANY == 0 and pyLoad's permission check is a bitmask AND, that gate is a no-op: every authenticated account passes, including one...

pyLoad: Rate-Limit Bypass and Audit-Log Spoofing via Trusted Client-Controlled `X-Forwarded-For` Header

Summary pyLoad determines the "client IP" used for its rate-limiting decorator and for its security/audit logging by reading the client-supplied X-Forwarded-For XFF HTTP header and taking the leftmost value. No trusted-proxy configuration exists the Cheroot WSGI server faces clients directly, and...

GHSA-9Q47-3CM2-2RP8 pyLoad: Rate-Limit Bypass and Audit-Log Spoofing via Trusted Client-Controlled `X-Forwarded-For` Header

Summary pyLoad determines the "client IP" used for its rate-limiting decorator and for its security/audit logging by reading the client-supplied X-Forwarded-For XFF HTTP header and taking the leftmost value. No trusted-proxy configuration exists the Cheroot WSGI server faces clients directly, and...