CVE-2021-25461

CVE-2021-25461 Este es un repositorio con la Prueba de Concepto para el CVE descubierto para el artículo SAUSAGE Security Analysis of Unix domain Socket usAGE in Android que fue aceptado en EuroS&P 2022. Trabajé en este artículo con Mounir Elgharabawy, la persona que descubrió la vulnerabilidad y...

xmap

XMap: The Internet Scanner XMap is a fast network scanner designed for performing Internet-wide IPv6 & IPv4 network research scanning. XMap is reimplemented and improved thoroughly from ZMap and is fully compatible with ZMap, armed with the "5 minutes" probing speed and novel scanning techniques...

Awesome-MoAI-Security

Awesome Mobile On-Device AI Security SoK: Attack and Defense Landscape of Mobile On-device AI Systems Mobile on-device AI systems execute AI models locally through ML frameworks such as LiteRT/TFLite , Core ML , ExecuTorch , ONNX , and hardware-backed accelerators. This repo tracks the security...

papers-we-love

Papers We Love PWL is a community built around reading, discussing and learning more about academic computer science papers. This repository serves as a directory of some of the best papers the community can find, bringing together documents scattered across the web. You can also visit the Papers...

Awesome-LLM4Cybersecurity

When LLMs Meet Cybersecurity: A Systematic Literature Review 🔍 Explore 756+ Papers Across 11 Research Categories 📊 RQ1: Domain LLMs | 🎯 RQ2: Applications | 🤖 RQ3: Future Directions Updates 📆2026-06-15 We have updated the related papers up to 2026/06/15 , with 108 new papers added. 📆2026-02-09 We...

Purdue-Model-for-Industrial-Control-System-Environments

Modelo Purdue para entornos de Sistemas de Control Industrial ICS Turco Este artículo de investigación ya se publicó anteriormente y también puede encontrar la versión original en .pdf aquí...

PrecIR

PrecIR Colección de herramientas de software y hardware, su código fuente y archivos de diseño para comunicarse con etiquetas electrónicas de estantería basadas en infrarrojos. Vea http://furrtek.free.fr/index.php?a=esl para la ingeniería inversa del sistema, el protocolo y la electrónica. Gracia...

CVE-2015-2546-Exploit

CVE-2015-2546-Exploit Mi artículo sobre CVE-2015-2546: http://bobao.360.cn/learning/detail/3184.html Mi blog: http://whereisk0shl.top...

CVE-2018-17463

CVE-2018-17463 CVE-2018-17463 の動作するエクスプロイトを娯楽目的で完成させました。 このバグに関する元のライトアップはこちらにあります: http://phrack.org/papers/jitexploitation.html。私はこの任意読み書きを完全に動作するエクスプロイトに変更したいと思っただけです。 また、以下の論文からJITスプレー技術を学びました。興味深い内容です。 root@kitploit: @inproceedingsgawlik2018sok, title=Sok: Make jit-spray great again,...

CVE-2014-1767-EXP-PAPER

Este repositorio no tiene un README...

GreyEnergy-Mini-Module-Malware-Analysis

GreyEnergy Mini Module Malware Analysis Turkish This research paper has already been published before and you can also find the original .pdf version at here...

maritime-security-paper

Maritime Security Research Paper Comprehensive research on security vulnerabilities in autonomous maritime vessels and defense recommendations 📄 Overview This repository contains the complete maritime security research paper, documentation, and supplementary materials for academic publication and...

cve-2021-44228-minecraft-poc

CVE-2021-44228 en Minecraft Java 16 Paper server build 397 Minecraft 1.17.1 Explotación En Java 16, solo los ataques de deserialización funcionan por defecto usando log4j. Para explotar esto, debe haber una clase serializable vulnerable en el classpath. En el estado actual de este repositorio, el...

MAL-2026-15542 Malicious code in paper-password-input (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a97853ce25938b0cc295a798fa8c9ae8ab513126e70b93084785636a91bc7ec4 package.json declares a dependency whose key equals the package's own name paper-password-input and whose value is a bare HTTPS URL,...

Malicious code in paper-password-input (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a97853ce25938b0cc295a798fa8c9ae8ab513126e70b93084785636a91bc7ec4 package.json declares a dependency whose key equals the package's own name paper-password-input and whose value is a bare HTTPS URL,...

CVE-2026-19292

The CVE-2026-19292 entry describes a Bluetooth re-pairing flow where pairing with a legitimate device can switch to a lower security level than before, making brute-force attempts on the Long-Term Key (LTK) easier. The issue is documented with CVSS 3.1 base metrics (8.8, HIGH) and an adjacent att...

CVE-2026-8793

PaperCut NG/MF does not properly restrict excessive authentication attempts within its login component. An unauthenticated remote attacker can exploit this vulnerability to perform unrestricted brute-force or credential-stuffing attacks without triggering account lockout or rate-limiting mechanis...

CVE-2026-24727

An unrestricted upload of file with dangerous type vulnerability in the e-paper draft upload function of SUNNET Corporate Training Management System through v10.3 allows remote authenticated users with administrator privileges to execute arbitrary commands by uploading a crafted ZIP archive...

EUVD-2026-48530

An unrestricted upload of file with dangerous type vulnerability in the e-paper draft upload function of SUNNET Corporate Training Management System through v10.3 allows remote authenticated users with administrator privileges to execute arbitrary commands by uploading a crafted ZIP archive...

CVE-2026-24727 SUNNET Corporate Training Management System - Unrestricted Upload of File with Dangerous Type

An unrestricted upload of file with dangerous type vulnerability in the e-paper draft upload function of SUNNET Corporate Training Management System through v10.3 allows remote authenticated users with administrator privileges to execute arbitrary commands by uploading a crafted ZIP archive...