Exploit for Deserialization of Untrusted Data in Microsoft

CVE-2022-41082 This repository contains a proof-of-concept P...

Exploit for OS Command Injection in Wago Compact_Controller_100_Firmware

WAGO-CVE-2023-1698 WAGO系统远程代码执行漏洞CVE-2023-1698 Attention...

Exploit for Stack-based Buffer Overflow in Netgear R6400_Firmware

Exploiting a Stack Buffer Overflow on the NETGEAR R6700v3 CVE...

Grab: Two-factor authentication bypass on Grab Android App

Description I found the endpoint using android app https://p.grabtaxi.com/api/passenger/v2/profiles/edit which allow me to bypass 2FA sms code due to lack of rate limiting\code expiration after unsuccessful attempts. The root cause of the problem it that facts: no rate limiting+ no code expiratio...

SkypeHide to Send secret messages into silence of Skype Calls

Polish Researchers have discovered a clever way to send secret messages during a phone call on Skype. We know that, by default skype calls use 256-bit advanced encryption, but researchers find that is not enough. So they find out this new way to communicate messages more secretly by using silence...