36103 matches found
EUVD-2026-108295
Incus from 7.3.0 before 7.5.0 contains a project restriction bypass that allows restricted project users to set block.createoptions through volume update, copy, and move operations. Attackers can set the option on a custom volume and trigger a copy or move onto a formatting pool to inject argumen...
cryptomator
Supporting Cryptomator Cryptomator is provided free of charge as an open-source project despite the high development effort and is therefore dependent on donations. If you are also interested in further development, we offer you the opportunity to support us: One-time or recurring donation via...
Arti Mobile - Tor in Rust for Android and iOS
Arti Mobile: Tor in Rust for Android and iOS The official Arti Mobile library, supported by Tor Project, bringing the new Tor Rust runtime to mobile devices. This is a shared project for exposing a standard API for Tor Arti to Android and iOS applications. This was based on the following projects...
jscpwn
CVE-2016-4622 PoC exploit for CVE-2016-4622. Find a detailed writeup of the bug on phrack...
byob
Questions? Check out the docs or join our Discord support server Disclaimer : This project should be used for authorized testing or educational purposes only. BYOB is an open-source post-exploitation framework for students, researchers and developers. It includes features such as: Command & contr...
gitlab-SSRF-redis-RCE
gitlab-SSRF+CRLF-Redis-RCE GitLab 11.4.7 SSRF+CRLF Injection Combined with Redis Remote Code Execution 0x00 Vulnerability environment root@kali: cd gitlab-docker root@kali: docker-compose up -d root@kali: docker ps -a CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES cf8c38aef669...
LinuxForensics
Linux Forensics Everything related to Linux Forensics Note: for better navigation, please visit the repo's main page here Index Talks Workshops Current Team Members: Ali Hadi, Twitter Mariam Khader, Twitter, 2019 - present Alayna Cash, Linux GUI Environments, 2022 - present Tom Claflin, Twitter,...
CsWhispers
CsWhispers Source generator to add D/Invoke and indirect syscall methods to a C project. Quick Start Add the latest NuGet package to your project and allow unsafe code. Exe net481 enable enable 12 true true Create a file in your project called CsWhispers.txt and set its build action properties to...
CVE-2021-41579-LCDS-LAquis-SCADA-4.3.1.1085-Arbitrary-File-Write
LAquis SCADA Arbitrary File Write 👨💻 Author Mohammed Idrees Banyamer 🐦 Instagram: @banyamersecurity Proof-of-Concept exploit for CVE-2021-41579 - Arbitrary file write via malicious .els project file in LCDS LAquis SCADA ≤ 4.3.1.1085. 🚨 Vulnerability Description CVE-2021-41579 is a client-side...
npcap
Npcap Npcap is a packet capture and injection library for Windows by the Nmap Project. It is a complete update to the unmaintained WinPcap project with improved speed, reliability, and security. Documentation The complete documentation for Npcap is available in the Npcap Guide on npcap.com. There...
Benchmark
The OWASP Benchmark project GitHub repository has moved. There is now a new GitHub organization for OWASP Benchmark at: https://github.com/OWASP-Benchmark and what was https://github.com/OWASP/Benchmark is now: https://github.com/OWASP-Benchmark/BenchmarkJava Over time, additional subprojects are...
userefuzz
User-Agent , X-Forwarded-For and Referer SQLI Fuzzer made with python Works onlinux and unix based systems Legal Disclaimer Usage of userefuzz for attacking targets without prior mutual consent is illegal. It is the end user's responsibility to obey all applicable local, state and federal laws...
CVE-2024-23298.app
PoC for CVE-2024-23298 Just open Xcode 15.2 and clone this project...
CVE-2025-5548
🛡️ Research and Exploitation: CVE 2025-5548 This is the main repository where I document my progress in the analysis of CVE 2025-5548. In this space I record each phase of the process: from lab preparation to final exploit development. 📂 Repository Structure Below is the organization of the...
heaplens
🔎 Heaplens CMPT733 Cybersecurity Lab II Project 📂 Repo Structure . ├── README.md ├── heaplens.png ├── heaplens.py ├── logs │ ├── sudoedit-.txt │ └── ... └── tests ├── Makefile ├── env-in-heap └── ... README.md: right here! heaplens.py: the main script logs/: contains some sample logs we...
CVE-2026-115373
The container management platform Incus is vulnerable to a missing authorization flaw in the GET /1.0/operations/{uuid} endpoint. Affected versions include versions before 6.0.7, 6.1.0 before 7.0.2, and 7.1.0 before 7.5.0. This vulnerability allows project-restricted clients to access operations ...
CVE-2026-115372
Incus versions 7.3.0 through 7.4.x contain a project restriction bypass vulnerability. This flaw allows restricted project users to manipulate the block.create_options via volume update, copy, or move operations. By setting specific options on a custom volume and triggering a copy or move onto a ...
Grafiki
Grafiki Grafiki is a Django project about Sysmon and graphs, for the time being. In my opinion EventViewer, Elastic and even Kibana, are not graphic enough. The current threats are complicated and if attackers think in graphs, defenders also must do it. This is a proof of concept, the code was no...
aleph
.. epigraph:: Truth cannot penetrate a closed mind. If all places in the universe are in the Aleph, then all stars, all lamps, all sources of light are in it, too. -- The Aleph , Jorge Luis Borges ⚠️ PROJECT STATUS: SUNSETTING ⚠️ Our involvement with this open-source project is being sunsetted...