CVE-2025-32433

CVE-2025-32433 Erlang/OTP SSH RCE EXP Description A serious vulnerability has been identified in the Erlang/OTP SSH server that may allow an attacker to perform unauthenticated remote code execution RCE. By exploiting a flaw in SSH protocol message handling, a malicious actor could gain...

CVE-2023-44487-dos

CVE-2023-44487 HTTP/2 Rapid Reset There are some examples in this repo which are not tested completely to analyse the impact, but I just wanted to perform the concept of this attack starting many streams and immediately sending RSTSTREAM frame to avoid reaching MAXCONCURRENTSTREAMS. I use H2Space...

unrealircd-backdoor-pentest-report

🛡️ UnrealIRCd Backdoor Penetration Test A controlled penetration testing project focused on identifying, exploiting, and remediating the UnrealIRCd 3.2.8.1 backdoor CVE-2010-2075 in an isolated training environment. Disclaimer: This project was conducted strictly for educational and authorized...

oss

oss 中文 | English A cross-cloud object storage CLI based on the S3 protocol. One binary for all major providers: AWS S3, Aliyun OSS, Tencent COS, Huawei OBS, Baidu BOS, Kingsoft KS3, UCloud US3, JD Cloud OSS, Google Cloud Storage, Cloudflare R2, Scaleway, Wasabi, DigitalOcean Spaces, Yandex,...

wiremax

wiremax A Wireshark/tshark dissector for Ubiquiti AirMAX AC + M and the companion Mikrotik / RouterBoard vendor Information Elements, written in Lua. It is the over-the-wire counterpart to pyrmax: the decode logic mirrors that Python package field-for-field. The AC packet format was...

Follina_MSDT_CVE-2022-30190

Microsoft explains that “a remote code execution vulnerability exists when MSDT is called using the URL protocol from a calling application such as Word. An attacker who successfully exploits this vulnerability can run arbitrary code with the privileges of the calling application. The attacker ca...

test-certs-site

test-certs-site Introduction This is a purpose-built webserver for hosting the test pages required by the CA/Browser forum Baseline Requirements. They contain the following requirement: The CA SHALL host test Web pages that allow Application Software Suppliers to test their software with Subscrib...

CVE-2025-55182-exp

CVE-2025-55182-exp 🔥 Overview CVE-2025-55182 is a critical Remote Code Execution RCE vulnerability in React Server Components RSC affecting Next.js applications using App Router with Server Actions. The vulnerability exists in the Flight protocol deserialization process, allowing attackers to...

CVE-2026-109242

A flaw was found in FreeRDP. A malicious Remote Desktop Protocol RDP server can exploit this vulnerability by sending a crafted sequence of progressive display tile updates to a connecting client. Because decompression buffers are allocated without being initialized, processing these updates can...

CVE-2026-109257

A flaw was found in FreeRDP. A remote attacker using a specially crafted Remote Desktop Protocol RDP client can request NSCodec compression with large display dimensions to trigger a memory allocation failure on the server. Because the server fails to properly clear memory pointers during error...

CVE-2026-109254

A flaw was found in FreeRDP. A use-after-free vulnerability allows a malicious Remote Desktop Protocol RDP server to cause a Denial of Service DoS by crashing the client. During static audio channel disconnection, audio data structures are released before the background playback thread finishes...

CVE-2026-109252

A flaw was found in FreeRDP. A malicious Remote Desktop Protocol RDP server can cause a Denial of Service DoS by sending truncated authentication data to a connecting client. During error handling of the incomplete response, the client attempts to access uninitialized memory, leading to an...

aimp

AIMP — AI Mesh Protocol An experimental, serverless networking protocol for resilient state synchronization between autonomous agents in fragmented, low-bandwidth networks. Built on Merkle-CRDTs and cryptographic identity — no central authority, no global DNS, always writeable. Papers | Version|...

zeek-spicy-stun

STUN Session Traversal Utilities for NAT STUN This is a Zeek protocol analyzer that detects STUN based on Spicy. You must install Spicy to use this package. This package will create two logs: stun.log - This log has every STUN message. stunnat.log - This log has NAT detections from mapped...

zeek-spicy-wireguard

zeek-spicy-wireguard This package provides a Spicy based Wireguard protocol analyzer for Zeek. You must install Spicy to use this package. This is a straightforward implementation following https://www.wireguard.com/protocol/ Wireguard Wireguard Logs separator \x09 setseparator , emptyfield empty...

UltraViolet

UltraViolet Self-hosted network discovery & search — your own Shodan, on your hardware. TCP/UDP scanning · 100 protocol probes · TLS/JARM fingerprints · CVE matching · full-text search · delta tracking · alerts Quick start · Features · Architecture · Documentation · Production Important. Scan onl...

logitech-ipc-protocol

logitech-ipc-protocol Reverse-engineered documentation of the Logi Options+ agent IPC protocol. Enables programmatic control of Logitech multi-host devices host switching, device queries without raw HID access, on both macOS and Windows. The protocol has not been publicly documented before this...

MK4001MTD-USB-Bridge

MK4001MTD USB Bridge RP2040 Pico firmware that bridges a Toshiba MK4001MTD 0.85" SDIO microdrive as a USB Mass Storage device. The MK4001MTD is a 4 GB Microdrive originally used in the Nokia N91 music phone and some other devices, like MP3 players or USB drives, back when flash storage was still...

refreshing-mcp-tool

This isn't really done or ready yet, but I wanted to get the code checked in. This basically implements F5's database protocol, "mcp", which operates through a UNIX domain socket. That means that you need a shell on the F5 device before you can use any of these. You'll typically forward the outpu...

CVE-2023-33246_RocketMQ_RCE_EXPLOIT

CVE-2023-33246 RocketMQ Remote Code Execution Exploit CVE-2023-33246 RocketMQ Remote Code Execution Exploit Overview RocketMQ is a distributed messaging and streaming platform. RocketMQ versions 5.1.0 and below are vulnerable to Arbitrary Code Injection. Broker component of RocketMQ is leaked on...