Q-DDOS-GUI

Q-DDOS-GUI 使用 C 编写的 DDOS，支持 TCP/HTTP/HTTPS 使用 C 编写的 DDOS 攻击工具。支持对 TCP、HTTP 和 HTTPS 协议发起攻击。可以设置随机超时（在指定秒数范围内）或固定超时。选择要使用的线程数。 勾选“全部停止”复选框以停止所有线程和进程。 我不对任何滥用行为负责。...

openqore

openqore an open-source toolkit to patch, modify, and enhance the firmware of headphones based on the BES chipsets originally started from the soundcore Q35, with future support for other models planned. note: this project is my personal journey into the world of hardware reverse-engineering and...

quantum

Shor算法用于ECDLP — Q-Day Prize提交 量子求解器，用于解决椭圆曲线离散对数问题（ECDLP），为Q-Day Prize Challenge by Project Eleven 构建。目标：在真实量子硬件上使用Shor算法恢复ECC私钥。 作者 : Giancarlo Lelli 联系方式 : [email protected] LinkedIn : https://www.linkedin.com/in/giancarlolelli 背景 :...

CVE-2025-64459-Poc

CVE-2025-64459：Django ORM SQL注入概念验证（PoC） 漏洞： 通过 QuerySet 和 Q 关键字参数解包导致的 SQL 注入。 CVE ID： CVE-2025-64459 发现者： Me Cyberstan 披露日期： 2025年11月5日 🚨 执行摘要 本仓库包含一个 Docker 化的概念验证（PoC），演示了 Django ORM 中的一个严重 SQL 注入漏洞 。 该漏洞存在于 Q 对象在实例化过程中处理关键字参数的方式。具体来说，内部的 connector 属性在通过字典解包（例如...

CVE-2024-27956-RCE

CVE-2024-27956-RCE CVE-2024-27956 的 PoC，ValvePress Automatic 插件中的 SQL 注入漏洞。该 PoC 利用此漏洞在目标站点中创建用户并赋予管理员权限。在 WordPress 中获得管理员权限可导致远程代码执行。 使用方法 git clone https://github.com/diego-tella/CVE-2024-27956-RCE/ cd CVE-2024-27956-RCE python exploit.py http://target.com Payloads 创建用户的 SQL 注入 payload： q=INSE...

CVE-2023-34598

Gibbon v25.0.0 - Inclusión de Archivos Locales - CVE-2023-34598 Gibbon v25.0.0 es vulnerable a una vulnerabilidad de Inclusión de Archivos Locales LFI donde es posible incluir el contenido de varios archivos presentes en la carpeta de instalación en la respuesta del servidor. Prueba de Concepto...

CVE-2020-18324

Subrion CMS 4.2.1 – Kickstart 模板中的反射型 XSS 漏洞 描述 Subrion CMS 易于安装且管理简单。可将其作为独立应用程序使用，或与其他应用程序结合，用于构建入门级、中型或大型网站。 在 Subrion CMS v.4.2.1 的 "Kickstart" 网页应用模板中，通过 "search" 组件发现了反射型跨站脚本（XSS）漏洞，该漏洞允许远程攻击者注入任意 JavaScript 代码。 日期 ：2022-02-22 软件链接 ：https://subrion.org 漏洞发现者 ：HaMM0nz CVE 编号 ：CVE-2020-18324 ...

CVE-2023-45542

CVE-2023-45542 Existe una vulnerabilidad de cross-site scripting XSS reflejado en el parámetro q de la función de búsqueda de mooSocial v3.1.8 que permite a los atacantes robar las cookies de sesión de los usuarios y suplantar su cuenta mediante una URL manipulada. Parámetro vulnerable: q Exploit...

CVE-2025-28121

💥 CVE-2025-28121 - XSS Reflejado en Online Exam Mastering System 1.0 📝 Descripción code-projects Online Exam Mastering System 1.0 es vulnerable a Cross-Site Scripting XSS Reflejado en el archivo feedback.php a través del parámetro q. Este problema permite a atacantes remotos inyectar JavaScript...

gps-sdr-sim

GPS-SDR-SIM GPS-SDR-SIM generates GPS baseband signal data streams, which can be converted to RF using software-defined radio SDR platforms, such as ADALM-Pluto, bladeRF, HackRF, and USRP. Windows build instructions 1. Start Visual Studio. 2. Create an empty project for a console application. 3. ...

craw

CRAW: Codec Robust Audio Watermarking Source code for CRAW , a robust audio watermarking method built on STFT-magnitude-domain embedding. An encoder embeds a binary message into an audio clip's magnitude spectrogram phase is preserved from the clean signal; a decoder recovers the message under a...

NFtables-IPtables-integration-script

🛡️ Q-Feeds Linux防火墙黑名单集成 用于Linux服务器的自动化恶意软件IP黑名单 — 支持nftables和iptables+ipset 📋 目录 快速开始 概述 工作原理 前提条件 详细安装指南 配置 使用和验证 故障排除 卸载 许可证 🚀 快速开始 步骤1: 获取API令牌 在 tip.qfeeds.com 获取免费API密钥。 步骤2: 下载脚本bash git clone https://github.com/Q-Feeds/NFtables-IPtables-integration-script.git cd...

django-cve-2025-64459

Django CVE-2025-64459 Esta aplicación demuestra CVE-2025-64459 que afecta a múltiples versiones de Django. Esta vulnerabilidad ha sido corregida en versiones más recientes de Django. SQL Injection SQL Injection es cuando la entrada proporcionada por el usuario se trata como parte de una consulta...

CVE-2026-56096

CVE-2026-56096: Solr Query Injection & Blind Data Extraction in TYPO3 EXT:solr An architectural security vulnerability was discovered in the official TYPO3 Apache Solr extension EXT:solr / apache-solr-for-typo3/solr. The issue allows unauthenticated remote attackers to inject arbitrary Solr/Lucen...

RedTeamBrasil-CVE-2025-64459

connector-sqli Exploración automatizada de SQL Injection en el ORM de Django Q-object connector · CVE-2025-64459 🎥 canal RedTeam Brasil — seguridad ofensiva, en la práctica, en portugués. ██████╗ ████████╗██████╗ connector-sqli ██╔══██╗╚══██╔══╝██╔══██╗ Django Q connector SQLi ██████╔╝ ██║ ██████...

AZL-105329 CVE-2026-95519 affecting package rpm 4.18.2-2

A flaw was found in rpm. An attacker can supply a crafted manifest file that, when processed by a user or automation using rpm -q -p or similar manifest-processing flows, leads to arbitrary code execution. This occurs because manifest entries are unexpectedly macro-expanded before being opened,...

CVE-2026-95519

A flaw was found in rpm. An attacker can supply a crafted manifest file that, when processed by a user or automation using rpm -q -p or similar manifest-processing flows, leads to arbitrary code execution. This occurs because manifest entries are unexpectedly macro-expanded before being opened,...

DEBIAN-CVE-2026-95519

A flaw was found in rpm. An attacker can supply a crafted manifest file that, when processed by a user or automation using rpm -q -p or similar manifest-processing flows, leads to arbitrary code execution. This occurs because manifest entries are unexpectedly macro-expanded before being opened,...

EUVD-2026-85877

A flaw was found in rpm. An attacker can supply a crafted manifest file that, when processed by a user or automation using rpm -q -p or similar manifest-processing flows, leads to arbitrary code execution. This occurs because manifest entries are unexpectedly macro-expanded before being opened,...

CVE-2026-96772

A security flaw has been discovered in Intelliants Subrion CMS up to 4.2.1. This affects an unknown part of the file /actions.json?action=assign-owner. The manipulation of the argument q results in information disclosure. The attack can be executed remotely. The exploit has been released to the...