VMProtect-devirtualization

VMProtect Devirtualization An experimental dynamic approach to devirtualize pure functions protected by VMProtect 3.x TL;DR Introduction The approach Example 1: A simple bitwise operation protected Example 2: A MBA operation protected Example 3: More than one basic block Conclusion and limitation...

plasma

PLASMA The old project name was Reverse. PLASMA is an interactive disassembler. It can generate a more readable assembly pseudo code with colored syntax. You can write scripts with the available Python api see an example below. The project is still in big development. wiki : TODO list and some...

RCE-in-Spring-Cloud-CVE-2022-22963

Exploit for RCE in Spring Cloud CVE 2022-22963 Exploit for CVE-2022-22963 remote command execution in Spring Cloud Function See for details about the vulnerability here and here PoC Run the netcat on your host: $ nc -lvnp 9001 Run the exploit example with default port 9001 on attacker host: $...

OutlookNTLM_CVE-2023-23397

To exploit this vulnerability, an attacker must create a malicious calendar invitation that includes a reference to a sound file pointing to a file in a network share in the attacker's machine. At a low level, an Outlook email stores the reference to the sound file in an internal parameter called...

CVE-2024-3094

CVE-2024-3094 CVE-2024-3094 exposed a backdoor in the XZ compression library, allowing remote SSH access by bypassing authentication. It’s a major supply chain attack affecting Linux systems, highlighting risks in trusted open-source components. The XZ Backdoor: A Supply‑Chain Threat that Reaches...

Virtuailor

Virtuailor - IDAPython tool for C++ vtables reconstruction Virtuailor is an IDAPython tool that reconstructs vtables for C++ code written for intel architecture, both 32bit and 64bit code and AArch64 New!. The tool constructed from 2 parts, static and dynamic. The first is the static part, contai...

Manipulating-Web-Agents

Manipulating Autonomous LLM-based Web Agents with Indirect Prompt Injection Attacks With the ubiquity of LLM-integrated applications, investigating potential security risks is crucial. One of the most significant vulnerabilities in these systems is their susceptibility to adversarial attack via...

CVE-2026-111997

ip-address before 10.7.4 allows a denial of service CPU consumption from quadratic complexity, and application stall via many % characters in input reaching a function call that uses the Address6 constructor...

CVE-2026-111868

A vulnerability was determined in datastax pulsar-jms up to 9.0.3. This issue affects the function decode of the file pulsar-jms/src/main/java/com/datastax/oss/pulsar/jms/messages/PulsarObjectMessage.java. This manipulation causes deserialization. It is possible to initiate the attack remotely. T...

ScheduleRunner

ScheduleRunner - A C tool with more flexibility to customize scheduled task for both persistence and lateral movement in red team operation Scheduled task is one of the most popular attack technique in the past decade and now it is still commonly used by hackers/red teamers for persistence and...

exploit-CVE-2016-10033

PHPMailer 5.2.18 Remote Code Execution PHPMailer is the world's most popular transport class, with an estimated 9 million users worldwide. Downloads continue at a significant pace daily. Used by many open-source projects: WordPress, Drupal, 1CRM, SugarCRM, Yii, Joomla! and many more PHPMailer...

CVE-2019-13498

CVE-2019-13498 Exploit Title: MITM - Missing HSTS causing credential theft and content manipulation Date: 07/10/2019 Exploit Author: Furqan Khan Vendor Homepage: https://www.oneidentity.com/ Software Link: https://www.oneidentity.com/products/cloud-access-manager/ Version: 8.1.3 Tested on: Kali...

CVE-2024-47533-Cobbler-XMLRPC-Authentication-Bypass-RCE-Exploit-POC

CVE-2024-47533 - Cobbler XMLRPC Authentication Bypass RCE Exploit ⚠️ Critical Remote Code Execution via Authentication Bypass in Cobbler 🛠️ PoC implementation by @dollarboysushil 💡 Overview Cobbler, a Linux installation server that enables rapid setup of network installation environments, has an...

SwishDbgExt

SwishDbgExt SwishDbgExt is a Microsoft WinDbg debugging extension that expands the set of available commands by Microsoft WinDbg, but also fixes and improves existing commands. This extension has been developed by Matt Suiche @msuiche – feel free to reach out on [email protected] ask for mor...

web3-decoder

Web3 Decoder Web3 Decoder is a Burp Suite Extension designed for analyzing blockchain operations and smart contract interactions. It processes JSON-RPC calls to Ethereum and compatible networks including Polygon, Arbitrum, BSC, and others Block explorers API Keys Most block explorers supported,...

CVE-2020-28018

CVE-2020-28018: Exim Use-after-free UAF leading to RCE Introduction There exists a Use-after-free UAF vulnerability in tls-openssl.c that allow remote unauthenticated attackers to corrupt internal memory data, thus finally achieving remote code execution. Primitives: Memory Leakage Arbitrary read...

CVE-2018-11686

CVE-2018-11686 CVE-2018-11686 - FlexPaper PHP Publish Service RCE = 2.3.6 found by Red Timmy Security Technical Analysis: https://www.exploit-db.com/docs/english/46521-flexpaper-=-2.3.6-remote-code-execution-whitepaper.pdf Security advisory: unknow Proof Of Concept: 1. Removing the config files T...

RCE-CVE-2024-7954

RCE-CVE-2024-7954 Description The porteplume plugin, utilized by SPIP versions prior to 4.30-alpha2 , 4.2.13 , and 4.1.16 , is susceptible to a critical arbitrary code execution RCE vulnerability. This flaw allows a remote, unauthenticated attacker to execute arbitrary PHP code as the SPIP user b...

Amsi-Bypass-Powershell

Sponsored by Amsi-Bypass-Powershell This repo contains some Antimalware Scan Interface AMSI bypass / avoidance methods i found on different Blog Posts. Most of the scripts are detected by AMSI itself. So you have to find the trigger and change the signature at the part via variable/function...

CVE-2026-36834

Summary An out-of-bounds array read exists in src/decoders/pana8.cpp. The function GetDBit can return the value 17 when no Huffman table match is found, but huffcoeff is declared with only 17 elements valid indices 0-16. This results in huffcoeff17 being accessed, triggering undefined behavior...