CVE-2023-6634

CVE-2023-6634 Exploit Script Description This repository contains a Python script designed to exploit the CVE-2023-6634 vulnerability found in the LearnPress plugin for WordPress, versions up to and including 4.2.5.7. The vulnerability allows for remote code execution RCE due to improper input...

hexora

hexora Hexora is a static analysis tool designed to detect malicious and harmful patterns in Python code. It combines a rule-based static analysis engine with a machine-learned model that scores entire source files to classify them as malicious or benign. It can be used to: Audit project...

metasm

Metasm, the Ruby assembly manipulation suite sample scripts in samples/ -- read comments at the beginning of the files all files are licensed under the terms of the LGPL Author: Yoann Guillot Basic overview: Metasm allows you to interact with executables formats ExeFormat: PE, ELF, Mach-O,...

CVE-2006-3392

CVE-2006-3392 Description Webmin before 1.290 and Usermin before 1.220 calls the simplifypath function before decoding HTML, which allows remote attackers to read arbitrary files, as demonstrated using "..%01" sequences, which bypass the removal of "../" sequences before bytes such as "%01" are...

DetectPacket-CVE-2017-8464

Building a Vulnerability Detection Application for CVE-2017-8464 Source click here CONTENTS: PART 1: OVERVIEW OF CVE-2017-8464 1. CONCEPT OF LNK FILE 2. CREATING A SYSTEM VULNERABLE TO CVE-2017-8464 3. TOOLS FOR EXPLOITING CVE-2017-8464 PART 2: USING METASPLOIT TO EXPLOIT CVE-2017-8464 2.1...

hermes-decomp

Rust decompiler for Hermes bytecode .hbc, the JS engine behind React Native. Supports HBC 40 to 99. Install Pre-built binaries Linux / macOS / Windows from Releases or Actions: Asset suffix| Platform ---|--- linux-x8664 / linux-arm64| Linux macos-arm64 / macos-x8664| macOS windows-x8664| Windows...

WhisperPair

WhisperPair: Testing Harness for Google Fast Pair A practical tool to test whether Google Fast Pair devices are vulnerable to pairing, account-binding, and protocol-level attacks. This repository provides the WhisperPair testing harness, a tool for evaluating the security of Google Fast Pair...

RTOS-F-16-Exploit---CVE-2019-7711

Green Hills INTEGRITY RTOS F-16 Exploit - CVE-2019-7711 Full Format String Exploitation Chain Realistic Ground Maintenance Attack on F-16 Avionics 📋 Description This repository contains a Proof of Concept PoC for CVE-2019-7711 — a Format String vulnerability in the Interpeak IPCOMShell TELNET...

CVE-2026-112079 hankcs HanLP torch_util.py load_word2vec_as_vocab_tensor deserialization

A vulnerability has been found in hankcs HanLP up to 2.1.0-beta.64. The affected element is the function loadword2vecasvocabtensor of the file hanlp/utils/torchutil.py. The manipulation of the argument vectors.vocab leads to deserialization. The attack is possible to be carried out remotely. The...

CVE-2026-112079

A vulnerability has been found in hankcs HanLP up to 2.1.0-beta.64. The affected element is the function loadword2vecasvocabtensor of the file hanlp/utils/torchutil.py. The manipulation of the argument vectors.vocab leads to deserialization. The attack is possible to be carried out remotely. The...

CVE-2026-112079 hankcs HanLP torch_util.py load_word2vec_as_vocab_tensor deserialization

A vulnerability has been found in hankcs HanLP up to 2.1.0-beta.64. The affected element is the function loadword2vecasvocabtensor of the file hanlp/utils/torchutil.py. The manipulation of the argument vectors.vocab leads to deserialization. The attack is possible to be carried out remotely. The...

EUVD-2026-104067

A vulnerability has been found in hankcs HanLP up to 2.1.0-beta.64. The affected element is the function loadword2vecasvocabtensor of the file hanlp/utils/torchutil.py. The manipulation of the argument vectors.vocab leads to deserialization. The attack is possible to be carried out remotely. The...

CVE-2026-112079

The hankcs HanLP library (up to version 2.1.0-beta.64 ) contains a remote deserialization vulnerability in the load_word2vec_as_vocab_tensor function located in hanlp/utils/torch_util.py . The flaw exists because the vectors.vocab argument can be manipulated to trigger deserialization of untruste...

CVE-2026-112079 hankcs HanLP torch_util.py load_word2vec_as_vocab_tensor deserialization

A vulnerability has been found in hankcs HanLP up to 2.1.0-beta.64. The affected element is the function loadword2vecasvocabtensor of the file hanlp/utils/torchutil.py. The manipulation of the argument vectors.vocab leads to deserialization. The attack is possible to be carried out remotely. The...

Multiple vulnerabilities in IBM Java SDK affect AIX

IBM SECURITY ADVISORY First Issued: Mon Oct 19 04:45:00 CDT 2026 The most recent version of this document is available here: https://aix.software.ibm.com/aix/efixes/security/javaoct2026advisory.asc Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect AIX...

bread

🍞 BREAD BREAD BIOS Reverse Engineering & Advanced Debugger is an 'injectable' real-mode x86 debugger that can debug arbitrary real-mode code on real HW from another PC via serial cable. Introduction BREAD emerged from many failed attempts to reverse engineer legacy BIOS. Given that the vast...

SilentButDeadly

SilentButDeadly Overview SilentButDeadly is a network communication blocker specifically designed to neutralize EDR/AV software by preventing their cloud connectivity using Windows Filtering Platform WFP. This version focuses solely on network isolation without process termination. Blog:...

CVE-2024-10410

Source code Online Hotel Reservation System in PHP/MySQLi with Source Code | SourceCodester Description A high risk vulnerability was found in Online Hotel Reservation System, affecting the upload function of /marimar/admin/modroom/controller.php file. The bypass detection operation of image...

CVE-2024-57376

CVE-2024-57376 Pre-auth remote code execution exploit for D-Link DSR-250 and DSR-250N Security advisory: https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10415 Usage $ python3 exploit.py usage: Example $ python3 exploit.py 192.168.1.1 443 id + fingerprint device: DSR-250...

CVE-2025-30921

CVE-2025-30921 1️⃣ Component type WordPress plugin 2️⃣ Component details Component name Newsletters Vulnerable version = 4.9.9.7 Component slug newsletters-lite Component link https://wordpress.org/plugins/newsletters-lite/ 3️⃣ OWASP 2017: TOP 10 Vulnerability class A3: Injection Vulnerability type...