Oracle-WebLogic-CVE-2017-10271

Oracle-WebLogic-CVE-2017-10271 WebLogic wls-wsat RCE CVE-2017-10271 Vulnerability Description In the early days, hackers exploited the WLS component vulnerability of WebLogic to launch large-scale remote attacks against enterprise servers. A large number of enterprise servers were compromised, an...

Windows-WinSock-UAF-Mitigation

CVE-2026-68820: Windows WinSock afd.sys UAF Mitigation This repository contains a conceptual patch demonstrating the mitigation for CVE-2026-68820 , a critical Use-After-Free UAF vulnerability in the Windows Ancillary Function Driver for WinSock afd.sys. Active exploitation of this flaw allows a...

frida-il2cpp-datacollector

frida-il2cpp-datacollector Porting ce's monodatacollector to android/ios. Operation has been confirmed with CEVersion 7.4.2 or later. Usage initial setting Install python library. pip install pywin32 Fixing autorun/monoscript.luaSetup for CE to recognize Mono as valid 1comment out --local...

SyscallRevenant

Surpassing EDRs & AVs SyscallRevenant SyscallRevenant is a new method of performing clean indirect syscalls. The main component resolves System Service Numbers SSNs and syscall instruction addresses dynamically. This is done by enabling the trap flag during execution. The secondary component is...

DEBIAN-CVE-2026-112036

A vulnerability was detected in Artifex MuPDF up to 1.28.5. This impacts the function freecharlist of the file source/pdf/pdf-xref.c of the component Signature Locking. Performing a manipulation results in double free. The attack may be initiated remotely. The exploit is now public and may be use...

kernel: netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table()

A flaw was found in the Linux kernel's nfnetlinkcthelper component. This vulnerability, an out-of-bounds read, occurs in the nfnlcthelperdumptable function when a network connection tracking helper is removed during a dump operation, leading to a bypassed bounds check. A local attacker could...

kernel: ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo()

A flaw was found in the Linux kernel's handling of IPv6 extended headers. Specifically, the ipv6hopjumbo function, which processes jumbo payloads, can modify internal packet buffer skb pointers. However, the network header nh pointer is not recomputed after these modifications. This oversight cou...

CVE-2025-26794

CVE-2025-26794: Blind SQL injection in Exim 4.98 SQLite DBM - exploit writeup Exim report: https://www.exim.org/static/doc/security/CVE-2025-26794.txt I discovered this vulnerability through a manual code review. Vulnerability details: Issue The SQL parameters, when SQLite is used as the DBM, are...

majordomo-CVE-2026-27174-poc

majordomo-CVE-2026-27174-poc A proof-of-concept exploiting an unauthenticated remote code execution via the admin panel's PHP console feature in MajorDomo Major Domestic Module. Vulnerability MajorDoMo's admin panel exposes a PHP evaluation console via /admin.php. Due to a missing exit after an...

ldeep

============== Project Status .. image:: https://github.com/franc-pentest/ldeep/actions/workflows/python-test.yml/badge.svg :target: https://github.com/franc-pentest/ldeep/actions/workflows/python-test.yml :alt: Build status .. image:: https://badgen.net/pypi/v/ldeep :target:...

boko

boko Application Hijack Scanner for macOS boko.py is an application scanner for macOS that searches for and identifies potential dylib hijacking and weak dylib vulnerabilities for application executables, as well as scripts an application may use that have the potential to be backdoored. The tool...

DLLHSC

DLLHSC DLL Hijack SCanner - A tool to generate leads and automate the discovery of candidates for DLL Search Order Hijacking Index of this page Contents of this repository Modes of operation Compile and Run Guidance Help menu Example Runs Feedback Contents of this repository This repository hosts...

CVE-2025-70962

CVE-2025-70962 Use of Hard-coded Credentials in ZOSI C519M IP camera RTSP service Field| Value ---|--- CVE ID| CVE-2025-70962 Vendor| ZOSI Technology Product| ZOSI C519M smart IP camera also listed as model 1NC-519M Affected versions| Firmware V4.2.8.832C01450BA tested build; earlier versions not...

EUVD-2026-104259

A vulnerability was determined in satya-vinay Events-Management-System up to 437c77ceb69bf9fe2e3f4f46f7871b83f425383a. Affected is the function mysqliquery of the file doedit.php of the component Registration-Edit Handler. This manipulation of the argument...

CVE-2026-112141 satya-vinay Events-Management-System Registration-Edit doedit.php mysqli_query sql injection

A vulnerability was determined in satya-vinay Events-Management-System up to 437c77ceb69bf9fe2e3f4f46f7871b83f425383a. Affected is the function mysqliquery of the file doedit.php of the component Registration-Edit Handler. This manipulation of the argument...

CVE-2026-112141 satya-vinay Events-Management-System Registration-Edit doedit.php mysqli_query sql injection

A vulnerability was determined in satya-vinay Events-Management-System up to 437c77ceb69bf9fe2e3f4f46f7871b83f425383a. Affected is the function mysqliquery of the file doedit.php of the component Registration-Edit Handler. This manipulation of the argument...

CVE-2026-112141

The satya-vinay Events-Management-System is vulnerable to SQL injection in the Registration-Edit Handler component. The flaw exists in the mysqli_query function within the doedit.php file. Attackers can manipulate the id, name, title, year, gender, fromdate, todate, or people arguments to execute...

CVE-2021-4045

CVE-2021-4045 CVE-2021-4045 is a Command Injection vulnerability that allows Remote Code Execution in the TP-Link Tapo c200 IP camera. It affects all firmware versions prior to 1.1.16 Build 211209 Rel. 37726N due to insufficient checks on user input in uhttpd, which is one of the main binaries of...

ThemeBleedPy

A huge thanks to gabek for the initial PoC in C, and actually finding this CVE, this is a remake of his code in python, reusing his stage files. To see the initial PoC view his page for it here: https://github.com/gabe-k/themebleed ThemeBleedPy A proof of concept using python for the CVE-2023-381...

gftrace

gftrace A command line Windows API tracing tool for Golang binaries. Note: This tool is a PoC and a work-in-progress prototype so please treat it as such. Feedbacks are always welcome! How it works? Although Golang programs contains a lot of nuances regarding the way they are built and their...