CVE-2021-43657

CVE-2021-43657 This is a reference/POC for CVE-2021-43657 This vulnerability was found when i was playing with the open source software which is responsible for Employee Task Management System...

CheatSheetSeries

Welcome to the OWASP Cheat Sheet Series Welcome to the official repository for the Open Worldwide Application Security Project® OWASP Cheat Sheet Series project. The project focuses on providing good security practices for builders in order to secure their applications. In order to read the cheat...

ULTIMATE-CYBERSECURITY-MASTER-GUIDE

🛡️ Ultimate Cybersecurity Master Guide Professional Cybersecurity Knowledge Base · Red Team · Blue Team · Purple Team A curated cybersecurity knowledge base with original guides, references and tools Abide by theLegal Terms of Use & Disclaimer for the use and misuse of this repository. "Under...

Digital-Forensics-Guide

Digital Forensics Guide A guide covering Digital Forensics the applications, libraries and tools that will make you a better and more efficient with Digital Forensics development. Note: You can easily convert this markdown file to a PDF inVSCode using this handy extension Markdown PDF. Table of...

defending-code-reference-harness

Defending Code Reference Harness A reference implementation for autonomous vulnerability discovery and remediation with Claude, based on our learnings from partnering with security teams at several organizations since launching Claude Mythos Preview. For a write up of these learnings along with...

CVE-2022-30190

CVE-2022-30190 Microsoft Office Word RCE Reproduction CVE-2022-30190 Vulnerability Overview MS Office docx files may contain external OLE object references as HTML files. There is an HTML scenario ms-msdt: that calls the msdt diagnostic tool, which is capable of executing arbitrary code specified...

NemoClaw

NVIDIA NemoClaw: Reference Stack for Sandboxed AI Agents in OpenShell NVIDIA NemoClaw is an open source reference stack for running supported AI agents more safely inside NVIDIA OpenShell sandboxes. It provides guided onboarding, managed inference, network policy, managed integrations,...

CVE-2022-30190

CVE-2022-30190 CVE-2022-30190 Follina POC Host exploit.html on localhost, port 80. Open the docx to pop calc. To change the remote address the doc points to, open in 7Z and edit word\rels\document.xml.rels to point to a new location. YOU MUST keep the exclamation mark. It will literally not run i...

cve-2026-49975-http2bomb_reproduction

CVE-2026-49975 HTTP/2 Bomb Complete Reproduction Guide Based on QiAnXin CERT Advisory + Calif Original Research ================================================================ I. Vulnerability Overview CVE-2026-49975 is a critical denial-of-service DoS vulnerability in HTTP/2 server and proxy...

MalwareConfigLists

MalwareConfigLists Just some lists of Malware Configs...

SpringBoot_Actuator_RCE

swagger-ui Interface /swagger-ui.html SpringBoot env: Obtaining Sensitive Information Masked with Part 1 When we directly visit the springboot site, we can see that some password fields are filled with 1. Plaintext fields can be obtained via $name 2. Misconfiguration leads to sensitive informatio...

move-vulnerability-database

Welcome to the Move Vulnerability Database MVD v3.0! A comprehensive collection of vulnerability patterns in the Move ecosystem. What's Inside Vulnerability Patterns - Categorized security issues with examples and severity ratings Appendix - Audit reports and protocol references Learning...

exploit_mitigations

Exploitation Mitigations The goal is to list exploitation mitigations added over time in various operating systems, software, libraries or hardware. It becomes handy to know if a given vulnerability is easily exploitable or not depending on exploitation mitigations in place. An example is the...

windows-api-function-cheatsheets

Windows API Function Cheatsheets Contact 🌨️ Snowcrash: [email protected] Table of Contents Windows API Function Cheatsheets File Operations Process Management Memory Management Thread Management Dynamic-Link Library DLL Management Synchronization Interprocess Communication Windows Hooks...

jsherp-user-info-idor

jshERP /user/info IDOR — VulDB submission package This repository contains a standalone VulDB-style advisory for an authenticated insecure direct object reference in jshERP. Product: jshERP Tested commit: ad6cf886dd4e0676723060a25d361c703dc56bc0 3.6-SNAPSHOT, GitHub master HEAD on 2026-09-04...

exploit-CVE-2016-7434

CVE-2016-7434 ntpd DOS exploit Ntpd suffer from a null pointer reference which is possible to trigger to crash the application. According to NTP.org, "If ntpd is configured to allow mrulist query requests from a server that sends a crafted malicious packet, ntpd will crash on receipt of that...

CVE-2025-55182

CVE-2025-55182 This vulnerability allows RCE in React Server Functions, e.g. as offered by Next.js through insecure prototype references. I'm not an expert in React or Next.js, so take all the information here with a grain of salt. Background React offers Server Functions^1, which can be seen as...

ps5-uart

24 pin header near salina EDM-010 emc header 1 5v 2 5v 3 gnd 4 gnd 5 emc gpio a1. pulling low at emc boot causes emc rom to enter uart shell @ 460800 6 uart rx emc 115200 7 uart tx emc 115200 8 3v3, goes low when emc resets 9 0v? 10 gnd 11 titania uart0 tx efc fw: 460800, eap fw: 691200 12 titani...

Linux-for-a-Pentester

🐧 Linux for a Pentester 💀 "Theory is great, but the shell is where the magic happens." This repository is a curated collection of Linux command notes built from real-world labs, CTFs, and hands-on practice. No fluff, just the raw commands and practical notes needed for a Pentester. 📂 Repository...

sn0int

sn0int sn0int pronounced /snoɪnt/ is a semi-automatic OSINT framework and package manager. It's used by IT security professionals, bug bounty hunters, law enforcement agencies and in security awareness trainings to gather intelligence about a given target or about yourself. sn0int is enumerating...