Android-Projector-C2-Malware

Pre-installed C2 Infrastructure and RAT Payload on Android Projectors Technical Analysis Report — Security Research Affected Devices: Multiple Android projectors of projector brands like the Nonete e.g., Model HY260Pro likely also several projectors from Magcubic, Hotack, Huyukang and many more, ...

openssh-cve-2024-6387.sh

OpenSSH CVE-2024-6387 A vulnerability CVE-2024-6387 has been discovered in OpenSSH. Successful exploitation of this vulnerability allows a remote, unauthenticated attacker to execute arbitrary code as root on the target machine. All the glibc-based Linux distributions that have OpenSSH exposed ar...

CVE-2017-16524

CVE-2017-16524 Discovered by Omar Mezrag - 0xFFFFFF Affected Product Samsung Network Video Recorders - Web Viewer 1.0.0.193 on Samsung SRN-1670D Vendor of Product Hanwha / Samsung Security - https://www.hanwhasecurity.com/ Vulnerability type Unrestricted file upload vulnerability Attack Vector...

CVE-2025-32463

CVE-2025-32463 Is a local privilege escalation vulnerability affecting vulnerable versions of sudo. The flaw abuses the sudo -R chroot feature together with the Linux Name Service Switch NSS mechanism to force sudo into loading an attacker-controlled shared library as root. By manipulating...

CVE-2026-44402

CVE-2026-44402 — Voltronic Power SNMP Web Pro 1.1 Unauthenticated RCE -red.svg Critical Unauthenticated Remote Code Execution CVSS 9.8 — Voltronic Power SNMP Web Pro 1.1 This tool exploits CVE-2026-44402 , a vulnerability in the Voltronic Power SNMP Web Pro 1.1 device that allows unauthenticated...

CVE-2024-53691

CVE-2024-53691 https://www.qnap.com/en/security-advisory/qsa-24-28 https://vulners.com/cve/CVE-2024-53691 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N 8.7 "If exploited, the link following vulnerability could allow remote attackers who have gained user access to traverse the fi...

EvilAhenk

CVE-2026-6508 EvilAhenk is a critical security vulnerability in the LiderAhenk Central Management System architecture that allows all clients to execute code with 'root' privileges on each other Unauthorized RCE & Lateral Movement. How the System Works In LiderAhenk, the management panel/central...

CVE-2024-6387-analysis

CVE-2024-6387 OpenSSH Signal Race Condition Vulnerability Analysis Vulnerability Overview CVE-2024-6387 is a signal handling race condition vulnerability in OpenSSH versions 8.5p1 through 9.7p1, known as "regreSSHion". An attacker can continuously attempt within 6-8 hours to execute arbitrary cod...

CVE-2024-3400-

PAN-OS Firewall Command Injection Vulnerability This repository contains a Go script that exploits a Command Injection vulnerability in firewalls running Palo Alto Networks' PAN-OS operating system. The vulnerability, identified as CVE-2024-3400, allows an unauthenticated attacker to execute...

CVE-2026-20131

🚨 CVE-2026-20131 | Cisco FMC Critical RCE Unauthenticated Remote Code Execution in Cisco Secure Firewall Management Center 📌 Overview A critical pre-authentication Java deserialization vulnerability allowing remote attackers to achieve root-level code execution on Cisco FMC appliances. Key...

CVE-2026-29955

KubePlus KubeconfigGenerator Command Injection Vulnerability This vulnerability exists in the kubeconfiggenerator component of KubePlus, allowing attackers with HTTP interface access to inject shell commands via the chartName parameter, execute arbitrary code as root within the container, and ste...

pentest-writeups

pentest-writeups Kioptrix Level 1 writeup - CVE-2003-0201 Samba trans2open Kioptrix Level 1 — Penetration Testing Writeup Author: Amirbek Raxmatullayev @americo444 Date: 2026-06-17 Platform: VulnHub Difficulty: Beginner Objective: Gain root access 1. Environment Setup Component| Details ---|---...

CVE-2026-65400

CVE-2026-65400 For the first time in a while, we've got an RCE on MacOS. Originally discovered by @osxreverser, and later expanded upon by bynar.io. See https://blog.calif.io/p/no-country-for-old-passwords for some more info. This is mostly derived from work by @panchocosil well, Claude..., who...

Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779

Overview In early October 2026, Rapid7 analysts investigated a compromise of a Citrix NetScaler ADC appliance. The appliance was running an affected 14.1 build and was exposed to active exploitation targeting NetScaler authentication and SAML deployments. The intrusion achieved root code executio...

CVE-2021-38647-POC-and-Demo-environment

Details OMIGod - CVE-2021-38647 Open Management Infrastructure OMI, formerly known as NanoWBEM is an open source Common Interface Model CMI management server by Microsoft and The Open Group. OMI is a software agent found on most of Azure's Linux VMs, yet many do not know of it's presence. On...

CVE-2024-3400

CVE-2024-3400 Description A command injection as a result of arbitrary file creation vulnerability in the GlobalProtect feature of Palo Alto Networks PAN-OS software for specific PAN-OS versions and distinct feature configurations may enable an unauthenticated attacker to execute arbitrary code...

CVE-2024-32019-Netdata-ndsudo-Privilege-Escalation-PoC

CVE-2024-32019 Netdata ndsudo Privilege Escalation PoC Summary CVE-2024-32019 is a local privilege-escalation flaw in Netdata’s SUID helper ndsudo that lets a local user execute arbitrary programs as root via an untrusted search path PATH hijacking. The issue exists because ndsudo restricts comma...

CVE-2026-111222

Netgate pfSense CE through 2.9.0 contains a php.ini injection vulnerability that allows authenticated users with General Setup privileges to inject directives by submitting an unvalidated timezone value. Attackers can embed a quote and newline to add autoprependfile pointing at /var/db/zoneinfo,...

CVE-2026-111222 Netgate pfSense CE through 2.9.0 php.ini Injection via Timezone Setting

Netgate pfSense CE through 2.9.0 contains a php.ini injection vulnerability that allows authenticated users with General Setup privileges to inject directives by submitting an unvalidated timezone value. Attackers can embed a quote and newline to add autoprependfile pointing at /var/db/zoneinfo,...

CVE-2026-101982

A Stack-based Buffer Overflow vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows a configured BGP/EVPN peer to cause root code execution on Junos OS or an rpd crash on Junos OS Evolved via protocol-valid route advertisements for an EVPN-VPWS...