lCTT-Apple-Silicon--Resonance-Vulnerability-CVE-2024-23296

CTT-Apple-Silicon--Resonance-Vulnerability-CVE-2024-23296 Apple Silicon उन आवृत्तियों पर चलता है जो 587 kHz के स्वर्ण अनुपात हार्मोनिक्स हैं: · प्रदर्शन कोर: 3.2 GHz = 587 kHz × 5451 ≈ φ⁸ × 1000 · दक्षता कोर: 2.0 GHz = 587 kHz × 3407 ≈ φ⁷ × 1000 · न्यूरल इंजन: 11.0 GHz = 587 kHz × 18739 ≈ φ¹⁰ ×...

CVE-2025-0282

CVE-2025-0282 Ivanti Connect Secure, Policy Secure और ZTA Gateways - CVE-2025-0282 आदेश: python3 CVE-2025-0282.py urlsIvanti.txt python3 CVE-2025-0282.py TARGET संदर्भ:...

CVE-2020-8254

CVE-2020-8254: Zip Slip in Pulse Secure VPN Windows Client A vulnerability in the Pulse Secure Desktop Client 9.1R9 has Remote Code Execution RCE if users can be convinced to connect to a malicious server. Vendor Disclosure: The vendor's disclosure and fix for this vulnerability can be found here...

CVE-2020-8249

CVE-2020-8249: Buffer Overflow in Pulse Secure VPN Linux Client The root SUID executable pulsesvc, has a function “doupload” that unsafely calls a “sprintf” which can result in a buffer overflow. Because the “sprintf” writes the values on the stack, if a big enough string is passed to it, then it...

CVE-2020-8248

CVE-2020-8248: Privilege Escalation via Zip Wildcard Exploit in Pulse Secure VPN Linux Client The root SUID executable pulsesvc, has a function “doupload” that unsafely calls a zip command with wildcards “”. By writing files with specifically crafted names, in a user- controlled folder...

CVE-2020-8250

CVE-2020-8250: Pulse Secure VPN Linux क्लाइंट में कमांड इंजेक्शन के माध्यम से विशेषाधिकार वृद्धि रूट SUID निष्पादन योग्य pulsesvc में एक फ़ंक्शन “doupload” है जो “HOME” पर्यावरण चर को असुरक्षित रूप से “system” में पास करता है। “HOME” चर में विशेष शैल वर्ण जैसे: “” या “$” जोड़कर, एक हमलावर...

CVE-2026-20079

CVE-2026-20079 Cisco Secure FMC PoC Python proof of concept for the publicly documented Cisco Secure Firewall Management Center authentication-bypass-to-root-RCE chain in CVE-2026-20079. This is not a new vulnerability or independently developed exploit chain. It is a clean-room implementation of...

CVE-2020-12753-PoC

CVE-2020-12753-PoC This repo contains a proof-of-concept for 🔋📱❄️🥾🔓, an SBL1/aboot vuln for Secure EL3 arbitrary code execution on the LG Stylo 4 AMZ/Q710ULM. This is only tested on updates 20a and 20c and with the SBL1 variant of the vulnerability. root@kitploit: - Makefile : Builds...

http-pulse_ssl_vpn.nse

SUMMARY Simple NSE script to detect Pulse Secure SSL VPN file disclosure via specially crafted HTTP resource requests. This exploit reads /etc/passwd as a proof of concept This vulnerability affect 8.1R15.1, 8.2 before 8.2R12.1, 8.3 before 8.3R7.1, and 9.0 before 9.0R3.4. INSTALLATION $ git clone...

CVE-2025-0282

PoC لـ CVE-2025-0282 تجاوز سعة مخزن مؤقت قائم على المكدس عن بُعد دون مصادقة يؤثر على Ivanti Connect Secure وIvanti Policy Secure وبوابات Ivanti Neurons لـ ZTA نظرة عامة هذا استغلال برهان مفهوم لإظهار استغلال CVE-2025-0282، ويستند إلى استراتيجية الاستغلال التي نشرتها watchTowr. يحتوي هذا الـ PoC ع...

CVE-2025-22457

CVE-2025-22457 CVE-2025-22457: Ivanti Connect Secure RCE का पता लगाने के लिए Python Exploit POC Scanner यह स्क्रिप्ट उन Ivanti Connect Secure, Policy Secure, या ZTA Gateways की पहचान करने में मदद करती है जो CVE-2025-22457 के प्रति संवेदनशील हो सकते हैं - यह एक गंभीर अनऑथेंटिकेटेड स्टैक-आधारित बफर...

CVE-2024-22024

CVE-2024-22024 Check for CVE-2024-22024 vulnerability in Ivanti Connect Secure !WARNING FOR EDUCATIONAL PURPOSE AND AUTHORIZED TESTING ONLY. Parameters -u or --targeturl: The target Ivanti Connect Secure ICS URL or file with list of URLs. -c or --attackerurl: The attacker URL generate one using...

CVE-2019-11539

CVE-2019-11539 Original Discovery: Orange Tsai, Meh Chang Authors: Justin Wagner, Alyssa Herrera Thanks to: Orange, Meh Chang, Rich Warren, Alyssa, Mimir Vulnerability Description In Pulse Secure Pulse Connect Secure version 9.0RX before 9.0R3.4, 8.3RX before 8.3R7.1, 8.2RX before 8.2R12.1, and...

pwn-pulse

pwn-pulse.sh Exploit for Pulse Connect Secure SSL VPN arbitrary file read vulnerability CVE-2019-11510 Script authored by braindead @BishopFox. Based on research by Orange Tsai and Meh Chang. Thanks also to Alyssa Herrera and 0xDezzy for additional insights. Huge thanks to bl4ckh0l3z for fixing,...

lazarus-sigma-rules

قواعد سيغما الخاصة بـ Lazarus قواعد سيغما في هذا المستودع أُنشئت بواسطة فريق الاستجابة للكشف والاستجابة Countercept Detection and Response Team التابع لشركة F-Secure لتوفير تغطية كشفية للأدوات والتقنيات والإجراءات التي استخدمتها مجموعة Lazarus مؤخرًا. يمكن العثور على المقالات التي تناقش إنشاء قوا...

FLAIR

F-Secure Lightweight Acquisition for Incident Response FLAIR تصف هذه الوثيقة الغرض والطريقة الأساسية لتشغيل سكربت الاستحواذ FLAIR. الغرض أثناء التحقيق في الحوادث على ممتلكات العملاء، توجد حالات لا يتم فيها نشر أي EDR يمكن لفريق الاستجابة للحوادث IR استخدامه لجمع الأدلة عبر الممتلكات. تم إنشاء FLA...

patch-CVE-2026-31337

التصحيح: CVE-2026-31337 تفاصيل الثغرة CVE : CVE-2026-31337 المنتج : Ivanti Connect Secure الوصف : RCE عبر تجاوز المصادقة الخطورة : حرجة CISA KEV : نعم مؤكد استغلالها في البيئات الحقيقية حالة التصحيح: تم النشر الحقل| القيمة ---|--- تاريخ التصحيح| 2026-08-15 الحالة| تم النشر نُشر إلى| الإنتاج جميع...

cisco-CVE-2023-20075

حول باحث أمني: ly1g3، ly1g3attuta.io بصمة GPG: https://keys.openpgp.org/vks/v1/by-fingerprint/5FE85CE4E8F675F5ABD2C0A33CE8BE447ED6D586 نظرة عامة: تصعيد الامتيازات المحلية والهروب من الصدفة CVE: CVE-2023-20075 الجدول الزمني: اكتشف - ly1g3 أبلغ - ly1g3 أصلح - Cisco Cisco AsyncOS 14.2.0 ESA Cisco...

cisco-CVE-2023-20009

About Security researcher: ly1g3, ly1g3attuta.io GPG fingerprint: https://keys.openpgp.org/vks/v1/by-fingerprint/5FE85CE4E8F675F5ABD2C0A33CE8BE447ED6D586 Overview: Remote Code Execution - RCE from config file CVE: CVE-2023-20009 Timeline: Discovered - ly1g3 Reported - ly1g3 Fixed - Cisco Cisco...

CVE-2026-20251

CVE-2026-20251 — Splunk Secure Gateway jsonpickle डिसीरियलाइज़ेशन RCE शोधकर्ता: Fady Oueslati · ReactiveZero Security Research संदर्भ: 2026FO-SPLUNK-20251 CVSS: 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H स्थिति: खुला — पैच उपलब्ध सारांश एक निम्न-विशेषाधिकार प्राप्त प्रमाणित उपयोगकर्ता KV...