2143 matches found
Researchers Demonstrate 27 Attacks Against Major Password Managers
Researchers demonstrate multiple attacks against major password managers, showing how compromised servers and design flaws can expose encrypted vault data...
đ SmarterMail 100.0.9413 GUID File Remote Code Execution
This PHP code implements a fully automated remote exploitation framework targeting SmarterMail version 100.0.9413. It is designed to identify the service, determine the underlying operating system, abuse a file upload mechanism with path traversal, and achieve arbitrary file write leading to remo...
OpenSSL 3.x Realistic ASN.1 / PKCS#12 Denial of Service Tool
This proof of concept builds structurally correct ASN.1 DER / PKCS12 files designed to stress-test OpenSSL's parser and memory handling. It focuses on non-exploitative impacts such as denial of service, excessive memory consumption, deep recursion, malformed lengths, and duplicated/overlapping...
Exploit for CVE-2025-4517
CVE-2025-4517-poc Here is the updated script as a Proof-of-Co...
modelscan-bypass-poc
â ď¸ ModelScan Bypass PoC â Security Research WARNING: This...
modelscan-bypass-poc
â ď¸ ModelScan Bypass PoC â Security Research WARNING: This...
CVE-Free-CRM-Advisories
CVE-Free-CRM-Advisories This repository contains Proof of Con...
Exploit for CVE-2026-0828
đ 0xKern3lCrush-M4te-CVE-2026-0828 Windows BYOVD Research &...
Exploit for Out-of-bounds Write in Netapp C400_Firmware
đ SLUBSTICK Exploitation Research Demonstrating Race Con...
Unicornscan 0.4.51
Unicornscan is an information gathering and correlation engine built for and by members of the security research and testing communities. It was designed to provide an engine that is Scalable, Accurate, Flexible, and Efficient. It is released for the community to use under the terms of the GPL...
Exploit for CVE-2025-36911
WhisperPair Python CLI Fast Pair CVE-2025-36911 Exploit To...
Exploit for CVE-2025-36911
ZWhisper for Linux CVE-2025-36911 WhisperPair Vulnerabilit...
Exploit for CVE-2025-36911
zWhisper CVE-2025-36911 WhisperPair Vulnerability Scanner...
macOS Mavericks 10.9 Local Privilege Escalation Tooling
This is not an exploit but rather a theoretical ROP chain construction framework for macOS Mavericks 10.9 that is inspired by older research...
Bypassing Windows Administrator Protection
Posted by James Forshaw A headline feature introduced in the latest release of Windows 11, 25H2 is Administrator Protection. The goal of this feature is to replace User Account Control UAC with a more robust and importantly, securable system to allow a local user to access administrator privilege...
Exploit for CVE-2025-36911
WhisperPair-PoC-Tool and Research A deep dive into CVE-2025-3...
Vulnserver-Buffer-Overflow-Automation
Vulnserver-Buffer-Overflow-Automation A modular Python 3 autom...
Exploit for Out-of-bounds Write in Ffmpeg
Synthetic Test Case: CVE-2020-12284 CWE: CWE-787 Orig...
Malicious PixelCode Delivery Technique
Malicious PixelCode is a security research project that demonstrates a covert technique for encoding executable files into pixel data and storing them inside images or videos. A lightweight loader retrieves the media file, reconstructs the original binary, and executes it in memory. This project...