47807 matches found
CVE-2025-7771
CVE-2025-7771 — ThrottleStop.sys Arbitrary Physical Memory R/W Full proof-of-concept for the TechPowerUp ThrottleStop.sys driver CVE-2025-7771. A signed, still-loadable kernel driver exposes unvalidated physical memory read and write through two IOCTLs. This repo turns that primitive into a worki...
CVE
Security Research Public vulnerability reports by JunZ-Leo. Published CVE reports Both records below are published in the CVE List and credit JunzLeo VulDB User as the reporter. They were published on April 28, 2025. CVE| Affected product| Component| Vulnerability type| Research report...
wireless-ids
Wireless IDS Intrusion Detection System Wireless IDS is an open source tool written in Python and work on Linux environment. This tool will sniff your surrounding air traffic for suspicious activities such as WEP/WPA/WPS attacking packets. It do the following Detect mass deauthentication sent to...
Astra
Astra REST API penetration testing is complex due to continuous changes in existing APIs and newly added APIs. Astra can be used by security engineers or developers as an integral part of their process, so they can detect and patch vulnerabilities early during development cycle. Astra can...
PSpersist
PSpersist Dropping a powershell script at %HOMEPATH%\Documents\windowspowershell\ , that contains the implant's path , and whenever powershell process is created, the implant will executed too. DEMO...
CVE-2024-29943
CVE-2024-29943 A Pwn2Own SpiderMonkey JIT Bug: From Integer Range Inconsistency to Bound Check Elimination then RCE. This repository contains PoC, Exploit and Analysis Slides for CVE-2024-29943. Demo Demo.mp4 Slides Slides.pdf Reproduce Information Github Git Commit:...
Web-Cache-Vulnerability-Scanner
Web Cache Vulnerability Scanner WCVS is a fast and versatile CLI scanner for web cache poisoning and web cache deception developed by Hackmanit and Maximilian Hildebrand. The scanner supports many different web cache poisoning and web cache deception techniques, includes a crawler to identify...
Windows-Local-Privilege-Escalation-Cookbook
Windows Local Privilege Escalation Cookbook Table of Contents Windows Local Privilege Escalation Cookbook Table of Contents Disclaimer Description Keynote Definition Useful Tools Vulnerabilities References Disclaimer This repository, "Windows Local Privilege Escalation Cookbook" is intended for...
CVE-2026-27641-Flask-Reuploaded
CVE-2026-27641 is a critical security vulnerability affecting versions of the Flask-Reuploaded library. It allows remote attackers to achieve arbitrary file writes Versions affected: 1.5.0 To test the vulnerability: python3 -m venv flaskreuploadedvenv In flaskreuploadedvenv: pip install...
CVE-2025-48384
This repository does not have a README...
IBM-Langflow-CVE-2026-48519-poc
IBM Langflow Pre-auth RCE in Shareable Playgrounds . running on version/s -c ""...
CVE-2018-19320-LPE
CVE-2018-19320 LPE Exploit Description Local Privilege Escalation Exploit of CVE-2018-19320. The exploit uses the exposed functions in gdrv.sys that allow a low-level user to allocate and write data to memory for escalating the privileges to SYSTEM. ScreenShot Tested on: Windows 10 x64 21H1 OS...
cve-2024-41110-checker
CVE-2024-41110 Docker Security Checker This tool is designed to check multiple hosts for vulnerabilities related to CVE-2024-41110 in Docker installations. It specifically looks for vulnerable Docker versions and the use of AuthZ plugins, which can potentially lead to security issues. Features...
CVE-2021-44228-Log4j
Test this content before applying it to production systems. Usage Download the latest package from releases here: https://github.com/VerveIndustrialProtection/CVE-2021-44228-Log4j/releases and then Import the Fixlets, Analyses, and Computer Group into a site and apply computer subscriptions...
cve-2022-42889-text4shell
Install maven - maven-linux 1. Maven install to create the fat jar mvn clean install 2. Docker build docker build --tag=text4shell . 3. Docker run docker run -p 80:8080 text4shell 4. Test the app http://localhost/text4shell/attack?search= 5. Attack can be performed by passing a string...
log4j-detect
log4j-detect Simple Python 3 script to detect the "Log4j" Java library vulnerability CVE-2021-44228 for a list of URL with multithreading The script "log4j-detect.py" developed in Python 3 is responsible for detecting whether a list of URLs are vulnerable to CVE-2021-44228. To do so, it sends a G...
ESP32-BlueJammer
ESP32-BlueJammer - by @emensta Jamming is ILLEGAL! Educational purposes only! BlueJammer-V2, BW16-BlueJammer & ZeroWave for Flipper Zero released! Make your own | Schematics | Hardware layout | PCB's | Demos | Channels | Flashing | 3D case | About | Support me | Website ESP32-BlueJammer The...
CVE-2025-8191
This repository does not have a README...
DHEater
DHEater DHEater is the proof-of-concept implementation of the DHEat attack CVE-2002-20001. It saturates a server's CPU by enforcing Diffie-Hellman ephemeral DHE or elliptic-curve Diffie-Hellman ephemeral ECDHE key exchange over both TLS and SSH. For further information about the attack visit the...