CVE-2010-1205

Sample exploit using CVE-2010-1205 vulnerability in libpng =1.4.2 gregbook - set of sample programs distributed with libpng sources generate - generates malicious png file which triggers heap-overflow while reading the file with libpng steps to reproduce: ./build.sh build all libraries and...

CVE-2023-38545-sample

Quick description This showcases the cURL CVE-2023-38545. It is as lightweight as I could make it. Setup First, build the Docker Image: docker build . -t cveimage Next, we can simply run the image file, creating a temporary Docker Container which will get deleted once the container is stopped:...

unzip_poc

CVE-2022-0529 and CVE-2022-0530 POC for unzip 6.0 CVE-2022-0529 & CVE-2022-0530 https://bugzilla.redhat.com/showbug.cgi?id=2051402 https://bugzilla.redhat.com/showbug.cgi?id=2051395...

leprechaun

Leprechaun .-----. / V \ |...| |.....| .-' '-. .-. .-./ .--. |\ /| .-;.-"-.-;;-, =/ . -;,-;, . .-.-. . / ||'-'|| \ ,'--;.\ .;--' // o \ // --.. o '';,//| || : || |\ ;' \ '.\--' |"""""""|// / ':.// ,/\ | '---'| ||| ; Leprechaun ; ;""|""; \ / | '. vonahisec .' .' / \ '. '-,. .,-' --' --' /...

CVE-2022-0918

CVE-2022-0918 Red Hat CVE page: https://access.redhat.com/security/cve/cve-2022-0918 Github issue with patches linked: https://github.com/389ds/389-ds-base/issues/5242 PoC The PoC application takes in a single IP, either IPv4 or IPv6 will work. By default it will send the message to port 389, thi...

dod-blue-team-network-lab

DoD Blue Team Network Security & Hardening Lab Executive Summary High fidelity defensive security lab simulating a DoD aligned enterprise network. This project demonstrates structured network segmentation, system hardening, centralized telemetry ingestion, detection engineering, adversary...

CVE-2026-98822

A flaw was found in the Linux kernel's mac80211 wireless subsystem. This flaw can lead to information disclosure across network boundaries when transmitting frames across Access Point AP virtual local area networks VLANs. Due to improper station lookup logic, the kernel matches recipient devices...

vcsa-hardening-tool

VCSA Hardening & Logging Tool An automated hardening script for the VMware vCenter Server Appliance VCSA designed to enforce Zero Trust network segmentation and deep forensic auditing. This tool is engineered to mitigate critical risks associated with advanced persistent threats APTs and...

sudo-1.8.3p1-patched

sudo-1.8.3p1-patched This is a custom version of sudo, based on the sudo 1.8.3p1 package as provided by Canonical for Ubuntu 12.04 using the URLs below, with the CVE-2021-3156 patches applied. http://us.archive.ubuntu.com/ubuntu/pool/main/s/sudo/sudo1.8.3p1-1ubuntu3.7.dsc...

CyberDefense-Lab

Cyber Security Lab: Blue Team Infrastructure & Network Defense This laboratory project demonstrates the creation of an integrated "Blue Team" infrastructure, focusing on centralized network security, Intrusion Detection/Prevention Systems IDS/IPS, and Security Information and Event Management SIE...

CVE-2014-3466_PoC

Proof of Concept for CVE-2014-3466 GnuTLS buffer overflow: session id length check Information See: https://bugzilla.redhat.com/showbug.cgi?id=1101932 This is not a weaponized exploit. be warned: this python code is ugly, I pretty much handcrafted the ServerHello and spent only about five fifteen...

looney-tunables-CVE-2023-4911

PoC of CVE-2023-4911 Looney Tunables This is a PoC of CVE-2023-4911 a.k.a. "Looney Tunables" exploiting a bug in glibc dynamic loader's GLIBCTUNABLES environment variable parsing function parsetunables. Getting Started Executing program We can check if target is vulnerable env -i...

context-segmentation

Context Segmentation for SLM Agents This is the implementation of the solution proposed in the scientific paper: Evaluating Context Segmentation in Locally Deployable SLMs for Cybersecurity CTF Tasks Setup Ensure you have Python 3.12.3+ installed along with Docker engine Python environment python...

Occ

Prohibited Items Segmentation via Occlusion-aware Bilayer Modeling ICME 2025 Official PyTorch Implementation of Prohibited Items Segmentation via Occlusion-aware Bilayer Modeling. Paper link: IEEE, Arxiv. Get Started Dependencies Code is successfully tested on Linux with Pytorch 2.1.2 and CUDA...

reachability

-- START DISCLAIMER -- USE AT OWN RISK -- IN NO WAY AM I RESPONSIBLE FOR ANY DAMAGES INCURRED -- IF YOU DON'T HAVE EXPLICT PERMISSION BY THE NETWORK OWNER DO NOT AND I REPEAT DO NOT LAUNCH THIS THIS IS PYTHON WRAPPED AROUND MASSCAN https://github.com/robertdavidgraham/masscan -- END DISCLAIMER--...

CVE-2025-55891

CVE-2025-55891: Heap Corruption in TIFFCP.EXE docuPrinter Pro via Malformed TIFF File Summary A heap corruption vulnerability exists in TIFFCP.EXE, a command-line utility bundled with Neevia docuPrinter Pro, due to the use of an outdated and vulnerable version of libtiff v3.5.7. By supplying a...

CVE-2025-67445

Overview A vulnerability in the TOTOLINK X5000R V9.1.0cu.2415 web management interface allows an unauthenticated remote attacker on the LAN to crash the web service via a segmentation fault. By sending an oversized HTTP POST request to the CGI endpoint, an attacker can trigger memory exhaustion,...

freetype: Fix of 2 CVEs

CVE-2022-27405: Fix segmentation violation via FNTSizeRequest - CVE-2022-27406: Fix segmentation violation via FTRequestSize...

kernel: inet: frags: strip GSO state from fragments before reassembly

A flaw was found in the Linux kernel's network fragment reassembly process. An unprivileged local user, or a guest in a virtualized environment, could craft specially formed IPv4 or IPv6 network fragments that incorrectly retain Generic Segmentation Offload GSO state after reassembly. This...

kernel: inet: frags: strip GSO state from fragments before reassembly

A flaw was found in the Linux kernel's network fragment reassembly process. An unprivileged local user, or a guest in a virtualized environment, could craft specially formed IPv4 or IPv6 network fragments that incorrectly retain Generic Segmentation Offload GSO state after reassembly. This...