Android-Privilege-Escalation-Remote-Access-Vulnerability-CVE-2015-1805

Android-Privilege-Escalation-Remote-Access-Vulnerability-CVE-2015-1805 inject a root exploit as a silent installation to perform a malicious task on the device. Vulnerability AndroRAT does not focus on targeting a specific user but rather works to acquire the confidence of the entire network...

Umbrella

Umbrella Dropper Copyright 2017 Umbrella Written by: Alisson Moretto - 4w4k3 Umbrella is a file dropper dedicated to pentest, its download files on target system are execute them without a double execution of exe, only of embed. To compromise the same target again, you need delete this folder on...

ESFang

ESFang 这是一个专为在 macOS 环境中模块化消费 EndpointSecurity Framework ESF 事件而设计的工具。这是我尝试解决现有工具中遇到的诸多问题的一次努力，这些问题包括静默数据丢失、严格的事件类型消费、缺乏对替代数据事件类型的支持以及文件访问处理器过载等。 该工具在很大程度上借鉴了 Chris Ross、Omark-Ikram 以及 Objective-See 团队在其工具 ProcessMonitor、Appmon 和 EndpointSecurityDemo 中所做的出色工作。我对 ESF...

CVE-2025-66850

Finding Within the ‘LibreNMS’ application, we discovered a reflected Cross-Site Scripting vulnerability; this vulnerability exists in the routing module’s protocol parameter, allowing an attacker to render malicious JavaScript in a victim’s browser. This vulnerability affects all versions from...

COVIDSafe-CVE-2020-12856

COVIDSafe-CVE-2020-12856: A silent pairing issue in bluetooth-based contact tracing apps Authors: Jim Mussared George Robotics, Alwen Tiu The Australian National University A vulnerability has been identified in the implementation of the Android version of Australia's COVIDSafe v1.0.17 and earlie...

vcamper

VCamper VCamper "Version Camper" is a proof-of-concept CLI that reviews a Git commit range for likely silent security fixes. Security fixes often reach public Git history before the advisory trail catches up. A maintenance-looking commit can carry enough evidence for a reviewer to infer the bug...

domhttpx

domhttpx is a google search engine dorker with HTTP toolkit built with python, can make it easier for you to find many URLs/IPs at once with fast time. List Install Usage Flags Basic Usage One Keyword Multiple Keyword Extract Title Page Extract Title Page from Real Path Extract Status Code Extrac...

crlfuzz

CRLFuzz A fast tool to scan CRLF vulnerability written in Go Resources Installation from Binary from Source from GitHub Usage Basic Usage Flags Target Single URL URLs from list from Stdin...

coolermaster-masterctrl-vuln

coolermaster-masterctrl-vuln CVE-2025-52216 – Cooler Master MasterCTRL Silent Installation of Insecure Services...

NoCameraSound

NoCameraSound iOS 14.0-15.7.1 & 16.0-16.1.2 Dies sollte nicht mehr verwendet werden. https://ichitaso.com/iphone/how-to-silence-the-shutter-sound-in-silent-mode/ Starten Sie Ihr Gerät neu, um die Änderungen rückgängig zu machen. iOS14❌ Installation TrollStore AltStore Danksagungen...

CVE-2026-59320

When a container-level ErrorHandler is configured the mitigation for finding 221000, each delivery whose processing throws still permanently consumes one link credit. After initialCredits default 100 failing messages the receiver's credit reaches zero and the broker stops delivering, leaving the...

CVE-2026-81525

The MongoDB client library for PHP does not sufficiently sanitize special elements in application-supplied namespace identifiers before using them to construct the target namespace for database operations. An application that incorporates untrusted text into these identifiers may have operations...

CVE-2019-16941

CVE-2019-16941 Proof-of-Concept: La vulnerabilità richiede condizioni multiple e relativamente improbabili per essere innescata, fatto che ne limita lo sfruttabilità. Tuttavia, serve poco sforzo e comprensione per preparare un payload, dato che può risultare in un'esecuzione arbitraria di codice...

CVE-2026-59320 In Spring AMQP the link credit never replenished on listener exception path

When a container-level ErrorHandler is configured the mitigation for finding 221000, each delivery whose processing throws still permanently consumes one link credit. After initialCredits default 100 failing messages the receiver's credit reaches zero and the broker stops delivering, leaving the...

CVE-2026-59320

CVE-2026-59320 affects Spring AMQP 4.1.0 . When a container-level ErrorHandler is configured, each delivery whose message processing throws an exception permanently consumes one link credit without replenishing it. After the receiver exhausts its initialCredits (default 100 ), the broker stops de...

CVE-2026-81702

opensslencrypt before 1.4.9 fails to re-derive and validate fingerprints when loading identities from identity.json, allowing attackers to substitute public keys in identity stores. Attackers can replace legitimate public keys with their own while maintaining the claimed fingerprint, enabling...

CVE-2024-23700

PoC para CVE-2024-23700, permitindo obter silenciosamente permissões para ler/escrever contatos, SMS, calendário, registro de chamadas e correio de voz, fazer chamadas de saída ou atender chamadas recebidas, manipular configurações de chamada, acessar e controlar notificações enviadas por outros...

PT-2026-82603

openssl encrypt before 1.4.9 fails to re-derive and validate fingerprints when loading identities from identity.json, allowing attackers to substitute public keys in identity stores. Attackers can replace legitimate public keys with their own while maintaining the claimed fingerprint, enabling...

SilentNimvest

SilentNimvest Im Wesentlichen ist SilentNimvest ein Parser für SAM- und Security-Hives, geschrieben in Nim. SilentNimvest liest Schlüssel unter diesen Hives mithilfe der Silent-Harvest-Technik. Mit dieser Technik kann ein einfaches Administrator-Konto, das SeBackupPrivilege aktiviert dank der...

PHP-REVERSE-SHELL

PHP Reverse Shell Potente & Furtivo Questa è una shell inversa PHP potente e furtiva progettata per hacking etico e test di penetrazione. Stabilisce una connessione affidabile e silenziosa verso la tua macchina. ⚠️ Disclaimer Questa shell inversa PHP è sviluppata strettamente per scopi educativi e...