CVE-2016-9793

CVE-2016-9793...

CVE-2022-36446-Webmin-RCE

CVE-2022-36446 — Webmin 1.997 RCE Authenticated Exploit for the Remote Code Execution vulnerability in Webmin versions prior to 1.997, through the Software Package Updates module. How does it work? The Webmin Software Package Updates module does not properly sanitize the u parameter before passin...

asf__tapestry-5_CVE-2019-0207_5-4-4

This repository does not have a README...

yari

YARI - YARA Interactivo Depurador interactivo para el lenguaje YARA escrito en Rust. El depurador llama directamente a libyara evitando la emulación para obtener los resultados más precisos. 🚀 Características: Llamar a funciones de los módulos Obtener el valor de las constantes de los módulos...

yari

YARI - YARA Interactive Interactive debugger for the YARA language written in Rust. Debugger directly calls libyara avoiding emulation to get the most accurate results. 🚀 Features: Call functions from modules Get the value of module constants Evaluate complex expressions Check the matches of...

reverse-engineering-workshop

...

CVE-2018-15499

CVE-2018-15499 PoC code for CVE-2018-15499 You can find out more @ https://downwithup.github.io/CVEPosts.html Vulnerable Software Download @: http://www.gearsoftware.com/support/drivers.php...

GeoServer and GeoTools - Remote Code Execution

GeoTools is an open source Java library that provides tools for geospatial data. Prior to versions 31.2, 30.4, and 29.6, Remote Code Execution RCE is possible if an application uses certain GeoTools functionality to evaluate XPath expressions supplied by user input. Versions 31.2, 30.4, and 29.6...

PAN-OS Management Web Interface - Authentication Bypass

An authentication bypass in Palo Alto Networks PAN-OS software enables an unauthenticated attacker with network access to the management web interface to gain PAN-OS administrator privileges to perform administrative actions, tamper with the configuration, or exploit other authenticated privilege...

D-Link Central WifiManager - Server-Side Request Forgery

D-Link Central WifiManager is susceptible to server-side request forgery. The MailConnect feature on D-Link Central WiFiManager CWM-100 1.03 r0098 devices is intended to check a connection to an SMTP server but actually allows outbound TCP to any port on any IP address, as demonstrated by an...

CVE-2021-42667

CVE-2021-42667 CVE-2021-42667 - SQL Injection vulnerability in the Online event booking and reservation system version 2.3.0. Technical description: An SQL Injection vulnerability exists in the Event management software version 2.3.0. An attacker can leverage the vulnerable "id" parameter in the...

AV_Kernel_Vulns

AVKernelVulns Pocs for Antivirus Software‘s Kernel Vulnerabilities found by myself...

swsim

swSIM Project needs to be cloned recursively. Downloading the ZIP is not enough. swSIM is an all-software SIM card. It's the first publicly available to the best of my knowledge SIM card simulator which does not rely on any SIM hardware to work. Scope A software-only SIM card simulator. It does N...

swsim

swSIM El proyecto necesita clonarse de forma recursiva. Descargar el ZIP no es suficiente. swSIM es una tarjeta SIM totalmente software. Es el primer simulador de tarjeta SIM disponible públicamente hasta donde yo sé que no depende de ningún hardware SIM para funcionar. Alcance Un simulador de...

csw-slides-2024

Developing Secure Software in 2024 Abstract As humanity increases its dependence on computer systems, the need for safe and secure software becomes paramount. Today, everything from planes, trains, and automobiles to toothbrushes and cooktops contain a multitude of tiny computers. Each of these...

wibu-codemeter-analysis

Cryptographic Analysis of WIBU CodeMeter DLL Independent security research on WIBU-Systems CodeMeter protection Responsible Disclosure Vendor notified: December 24, 2025 Disclosure period: 90 days Public release: March 24, 2026 Scope: WibuBz32.dll analysis only Summary Analysis of WIBU CodeMeter...

Supply-Chain

Seguridad en la Cadena de Suministro de Software Una serie completa de tres libros sobre seguridad en la cadena de suministro de software, que cubre amenazas, defensas y gobernanza. Este manuscrito de código abierto proporciona a profesionales de seguridad, desarrolladores y líderes...

gps-sdr-sim

GPS-SDR-SIM GPS-SDR-SIM generates GPS baseband signal data streams, which can be converted to RF using software-defined radio SDR platforms, such as ADALM-Pluto, bladeRF, HackRF, and USRP. Windows build instructions 1. Start Visual Studio. 2. Create an empty project for a console application. 3. ...

urh

The Universal Radio Hacker URH is a complete suite for wireless protocol investigation with native support for many common Software Defined Radios. URH allows easy demodulation of signals combined with an automatic detection of modulation parameters making it a breeze to identify the bits and byt...

panopticon

DEPRECATED The Panopticon project moved toGitlab and was restructed into multiple crates. The Qt GUI was replaced with Verso. I will merge PRs but won't do any substantial work on this version. Most links below are dead. Panopticon - A Libre Cross Platform Disassembler Panopticon is a cross...